6 free tools that should be on every self-hoster's machine:
#Authentik, Simple way to add SSO to your app stack
#NginxProxyManager, For your reverse proxy needs
#UptimeKuma, To get notified when your services go down
#Portainer Make container management a lot easier
#Tailscale Remotely access your arsenal of services
#Kopia Back up your container volumes
https://www.xda-developers.com/free-tools-that-should-be-on-every-self-hosters-machine/

Ugggh why do so many useful services start with "Okay so setup docker" first? These things do NOT need to be containers! There are services that benefit from being containerized, but things like Authentik and Immich gain pretty much nothing! Docker as an option is fine, but making it the only install method is so backwards!
/rant

#homelab #linux #docker #authentik #immich

I've just set up #authentik and configured #Grafana to use it. I also protected my #jaeger instance with it via proxy auth.

It's quite cool!

#auth #oauth #sso

Playing around with #Authentik, #OpenCloud and #Mailcow.
And everything works!

Now the even harder part: documenting stuff, creating some public repos and a blog post.

Too bad the Authentik #terraform provider has currently some bugs that prevent the configuration of the redirect-urls (so I heard).

Install #Authentik IdP on #Debian VPS This article provides a guide to install Authentik IdP on #Debian VPS.
What is Authentik?
Authentik is an open-source Identity Provider (IdP) designed to handle authentication and authorization for applications and users. It offers centralized identity management and is highly flexible, making it suitable for organizations of all sizes. Authentik ...
Continued 👉 https://blog.radwebhosting.com/install-authentik-idp-on-debian-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #installguide #letsencrypt #identitymanagement #vpsguide #reverseproxy

Getting around to deploying Authentik on my cluster, and I'm a bit surprised by the example values on artifacthub.

Is it common practice in Kubernetes to mount secrets as volumes so you can reference them like that?

https://artifacthub.io/packages/helm/goauthentik/authentik#advanced-values-examples

#homelab #kubernetes #authentik

Well tonight I planned to tweak my #Authentik config so it would be a little less aggressive at prompting me to reauth. Technically I have succeeded, in that now if you click 'cancel' on the passkey Auth window, it errors correctly, but then if you navigate back to the page, it logs you straight in without you ever actually presenting a passkey. I'm currently rolling back that change now to the snapshot I took before I started, then I'll work out what I did wrong, because it's probably impressively stupid.

Mình vừa thiết lập hệ thống zero-trust cho homelab: Cloudflare Access + Authentik + YubiKey để bảo mật ứng dụng web, trong khi Proxmox vẫn riêng tư qua Tailscale. Sạch sẽ, dễ quản lý và có audit logs đầy đủ! 🔒

#Homelab #ZeroTrust #BảoMậtMạng #SelfHosted #Cloudflare #Authentik #YubiKey #Tailscale

https://www.reddit.com/r/selfhosted/comments/1njxyn9/my_homelabs_zerotrust_edge_cloudflare_access/

Install #Authentik IdP on #Debian VPS This article provides a guide to install Authentik IdP on #Debian VPS.
What is Authentik?
Authentik is an open-source Identity Provider (IdP) designed to handle authentication and authorization for applications and users. It offers centralized identity management and is highly flexible, making it suitable for organizations of all sizes. Authentik ...
Continued 👉 https://blog.radwebhosting.com/install-authentik-idp-on-debian-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #reverseproxy #letsencrypt #vpsguide #installguide #identitymanagement

Install #Authentik IdP on #Debian VPS This article provides a guide to install Authentik IdP on #Debian VPS.
What is Authentik?
Authentik is an open-source Identity Provider (IdP) designed to handle authentication and authorization for applications and users. It offers centralized identity management and is highly flexible, making it suitable for organizations of all sizes. Authentik ...
Continued 👉 https://blog.radwebhosting.com/install-authentik-idp-on-debian-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #installguide #letsencrypt #reverseproxy #identitymanagement #vpsguide

I got passkey login working in Authentik​:neocat_floof:​

I'm.... Not exactly sure how?

I also setup an email to notify me when a user is created (for when a friend uses the invite link)

Next up: oops synapse is still kinda broken? Then recipe app, then I should work more on this file server for my parents

#Kubernetes #Homelab #Authentik

Nobody has used the invite link I sent for the new auth system 😭

meanwhile adding nextcloud and grafana was actually nice and smooth

argocd should also be easy... the recipe app and synapse will probably be horrible?
#HomeLab #SelfHosted #Authentik

ok yeah authentik is really slick

The reverse proxy feature is going to be huge for this setup

I just need to figure out how to automate this better, something involving their blueprint feature, or maybe sigh terraform
#HomeLab #Kubernetes #Authentik

Ok fine . Maybe I should look into Authentik to replace keycloak

anyone have thoughts/experience?

#Kubernetes #Homelab #Keycloak #Authentik

Install #Authentik IdP on #Debian VPS This article provides a guide to install Authentik IdP on #Debian VPS.
What is Authentik?
Authentik is an open-source Identity Provider (IdP) designed to handle authentication and authorization for applications and users. It offers centralized identity management and is highly flexible, making it suitable for organizations of all sizes. Authentik ...
Continued 👉 https://blog.radwebhosting.com/install-authentik-idp-on-debian-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #vpsguide #installguide #identitymanagement #reverseproxy #letsencrypt

#Authentik as an IDC/OIDC proxy looks so freaking easy to use and straightforward. Keycloak, ory, and others are so many others have all the parts but the docs on Authentik are so straight forward.

Check out these "core concepts" I understand what I'm getting into now!

- https://docs.goauthentik.io/terminology/
- https://docs.goauthentik.io/core/architecture/

Install #Authentik IdP on #Debian VPS This article provides a guide to install Authentik IdP on #Debian VPS.
What is Authentik?
Authentik is an open-source Identity Provider (IdP) designed to handle authentication and authorization for applications and users. It offers centralized identity management and is highly flexible, making it suitable for organizations of all sizes. Authentik ...
Continued 👉 https://blog.radwebhosting.com/install-authentik-idp-on-debian-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #reverseproxy #installguide #vpsguide #identitymanagement #letsencrypt

Install #Authentik IdP on #Debian VPS This article provides a guide to install Authentik IdP on #Debian VPS.
What is Authentik?
Authentik is an open-source Identity Provider (IdP) designed to handle authentication and authorization for applications and users. It offers centralized identity management and is highly flexible, making it suitable for organizations of all sizes. Authentik ...
Continued 👉 https://blog.radwebhosting.com/install-authentik-idp-on-debian-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #reverseproxy #identitymanagement #vpsguide #installguide #letsencrypt

Habe gerade #MAS für unseren #Synapse-Server rollenspiel.chat eingerichtet.

MAS (Matrix Authentication Service) ist ein externer Authentifizierungsdienst für Matrix-Homeserver, der den internen Login-Mechanismus ersetzt und vollständig für Benutzerkonten und Zugriffstoken verantwortlich ist.
Warum auch immer ein externer Dienst dafür nötig ist.

Jetzt kann man sich jedenfalls mit #authentik auch an #ElementX anmelden.

Weitere Infos:
https://element-hq.github.io/matrix-authentication-service/

#Matrix #rollenspielchat