Basic authentication
HTTP basic authentication requires a username and password before Traefik forwards a request to a resource. Coolify can generate the required Traefik middleware labels for standard applications. Docker Compose applications and services use labels in their Compose file.
HTTP basic authentication protects a route with one shared credential. It does not replace application accounts, role-based access, multi-factor authentication, or single sign-on.
Protect a resource
Choose the path that matches how the resource is deployed.
Coolify hashes the password and generates the Traefik middleware when you enable the built-in setting.
Open the application settings
Open the application, select Configuration > General, then find HTTP Basic Authentication.
Add the credentials
Enable HTTP Basic Authentication, then enter a Username and Password. Save the application settings.
Keep Readonly labels enabled so Coolify continues to generate the proxy labels.
Redeploy and verify
Redeploy the application. Open its domain in a private browser window and confirm that the browser requests the new credentials before loading the application.