I mean, it is a bit rough, they’re not at 1.0 yet, also: are you looking at the stable or latest docs? That may be the reason the commands do not match with the docs.
I mean, it is a bit rough, they’re not at 1.0 yet, also: are you looking at the stable or latest docs? That may be the reason the commands do not match with the docs.
I didn’t have any issues, do you see anything in the logs?
Yeah, sounds like a security feature… I was able to configure Traefik to connect with TLS, verifying the peer certificate.
Yes, it should cover all the use cases you mention!
I use oauth2-proxy as ForwardAuth on Traefik so I can protect apps that do not support OAuth/OIDC login/
I use kanidm with oauth2-proxy. No issues so far, it was pretty easy to set up.
Note that the connection to kanidm needs to be TLS even if you have a reverse proxy!
EDIT: currently using 80MB RAM for two users and three Service Providers.
I also moved away my domains and the ones of the hackerspace I manage, mainly to:
I also use Migadu, they have been great so far!
desec.io for DNS, also great and supported by Traefik for DNS-01 ACME challenge.
I think you can create a group for friends and a group for family. If you want more separation I think Authentik handles multi-tenancy as well
Saving this for all my future pro-systemd flames, thank you!
I’m using sops
with my GPG key currently.
Maybe you could try tryton? It’s modular and you can add a lot of useful functionality for businesses, like stocks/orders etc
Sure, but it’s a question of principle. I try to use and support FLOSS software if possible.
Aw man… and I was just thinking about deploying Nomad in my homelab…
Perhaps you could find some info in the translation project wiki page?
I use sops
, usually with exec-env
Huh, that’s actually way better than my current setup of spamming me on Telegram every time there’s an update
Exactly this. In a federated network, the instance with the majority of users could dictate the protocol, forcing the smaller issues to continually adapt or die. See this post for a very real example of this.
Yeah, I was registering my domains there because they are in Europe and had some extra services, I’ll be taking my business elsewhere now
Yeah, that’s a solid choice! I’ve used their proxy service and was pretty solid.
The only alternative I know of that goes close to what FreeIPA does (minus the cert part) is kanidm. It does:
I just noticed they have a beta for multimaster replication, which is nice.
I use it at home. Note, though, that it does not do any hand-holding, and all configuration is done through CLI. Also note, there are docs for the stable or dev branch and there sometimes are big differences between the two.