diff --git a/docker-compose.yml b/docker-compose.yml
index 50f2363..427448a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -531,7 +531,7 @@ services:
       - "traefik.http.routers.grafana-secure.tls=true"
 
   node-red:
-    image: nodered/node-red:4.1
+    image: nodered/node-red:4.1.17-22
     # command: ["node-red", "--safe"]
     container_name: "node-red"
     logging: *default-logging
diff --git a/node-red/settings.js b/node-red/settings.js
index 10ac105..dc9d3c1 100644
--- a/node-red/settings.js
+++ b/node-red/settings.js
@@ -128,7 +128,8 @@ module.exports = {
     //        permissions: "*"
     //    }]
     //},
-    adminAuth: false,
+    // Leave adminAuth unset when auth is handled by Authelia: Node-RED treats
+    // any non-null value (even false) as "auth enabled" and shows an empty login dialog.
 
 
     // To password protect the node-defined HTTP endpoints (httpNodeRoot), or