AuthPortal

AuthPortal

Application Docker from grtgbln's Repository

Vue d'ensemble

AuthPortal is a lightweight, self-hosted authentication gateway for Plex users. It reproduces Overseerr’s clean popup login (no code entry), stores the Plex token, and issues a secure session cookie for your intranet portal.

Exigences


        Requires a separate Postgres database.
    

Arguments d'exécution

Interface utilisateur Web
http://[IP]:[PORT:8080]/
Réseau
bridge
Privilégié
false

Configuration du modèle

Web UI PortPorttcp

Container Port: 8080

Cible
8080
Défaut
8080
Valeur
8080
Database Connection URLVariable

Postgres database connection URL

Cible
DATABASE_URL
Défaut
postgres://POSTGRES_USER:POSTGRES_PASSWORD@POSTGRES_IP:5432/AuthPortaldb?sslmode=disable
Valeur
postgres://POSTGRES_USER:POSTGRES_PASSWORD@POSTGRES_IP:5432/AuthPortaldb?sslmode=disable
App Base URLVariable

Public URL of this service. If using HTTPS, cookies will be marked Secure.

Cible
APP_BASE_URL
Défaut
http://IP_ADDRESS:PORT
Valeur
http://IP_ADDRESS:PORT
Trusted Proxy CIDR RangesVariable

Comma-separated list of trusted proxy CIDR ranges for forwarded headers

Cible
TRUSTED_PROXY_CIDRS
Media ServerVariable

Type of media server to authenticate against

Cible
MEDIA_SERVER
Défaut
plex|emby|jellyfin
Session SecretVariable

HMAC secret for JWT cookie

Cible
SESSION_SECRET
Data KeyVariable

Base64 32-byte key for sealing tokens at rest

Cible
DATA_KEY
Force Secure CookieVariable

Set to 1 to force Secure on cookies (behind TLS/ingress)

Cible
FORCE_SECURE_COOKIE
Défaut
0|1
Force HSTS HeaderVariable

Set to 1 to force HSTS headers even if APP_BASE_URL is http (when TLS terminates upstream)

Cible
FORCE_HSTS
Défaut
0|1
Authorized Page - External URLVariable

External URL on authorized page

Cible
LOGIN_EXTRA_LINK_URL
Authorized Page - External URL TextVariable

Text for external URL on authorized page

Cible
LOGIN_EXTRA_LINK_TEXT
Unauthorized Page Request - EmailVariable

Email address for unauthorized page request access link

Cible
UNAUTH_REQUEST_EMAIL
Unauthorized Page Request - Email SubjectVariable

Subject for unauthorized page request access email

Cible
UNAUTH_REQUEST_SUBJECT
Plex - Owner TokenVariable

Token from Plex server owner; used to validate server membership.

Cible
PLEX_OWNER_TOKEN
Plex - Server Machine IDVariable

Machine ID of your Plex server (preferred over name).

Cible
PLEX_SERVER_MACHINE_ID
Plex - Server NameVariable

Optional: Plex server name (used if machine ID not set).

Cible
PLEX_SERVER_NAME
Emby - Server URLVariable

URL of your Emby server (e.g. http://IP:PORT).

Cible
EMBY_SERVER_URL
Emby - Server API KeyVariable

API key from your Emby server.

Cible
EMBY_API_KEY
Emby - App NameVariable

Name of the Emby application (for client headers).

Cible
EMBY_APP_NAME
Défaut
AuthPortal
Valeur
AuthPortal
Emby - App VersionVariable

Version of the Emby application (for client headers).

Cible
EMBY_APP_VERSION
Jellyfin - Server URLVariable

URL of your Jellyfin server (e.g. http://IP:PORT).

Cible
JELLYFIN_SERVER_URL
Jellyfin - Server API KeyVariable

API key from your Jellyfin server.

Cible
JELLYFIN_API_KEY
Jellyfin - App NameVariable

Name of the Jellyfin application (for client headers).

Cible
JELLYFIN_APP_NAME
Défaut
AuthPortal
Valeur
AuthPortal
Jellyfin - App VersionVariable

Version of the Jellyfin application (for client headers).

Cible
JELLYFIN_APP_VERSION
OIDC Provider - Signing KeyVariable

PEM-encoded private key for OIDC ID token signing

Cible
OIDC_SIGNING_KEY
OIDC Provider - Issuer URLVariable

Issuer URL for OIDC provider (should match APP_BASE_URL)

Cible
OIDC_ISSUER_URL
Défaut
http://IP_ADDRESS:PORT
Valeur
http://IP_ADDRESS:PORT
Trusted Redirect HostsVariable

Optional, comma-separated allow-list for absolute OIDC redirect_uri hosts

Cible
TRUSTED_REDIRECT_HOSTS
Log LevelVariable

Logging level

Cible
LOG_LEVEL
Défaut
INFO|DEBUG|WARN|ERROR

Télécharger les statistiques

10,162
Total des téléchargements

Détails

Référentiel
modomofn/auth-portal:latest
Dernière mise à jour2026-05-19
Première vue2025-08-21

Exécutez AuthPortal sur Unraid.

AuthPortal est listé dans Community Apps pour Unraid OS. Explorez Unraid pour créer un serveur domestique flexible, un NAS ou un laboratoire domestique.