this post was submitted on 01 Nov 2023
1 points (100.0% liked)

Self-Hosted Main

511 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
[email protected]
1
Is Authentik too much for a HomeLab? (alien.top)
submitted 1 year ago by [email protected] to c/[email protected]
7 comments fedilink hide all child comments
 

I've got 2 hosts. A slightly more powerful sff tower running my media stuff and arr services. VPN gateway that the arr's route through etc. I have a raspberry pi that's running my Adblocker, reverse proxy, Wireguard some stuff for a small business I run... So a website platform and invoice/time logging system.

Anyway these various services are mostly secured by password. Only the website is accessible externally. Any other service is only accessible internally or via Wireguard VPN.

Just at that stage asking myself "where do I draw the line?"

Would be nice to centrally manage logins but I suspect the mismash of services I run wont all support SSO.

I think In today it must be near 25-30 services / containers.

Authentik looks good. But wondering whether it's just going to be something I only use a fraction of and "a bit overkill" for my needs?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 1 year ago

I was actually looking at Keycloak myself due to needing something more “professional looking” and something more “enterprise-y” which translates to our security guy hearing more about keycloak than authentik. They all should work somewhat the same though, and have the same end functionality.

I’m not sure of the technical stuff, but I believe you could use something like Oauth2 Proxy in front of your services, but that may or may not be more trouble than it’s worth, assuming it works the way I think it does. I could be wrong.