Self-Host NetBird + Authentik (Reverse Proxy, Zero Trust & SSO/MFA)
In this video, we set up a self-hosted NetBird instance on a VPS using the official setup script, then add Authentik as our Identity Provider for SSO and MFA. We also show how to sidecar the NetBird client into the Authentik Docker Compose stack and expose Authentik securely using NetBird's built-in reverse proxy — no extra proxy stack needed.
Full written guide & Docker Compose template: https://netbird.io/knowledge-hub/self...
NetBird self-hosting docs: https://docs.netbird.io/selfhosted/se...
Authentik docs: https://docs.goauthentik.io/docs/inst...
0:00 Introduction
0:48 Software Requirements (Docker, JQ, Curl)
1:31 Running the NetBird Setup Script
1:47 DNS Configuration (A Record + Wildcard CNAME)
3:36 NetBird Setup Wizard & Let's Encrypt
4:24 First Login to the NetBird Dashboard
5:10 Installing Authentik with Docker Compose
6:49 Generating Secure Keys for Authentik
7:56 Adding the NetBird Sidecar to the Authentik Stack
10:52 Generating a Setup Key in NetBird
11:51 Starting the Full Stack
12:06 Creating a Network Resource in NetBird
14:26 Setting Up the Reverse Proxy for Authentik
16:13 Configuring Authentik as the IDP in NetBird
17:00 Creating an OAuth2/OIDC Provider in Authentik
17:16 Creating an Application in Authentik
17:42 Adding Authentik as Identity Provider in NetBird
19:00 Testing the Authentik Login Flow
19:31 Managing Users & Groups in Authentik
20:28 Approving Users & Transferring Ownership
21:32 Wrap Up