Mastodon

3 posts3 participants0 posts today

Sebastian MangelsdorfJust did the chores and kicked out <a href="https://metalhead.club/tags/k3s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#k3s</a>, <a href="https://metalhead.club/tags/longhorn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#longhorn</a>, <a href="https://metalhead.club/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> and <a href="https://metalhead.club/tags/tekton" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tekton</a>, hello <a href="https://metalhead.club/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> and <a href="https://metalhead.club/tags/hugo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hugo</a> Less complexity, more fun.

Yehor 🇺🇦I have <a href="https://techhub.social/tags/Authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Authentik</a> now. Set it up for <a href="https://techhub.social/tags/Outline" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Outline</a>, <a href="https://techhub.social/tags/KitchenOwl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KitchenOwl</a>, and even <a href="https://techhub.social/tags/SynologyDSM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SynologyDSM</a>! <a href="https://techhub.social/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a> <a href="https://techhub.social/tags/selfhosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosted</a> <a href="https://techhub.social/tags/selfhosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosting</a> <a href="https://techhub.social/tags/selfhost" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhost</a>

tobiasHab meinem blog mal ein neues theme verpasst, eine Anleitung zu <a href="https://social.xanten.cc/tags/tinyauth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tinyauth</a> geschrieben und die <a href="https://social.xanten.cc/tags/Immich" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Immich</a> und <a href="https://social.xanten.cc/tags/pocketid" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pocketid</a> Anleitung an die neusten Versionen angepasst. tinyauth ist ziemlich cool, ein super lightweight <a href="https://social.xanten.cc/tags/authelia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authelia</a> oder <a href="https://social.xanten.cc/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> alternative geschrieben in <a href="https://social.xanten.cc/tags/golang" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#golang</a> <a href="https://2tap2.be/posts/tinyauth/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://2tap2.be/posts/tinyauth/</a><a href="https://social.xanten.cc/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a> <a href="https://social.xanten.cc/tags/opensouce" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensouce</a> <a href="https://social.xanten.cc/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a>

gyptazyProxmox in Enterprises: I'm often asked, 'Can we use our Active Directory, LDAP, or OIDC with Proxmox?' Yes, you can!Let's have quick dive into installing and configuring Authentik and configure Proxmox VE to use OIDC as an additional authentication realm.<a href="https://mastodon.gyptazy.com/tags/Proxmox" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Proxmox</a> <a href="https://mastodon.gyptazy.com/tags/ProxmoxVE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ProxmoxVE</a> <a href="https://mastodon.gyptazy.com/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> <a href="https://mastodon.gyptazy.com/tags/Authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Authentik</a> <a href="https://mastodon.gyptazy.com/tags/OpenID" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenID</a> <a href="https://mastodon.gyptazy.com/tags/OpenIDConnect" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenIDConnect</a> <a href="https://mastodon.gyptazy.com/tags/OIDC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OIDC</a> <a href="https://mastodon.gyptazy.com/tags/EntraID" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EntraID</a> <a href="https://mastodon.gyptazy.com/tags/enterprise" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enterprise</a> <a href="https://mastodon.gyptazy.com/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a><a href="https://gyptazy.com/proxmox-authentik-oidc-install-configure-and-connect-authentik-to-proxmox-ve/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://gyptazy.com/proxmox-authentik-oidc-install-configure-and-connect-authentik-to-proxmox-ve/</a>

Chris Hayesomg, what started as "let's bring Authentik up to the latest version", turned into "Authentik requires Postgres to be upgraded", turned into "Postgres needs me to dump and reimport the data to upgrade" turned into "sh*t, my dump failed and I already deleted the docker volume" turned into "my data is gone, and now I'm setting up a fresh Authentik server" <a href="https://floss.social/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> <a href="https://floss.social/tags/Docker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Docker</a>

Thestaroftheworlds<a href="https://fuzzytacular.net/@dattas" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@dattas</a> I still Can't get it workingI created the authentik provider with applicationBut in Immich it asks for the issuer URL.But what do I put. Say my URL is dog.com and it forwards to my immich server where my authentik is also setupSo do I just put <a href="Https://www.dog.com/application/o/immich" rel="nofollow noopener noreferrer" translate="no" target="_blank">Https://www.dog.com/application/o/immich</a>I try this but no luck. So I'm stuck It just spins and timesout<a href="https://meow.social/tags/immich" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#immich</a> <a href="https://meow.social/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a>

