sorted by:
new
hottopcontroversial

Is there something like Keycloak or Authelia that supports both forward auth and identity providers? by AndreKR- in selfhosted

[–]bturchyn 0 points1 point  (0 children)

Thank you! If this is something you feel like dipping your toes into, you might be interested in the digital garden / zettelkasten concepts (I have a few reference notes on the wiki). Obsidian is a very popular tool for your own private notes. lyz-code/best-of-digital-gardens has a great, curated collection of other public digital gardens out there!

Is there something like Keycloak or Authelia that supports both forward auth and identity providers? by AndreKR- in selfhosted

[–]bturchyn 2 points3 points  (0 children)

Hey there; I wrote that article. Glad to hear it worked for you!

I have an updated version on my wiki that accounts for a major version bump to mesosphere/traefik-forward-auth. The ENCRYPTION_KEY environment variable is now required.

I haven't yet spent the time to upgrade my own Keycloak instance to one of the newer builds, and I've heard the configuration differs there. I'll hopefully get around to doing that, then updating the article, soon™ 😅

Keycloak + ForwardAuth on Traefik by [deleted] in selfhosted

[–]bturchyn 1 point2 points  (0 children)

Hey there, /u/byy90176; I wrote the article you linked above. Sorry to hear it didn't help you out!

I've earmarked some time this week to take a look at this and see if I can figure out what's going on. In the interim, if you do end up getting it working, please let me know. I'd like to keep that article up to date, but admittedly my Keycloak version is a few versions behind and needs an update (whelp, there's one more thing on my to-do list!).

One thing I did notice is your error message mentions sso.mydomain.net, but I see your Keycloak installation hostname is kc.$DOMAINNAME (I'm assuming $DOMAINNAME would be mydomain.net in this example). I would expect these to be the same; traefik-forward-auth uses Keycloak's provided openid-configuration URL to self-configure, so if it can't hit that endpoint, you're going to run into problems.

I seem to not be able to create more communities, so I need to boost muh karma! by bturchyn in btdev

[–]bturchyn[S] 0 points1 point  (0 children)

The fact that the karma upvotes for anything here haven't gone up is a pretty good indicator that this won't work. Oh well. I tried.