ForAuth

ForAuth (Forward Auth) - simple reverse proxy with session-cookie auth and notifications on login.

• Security
• Quick start
• Config
• Options
• Local network only
• CURL
• Thanks

Screenshot 2

Securuty

• This app is only safe when used with https
• Use strong password
• Make sure direct access to Target app is closed with firewall or other measures

Quick start

docker run --name forauth \
    -v ~/.dockerdata/ForAuth:/data/ForAuth \
    -p 8800:8800 \ # Proxy port
    -p 8801:8801 \ # Config port
    aceberg/forauth

Then open Config page in browser and set up Auth and Target app.

Config

Configuration can be done through config file, GUI or environment variables. Variable names is config.yaml file are the same, but in lowcase.

Variable	Description	Default
FA_AUTH	Enable Session-Cookie authentication	false
FA_AUTH_EXPIRE	Session expiration time. A number and suffix: m, h, d or M.	7d
FA_AUTH_USER	Username
FA_AUTH_PASSWORD	Encrypted password (bcrypt). How to encrypt password with bcrypt?

Variable	Description	Default
FA_HOST	Listen address for both Config and Proxy	0.0.0.0
FA_PORT	Port for Proxy	8800
FA_PORTCONF	Port for Config page	8801
FA_TARGET	Where to proxy after login (host:port). Example: 192.168.1.1:8840
FA_THEME	Any theme name from https://bootswatch.com in lowcase or additional (emerald, grass, grayscale, ocean, sand, wood)	united
FA_COLOR	Background color: light or dark	dark
FA_NODEPATH	Path to local JS and Themes (node-bootstrap)
FA_NOTIFY	Shoutrrr URL. ForAuth uses Shoutrrr to send notifications. It is already integrated, just needs a correct URL. Examples for Discord, Email, Gotify, Matrix, Ntfy, Pushover, Slack, Telegram, Generic Webhook and etc are here
TZ	Set your timezone for correct time

Options

Key	Description	Default
-d	Path to config dir	/data/ForAuth
-n	Path to local JS and Themes (node-bootstrap)

Local network only

By default, this app pulls themes, icons and fonts from the internet. But, in some cases, it may be useful to have an independent from global network setup. I created a separate image with all necessary modules and fonts.

docker run --name node-bootstrap       \
    -p 8850:8850                       \
    aceberg/node-bootstrap

docker run --name forauth \
    -v ~/.dockerdata/ForAuth:/data/ForAuth \
    -p 8800:8800 \
    -p 8801:8801 \
    aceberg/forauth -n "http://$YOUR_IP:8850"

CURL

To access Target app with curl:

curl -X POST http://localhost:8800 -H "Content-Type: application/x-www-form-urlencoded" -d "username=user&password=pw" -c fileCookie

curl http://localhost:8800 -b fileCookie

Thanks

• All go packages listed in dependencies
• Bootstrap
• Themes: Free themes for Bootstrap
• Favicon and logo: Flaticon