Rémi :heart_trans:Anyone have leads on getting into the IT space ? I have experience maintaining services like <a href="https://tech.lgbt/tags/nextcloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nextcloud</a> <a href="https://tech.lgbt/tags/Authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Authentik</a> <a href="https://tech.lgbt/tags/Vaultwarden" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Vaultwarden</a> and many more. I also maintain physical servers that have a pretty high uptime.I do also have customer service experience so I can do helpdesk for end users. If you have any leads on US remote opportunities or would like to take a look at my resume to see if there's any way to spice it up to look more approachable for these types of positions, please let me know and lets get me <a href="https://tech.lgbt/tags/fedihired" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fedihired</a> !

Paco Hope #resistSo I was messing with <a href="https://infosec.exchange/tags/drupal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#drupal</a> in the <a href="https://infosec.exchange/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a> and I wanted to turn on <a href="https://infosec.exchange/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> with <a href="https://infosec.exchange/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a>.Somehow I didn’t find the official drupal OIDC module, I found this other one. I installed it, got it configured, and the first time I tried to login, it said “whoops, you have to purchase this module to use it.” Fine. I like supporting software, what does it cost?$250/year!? To LOG IN? F that. One of its key selling points is how easy it is to configure. If I was configuring it often, maybe I could see that. But OIDC and SAML are the kinds of things you set up once per lifetime. Make it as hard as you want (many apps do!) I only have to get through it once.I mean $10? Even as much as maybe $50 I might have paid once. But I refuse to pay annually for the ability to login. <a href="https://infosec.exchange/tags/selfhosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosted</a>

Audric<a href="https://tkz.one/tags/ayuda" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ayuda</a> fediverso <a href="https://tkz.one/tags/tailscale" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tailscale</a> <a href="https://tkz.one/tags/selfhosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosting</a> <a href="https://tkz.one/tags/ayudaTec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ayudaTec</a> estoy probando nuevo setup red interna, usando funnel (tailscale serve) para exponer en web (dentro de tailscale) aplicaciones en la raspberry. ejemplo: tengo <a href="https://tkz.one/tags/komodo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#komodo</a> en 127.0.0.1:9120. pero quiero poner varios funnels a la vez, como por ejemplo cockpit en 9090. se puede con --set-path<a href="https://tailscale.com/kb/1242/tailscale-serve#serve-command-flags" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://tailscale.com/kb/1242/tailscale-serve#serve-command-flags</a>y funciona: (vease primer pantallazo)pero no me cargan las aplicaciones. por el puto path. vease segundo pantallazolas aplicaciones buscan todos los archivos en el root / y no en /komodo /cockpit. o lo que sea. y como resultado, no carga nada. todo rotoprobe poner un reverse proxy y hacerle rewrite a las urls. pero aparte de ya parecerme muy absurdo: no puedo. al intentar desplegar nginx proxy manager (pero me pasaria con cualquier otro) me dice, con razon: que el puerto 443 esta siendo utilizado ya y que me peine. (siento la parrafada, pero por explicarme bien, si alguien me puede dar otra solucion) la intencion de todo eso es hacer segura una red interna en la raspberry que pueda acceder servicios por urls sin saberme de memoria todos los puertos, y que pueda usar un gestor de contraseña para cada servicio sin tener que hacer copiar pegar manualmente porque no entienden de puertos.problema muy primer mundista, ya lo se. pero me divierte.idealmente quisiera poner un IAM como <a href="https://tkz.one/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://tkz.one/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> <a href="https://tkz.one/tags/authelia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authelia</a> o alguno de esos, con 2FA. pero soy demasiado inutil para configurarlos. me viene muy grande ese mundo aun. pero seria el objetivo final.<a href="https://xarxa.cloud/@t3rr0rz0n3" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@t3rr0rz0n3</a> <a href="https://rebel.ar/@matiargs" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@matiargs</a> <a href="https://tkz.one/@trankten" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@trankten</a> <a href="https://neopaquita.es/@sam" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@sam</a> <a href="https://gts.maverick-hq.org/@z3r0" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@z3r0</a>

