Installation

Autentico ships as a single self-contained binary with no runtime dependencies. Choose the method that fits your environment.

Binary

Pre-built binaries for Linux, macOS, and Windows are available on the GitHub Releases page.

1. Download the binary for your platform from the GitHub Releases page.

   For example, on Linux (amd64):

   curl -L https://github.com/eugenioenko/autentico/releases/latest/download/autentico-linux-amd64 -o autentico

   Builds are also available for Linux arm64, macOS (Intel and Apple Silicon), and Windows amd64.

2. Make the binary executable:

   chmod +x autentico

3. Move it somewhere on your $PATH:

   sudo mv autentico /usr/local/bin/

4. Initialize your instance:

   autentico init

   This generates a .env file in the current directory with all required secrets (RSA signing key, HMAC secrets, CSRF secret). Pass --url to set your public URL:

   autentico init --url https://auth.example.com

5. Start the server:

   autentico start

   You should see output like this:

     Autentico OIDC Identity Provider
   
     ONBOARDING: http://localhost:9999/admin/
   
     Server:    http://localhost:9999
     Admin UI:  http://localhost:9999/admin/
     API Docs:  http://localhost:9999/admin/docs/
     WellKnown: http://localhost:9999/.well-known/openid-configuration
     JWKS:      http://localhost:9999/.well-known/jwks.json
     Authorize: http://localhost:9999/oauth2/authorize
     Token:     http://localhost:9999/oauth2/token

   The ONBOARDING line appears only on first run. Visit it to create the admin account.

Docker

Pull the latest image:

docker pull ghcr.io/eugenioenko/autentico:latest

Run with environment variables:

docker run -d \
  --name autentico \
  -p 9999:9999 \
  -v /data/autentico:/data \
  -e AUTENTICO_APP_URL=https://auth.example.com \
  -e AUTENTICO_DB_FILE_PATH=/data/autentico.db \
  -e AUTENTICO_COOKIE_SECRET=changeme-at-least-32-chars \
  -e AUTENTICO_ADMIN_TOKEN=your-secure-admin-token \
  ghcr.io/eugenioenko/autentico:latest

See Bootstrap Settings for all available environment variables.

Docker Compose

See Docker Compose for a full annotated docker-compose.yml that mounts persistent storage, configures SMTP, and sits behind a reverse proxy.

From Source

Requires Go 1.22 or later.

1. Clone the repository:

   git clone https://github.com/eugenioenko/autentico.git
   cd autentico

2. Build the binary:

   make build
   # or: go build -o autentico main.go

3. Initialize and run:

   ./autentico init
   ./autentico start

   On first run you’ll see an ONBOARDING URL — visit it to set up the admin account.

CLI commands

Command	Description
autentico init	Generate a .env file with all required secrets. Accepts --url to set the public URL (default: http://localhost:9999). Errors if .env already exists.
autentico start	Start the server. Reads .env from the current directory, or from the path set in AUTENTICO_ENV_FILE.

Next steps

Once Autentico is installed, follow the Quickstart to initialize your instance, complete onboarding, and register your first client.