Skip to content
One-click app

authentik Server

One login for all your services: authentik is your own identity provider with OAuth2/OIDC, SAML, LDAP and two-factor – installed with one click in the panel.

Monthly cancellable · no setup fee · prepaid

Recommended spec

The optimal configuration

Our recommendation for authentik: the cheapest package with the right resources – no minimum term.

1
CPU Cores
AMD EPYC vCores
4GB
Memory
DDR4 ECC
20GB
NVMe Storage
NVMe SSD · Ceph HA
4,99€
Price
Monthly

Minimum requirements of authentik (below them the panel refuses the install): 2 GB RAM · 10 GB NVMe

In Detail

Why authentik on Your Own Server?

If you run several self-hosted services, you do not want to maintain accounts in each one. With authentik on your own server you manage users, groups and login rules in one place, without handing your team’s identities to an outside provider.

authentik is an identity provider: applications such as Nextcloud, Grafana or Gitea sign users in through authentik via OAuth2/OpenID Connect, SAML or LDAP, and you set mandatory two-factor, groups and access rules centrally. For apps without their own login integration there is a proxy provider that puts them behind an authentik login. The panel installs server and worker together with a PostgreSQL database and generates all internal keys. On first start authentik creates the admin user “akadmin” with the password from the panel – there is no open initial setup someone else could reach first. Error reporting to the developers is turned off. You can enter a domain during the install or add and change it later in the panel; for single sign-on you will almost always want one, because connected apps expect a fixed HTTPS address. Plan for at least 2 GB of RAM.

  • DDoS Protection
  • Location — Frankfurt DE-CIX
  • Storage — NVMe Ceph HA

Features

All Benefits at a Glance

Full root access — install anything

Install any software, any runtime, any version — no restrictions from panels or shared hosting.

NVMe SSD Ceph HA storage

High-performance NVMe SSDs in a Ceph HA cluster for maximum I/O performance and 3x redundancy.

Enterprise DDoS protection included

Permanent protection with high-capacity filtering — included free with every server.

Full SSH root access

Connect anytime via SSH and manage your server with full administrator privileges.

VXLAN private networks

Connect multiple servers in an isolated VXLAN Layer 2 network — separated from the internet and without public IPs.

Runs continuously — no sleep mode

No sleep mode and no shutdown when idle: your server keeps running as long as its term is paid.

Always included

Included with every root server

Enterprise DDoS protection included Full root access — install anything NVMe SSD Ceph HA storage Runs continuously — no sleep mode Low latency — Frankfurt DE-CIX 1× IPv4 + /64 IPv6

All Root Server Packages

Choose the package that best fits your project

Every one of these packages meets the minimum requirements of authentik.

RootPaket-2

5,99€ Monthly

  • 2 AMD EPYC vCores
  • 6 GB DDR4 RAM
  • 50 GB NVMe SSD
  • 1× IPv4 + /64 IPv6
  • DDoS Protection Included
View Packages

RootPaket-3

9,99€ Monthly

  • 4 AMD EPYC vCores
  • 16 GB DDR4 RAM
  • 80 GB NVMe SSD
  • 1× IPv4 + /64 IPv6
  • DDoS Protection Included
View Packages

RootPaket-4

19,69€ Monthly

  • 6 AMD EPYC vCores
  • 24 GB DDR4 RAM
  • 130 GB NVMe SSD
  • 1× IPv4 + /64 IPv6
  • DDoS Protection Included
View Packages

RootPaket-5

30,49€ Monthly

  • 8 AMD EPYC vCores
  • 32 GB DDR4 RAM
  • 180 GB NVMe SSD
  • 1× IPv4 + /64 IPv6
  • DDoS Protection Included
View Packages

RootPaket-6

46,79€ Monthly

  • 8 AMD EPYC vCores
  • 48 GB DDR4 RAM
  • 200 GB NVMe SSD
  • 1× IPv4 + /64 IPv6
  • DDoS Protection Included
View Packages

Get Started in 3 Steps

Get Started in 3 Steps

1

Order a root server with at least 2 GB RAM

2

Pick authentik under “Apps” in the panel, optionally enter a domain

3

Log in as akadmin at /if/admin/ and create your first application with a provider

  • Admin account created during the install
  • Own domain with HTTPS (Let’s Encrypt) possible
  • The install usually takes about 5 minutes
  • Runs on Ubuntu, Debian, AlmaLinux and Rocky Linux

More one-click apps: Vaultwarden · Nginx Proxy Manager · Headscale · WireGuard (wg-easy) · WordPress · Nextcloud · Coolify · Open WebUI + Ollama · Jellyfin · Forgejo / Gitea

Frequently Asked Questions

Answers to the most important questions

Which applications can I connect?
Anything that supports OAuth2/OpenID Connect, SAML or LDAP – which covers most self-hosted services. Apps without such support go behind the authentik login via the proxy provider.
Do I need a domain?
Not for trying it out; authentik also runs on the IP and port 9001. For single sign-on we recommend a domain with HTTPS, which you can enter during the install or later in the panel.
Does authentik cost extra?
The freely available version of authentik costs nothing. The vendor sells some enterprise features under licence; with us you only pay for the root server package.
How do I back up my configuration?
All users, providers and rules live in the PostgreSQL database. Back up the server regularly with the server backups in the panel and, if needed, also export the database with pg_dump.

Get Started Now

Single sign-on for your services on your own server – from €4.99 a month.