Layer 3 · self-hosting reality check
What it actually takes to self-host authentik
The docs say 2 GB. In practice you want 4 GB. Here is the honest version — real requirements, real monthly cost, what you will be maintaining, and the one thing that catches people out.
Usually reached from Auth0 alternatives, where authentik is one of the picks.
Wondering whether you need to at all? Is Auth0 free? — what the free tier actually allows, and where the wall is.
| RAM — documented minimum | 2 GB |
|---|---|
| RAM — what it really needs | 4 GB |
| CPU | 2 vCPU |
| Disk | Small — under 10 GB unless you retain events aggressively |
| Monthly cost | $15–25/mo, against Auth0 pricing that climbs steeply past the free tier |
| Setup time | Half a day for the server, longer per application you integrate |
| How you install it | docker compose — server, worker, PostgreSQL and Redis |
| Ongoing maintenance | Moderate, and the risk is concentrated: this is the front door to everything behind it. |
| Where it stops scaling | Thousands of users comfortably. The flow and policy engine is powerful and correspondingly easy to misconfigure. |
The thing that catches people out
You are now the single point of failure for logging into every application you put behind it. If Authentik is down, nobody signs into anything — including the tools you would use to fix Authentik. Keep a documented break-glass local admin account on the critical systems, and never put your monitoring behind the SSO that monitoring is supposed to watch.
When not to self-host authentik
You need SOC 2 evidence for your identity provider, or you cannot own an incident at 3am on the service that gates all the others.
Every guide here carries this section. A site that only ever tells you to self-host is selling something — the useful answer is sometimes no.
Other Layer 3 self-hosting guides
Common questions
- How much RAM does authentik actually need?
- 4 GB in practice. The documented minimum is 2 GB, which is the figure at which the process starts rather than the figure at which it works under real use. 2 vCPU alongside it.
- What does self-hosting authentik cost per month?
- $15–25/mo, against Auth0 pricing that climbs steeply past the free tier This is commodity VPS pricing and excludes your time, which is the larger cost for most people — budget for moderate, and the risk is concentrated: this is the front door to everything behind it.
- How long does it take to set up authentik?
- Half a day for the server, longer per application you integrate, via docker compose — server, worker, PostgreSQL and Redis.
- When should I NOT self-host authentik?
- You need SOC 2 evidence for your identity provider, or you cannot own an incident at 3am on the service that gates all the others.
- What is the most common mistake when self-hosting authentik?
- You are now the single point of failure for logging into every application you put behind it. If Authentik is down, nobody signs into anything — including the tools you would use to fix Authentik. Keep a documented break-glass local admin account on the critical systems, and never put your monitoring behind the SSO that monitoring is supposed to watch.