Traefik Forward Auth v4

Traefik Forward Auth is a simple service that provides authentication and SSO with OAuth2, OpenID Connect, and Tailscale Whois for the Traefik reverse proxy.

Highlights#

• Supports authentication with Google, Microsoft Entra ID (formerly Azure AD), GitHub, and generic OpenID Connect providers including Auth0, Okta, Pocket ID
• Single Sign-On with Tailscale Whois, similarly to Tailscale’s nginx-auth
• Protect multiple Traefik services with a single instance of Traefik Forward Auth

Releases#

The Docker image is available on GitHub Packages. Container images are multi-arch and run on linux/amd64, linux/arm64, and linux/arm/v7.

Using the 4 tag is recommended:

ghcr.io/italypaleale/traefik-forward-auth:4

You can also pin to the latest patch release as found in the Releases page :

ghcr.io/italypaleale/traefik-forward-auth:4.x.x

Start here#

• Quickstart
• Configuration
• Supported Providers
• Advanced Topics