Chad :vbike:Anyone else out there running authentik in their home network? I’m starting to roll it out on my public-facing apps, but I’m nervous about adding another layer to the cake.<a href="https://vault37.xyz/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> <a href="https://vault37.xyz/tags/HomeLab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HomeLab</a> <a href="https://vault37.xyz/tags/selfhosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosting</a> <a href="https://vault37.xyz/tags/selfhosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosted</a> <a href="https://vault37.xyz/tags/selfhost" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhost</a>

Steffo :steffo:So... I switched from Keycloak to authentik. And this is how it went!<a href="https://steffo.blog/i-switched-from-keycloak-to-authentik/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://steffo.blog/i-switched-from-keycloak-to-authentik/</a>Sure, it's not the best blog post, but it's better than nothing, I guess.<a href="https://fellies.social/tags/blog" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#blog</a> <a href="https://fellies.social/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> <a href="https://fellies.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://fellies.social/tags/selfhost" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhost</a>

Nic Roland :mastodon:Okay, authentik is up! Took a while, I was fighting against flux and the helm release because it deployed with the wrong StorageClass (I forgot to have that configuration ready before release.) Helm wasn't able to modify the PVC because they're immutable, updating the release has to wait for the initial release to succeed (which it won't) or timeout and flux is quiet on the reasons for all of this unless you know where to look 😔 lots of learning was had though! Anyway, admin and personal user accounts created, MFA enabled. Got my first application integrated too! (actual budget)What next? The world is my oyster... Probably gitea or semaphore. I'm hesitant to integrate services like jellyfin before I have more users onboarded and this gives me an opportunity to experiment with other edge cases like other providers and service accounts and such <a href="https://techhub.social/tags/selfhosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosted</a> <a href="https://techhub.social/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a> <a href="https://techhub.social/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> <a href="https://techhub.social/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a> <a href="https://techhub.social/tags/fluxcd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fluxcd</a> <a href="https://techhub.social/tags/gitops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gitops</a> <a href="https://techhub.social/tags/helm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#helm</a>

HabrМой опыт настройки SSO OpenID Connect в 1С с помощью AuthentikПри внедрении единой системы аутентификации в компании я столкнулся с задачей организовать SSO-доступ к 1С через протокол OpenID Connect. За основу я взял статью на InfoStart ( <a href="https://infostart.ru/1c/articles/1538390/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://infostart.ru/1c/articles/1538390/</a> ), однако в качестве провайдера аутентификации использовал не Keycloak, как в оригинале, а Authentik — современную и удобную альтернативу с простым UI и богатым функционалом.<a href="https://habr.com/ru/articles/895294/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://habr.com/ru/articles/895294/</a><a href="https://zhub.link/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a> <a href="https://zhub.link/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> <a href="https://zhub.link/tags/authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentication</a> <a href="https://zhub.link/tags/1c" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#1c</a> <a href="https://zhub.link/tags/%D1%82%D1%83%D1%82%D0%BE%D1%80%D0%B8%D0%B0%D0%BB" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#туториал</a>

Robin VleijSpent way too much time today setting up <a href="https://social.vleij.com/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> and moving over my self hosted stuff to SSO... Good stuff.

christianlempaCheck out this insightful 🎬 video, in which I show you how to set up a self-hosted AI platform in your HomeLab using :- Ollama - OpenWebUI - Traefik - AuthentikWatch Now & Subscribe 👉 <a href="https://youtu.be/RQFfK7xIL28?si=6hVHdWZL0VFTDsf8" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://youtu.be/RQFfK7xIL28?si=6hVHdWZL0VFTDsf8</a><a href="https://mastodon.social/tags/HomeLab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HomeLab</a> <a href="https://mastodon.social/tags/Ollama" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ollama</a> <a href="https://mastodon.social/tags/OpenWebUI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenWebUI</a> <a href="https://mastodon.social/tags/Traefik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Traefik</a> <a href="https://mastodon.social/tags/Authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Authentik</a> <a href="https://mastodon.social/tags/TechTips" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechTips</a>

NobleMajoI have now installed and tested Authentik for CoreUnit.NET. So far I am satisfied. Keycloak, dex and other IDP's made me dissatisfied in some steps. As a developer I just dont like the container image taging, please use semver so I can pin major/minor versions. <a href="https://mastodon.social/tags/Authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Authentik</a> <a href="https://mastodon.social/tags/CoreUnitNET" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CoreUnitNET</a> <a href="https://mastodon.social/tags/IDP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IDP</a> <a href="https://mastodon.social/tags/Keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keycloak</a> <a href="https://mastodon.social/tags/Dex" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Dex</a> <a href="https://mastodon.social/tags/Containerization" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Containerization</a> <a href="https://mastodon.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevOps</a> <a href="https://mastodon.social/tags/SoftwareDevelopment" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SoftwareDevelopment</a> <a href="https://mastodon.social/tags/SemVer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SemVer</a> <a href="https://mastodon.social/tags/VersionControl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VersionControl</a> <a href="https://mastodon.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://mastodon.social/tags/IdentityManagement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IdentityManagement</a> <a href="https://mastodon.social/tags/DeveloperExperience" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DeveloperExperience</a> <a href="https://mastodon.social/tags/TechSatisfaction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechSatisfaction</a> <a href="https://mastodon.social/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> <a href="https://mastodon.social/tags/OAUTH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OAUTH</a>

viqRunning <a href="https://social.hackerspace.pl/tags/Authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Authentik</a> with `latest` tag was convenient for <a href="https://social.hackerspace.pl/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a>, but they're moving away from making it possible (edit: from having :latest tag available, nothing else changes). What are the alternatives? Is there maybe something like "<a href="https://social.hackerspace.pl/tags/dependabot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dependabot</a> but for <a href="https://social.hackerspace.pl/tags/kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#kubernetes</a> images"? (I'm currently running on <a href="https://social.hackerspace.pl/tags/podman" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#podman</a> on nixos, but I'm considering finally playing with <a href="https://social.hackerspace.pl/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#k8s</a>, and regardless, this should be able to make it so I have proper image on nixos as well, I think)

ZrnekKdyž už používáte ten <a href="https://mastodonczech.cz/tags/cloudflaretunnel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloudflaretunnel</a> pro přístup k docker aplikacím na vaší NAS, tak <a href="https://mastodonczech.cz/tags/Authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Authentik</a> je vlastně dobrá věcička. Aspoň nemusíte vyplňovat email a zadávat pin kód. Ale on se dá použít i pro login i do těch aplikací. A můžete ho hostit u sebe. <a href="https://mastodonczech.cz/tags/selfhosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosted</a> <a href="https://goauthentik.io/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://goauthentik.io/</a>

OliverHas anyone managed to implement a password expiration policy in an <a href="https://lfnt.site/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> flow? There's little to no documentation available and I can't figure it out for the life of me 🙈

The UberduckI'm looking at setting up a bunch of self hosted services to replace our (self, family, friends) dependence on corporate cloud stuff. Email (custom, since none of the Just Add Server offerings do everything I need for free), shared drive (likely nextcloud, ugh), docs (likely collabora), jitsi for video, discourse for group forums, and so on. I'd like to make all of this SSO, to the extent that it reasonably can be. I'm probably going to use FreeIPA as the identity source of truth, but I'm finding that there are enough new things I need to learn about centralized authentication that I'm having a hard time finding a starting point that doesn't require a bunch of other context. So I'm asking for help. Does anyone know of a good guide to these sorts of concepts, preferably available online? I'm familiar with most of the other Linux sysadmin concepts and have plenty of hardware and bandwidth at my disposal.<a href="https://hachyderm.io/tags/selfhosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosted</a> <a href="https://hachyderm.io/tags/selfhosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosting</a> <a href="https://hachyderm.io/tags/SelfHostedApps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfHostedApps</a> <a href="https://hachyderm.io/tags/freeipa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#freeipa</a> <a href="https://hachyderm.io/tags/ldap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ldap</a> <a href="https://hachyderm.io/tags/authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentication</a> <a href="https://hachyderm.io/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://hachyderm.io/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> <a href="https://hachyderm.io/tags/authelia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authelia</a> <a href="https://hachyderm.io/tags/kerberos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#kerberos</a> <a href="https://hachyderm.io/tags/sysadmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sysadmin</a> <a href="https://hachyderm.io/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#linux</a>

Recent searches

Search options

Administered by:

Server stats:

#authentik