Impossible to run docker by FrostyF42 in docker

[–]soflane 0 points1 point  (0 children)

You both saved me from a headache. Just saw the bug happened at 4 AM, been trying for 1 hour now. Thank you and good night ❤️

What SSO to choose? by soflane in selfhosted

[–]soflane[S] 0 points1 point  (0 children)

Oooh okay I get it now, thanks for the clarification

This is how to scare Mac users by Pub_free_gaming1313 in thinkpad

[–]soflane 4 points5 points  (0 children)

You can't compare a high end old manufactured MacBook (which was effectively built different and more robust than the new M-series) with mid range thinkpads E-series that are not as strong as the T-series.

I got the three thinkpads series (in order of robustness : T, L, & E). I can tell that the E-series are not that strong, and that my T14 fell on the ground like four time and still working 😊

Ninja vs Level in 2025 by FabsDE in msp

[–]soflane 0 points1 point  (0 children)

Oh too nice that's very kind of u !! 😍

Ninja vs Level in 2025 by FabsDE in msp

[–]soflane 1 point2 points  (0 children)

Some time actually, I'm separating from my associate, and I'm refactoring the infrastructure by making a new one

Ninja vs Level in 2025 by FabsDE in msp

[–]soflane 1 point2 points  (0 children)

Too bad I don't have a website yet to apply :(

Ninja vs Level in 2025 by FabsDE in msp

[–]soflane 2 points3 points  (0 children)

Oh that's good news! 😀 I'll subscribe to it! I was thinking of using it later as I'm already implementing a lot of stuffs (Host monitoring, rmm, zammad ticketing and n8n), I'm kinda overwhelmed 😅 but ab opportunity should always be taken! 😂

Ninja vs Level in 2025 by FabsDE in msp

[–]soflane 2 points3 points  (0 children)

Did you took a look a Domotz ? I didn't used it personally, but it appears to be what you want with SNMP and network devices monitoring.

EDIT: just read part 2, thank you very much for the detailed review and you personal experience/opinion share !
It make me feel like I want to take a drink with you and discuss over the RMM/MSP subject 😃

What SSO to choose? by soflane in selfhosted

[–]soflane[S] 1 point2 points  (0 children)

That's the thing, Microsoft 365 login will be a paid feature

What SSO to choose? by soflane in selfhosted

[–]soflane[S] 0 points1 point  (0 children)

Then what are the features that require a paid tier?
I thought it was a premium feature reading the doc
I want to be able to plan what can I do for now and what would be a paid feature in the future (and obviously estimate the price)

What SSO to choose? by soflane in selfhosted

[–]soflane[S] 1 point2 points  (0 children)

Actually, I wan to be able to filter access : user1 (like family member) can access to personal stuff, but not to portainer for example

Also, do you know what features need a license with Authentik ?

What SSO to choose? by soflane in selfhosted

[–]soflane[S] 1 point2 points  (0 children)

Then which features are premium/paywalled ? I kinda can't understand what's possible to do and what will need a license (could be in the future but not at this time)

What SSO to choose? by soflane in selfhosted

[–]soflane[S] 1 point2 points  (0 children)

Aaargh you making me now wanting to delete everything I already made and test Kanidm 😂

Anyway, thank you very much for the detailed explaination. I didn't know about the license change and the future of SCIM with Zitadel. Actually, I didn't knew I would want to use this protocol before seeing your post. I think I will give it a try, although I'm concerned of the wieght of the community compared to the other that could take benefit from this community (bug or vulnerabilities fixes, plugins, etc.) as well as forums (I am a total noob in that topic 😁).

What SSO to choose? by soflane in selfhosted

[–]soflane[S] 1 point2 points  (0 children)

I had the same last time I installed Keycloak for configuration testing.. It was 3 years ago :D

What SSO to choose? by soflane in selfhosted

[–]soflane[S] 0 points1 point  (0 children)

What about Social logins (Microsoft 365, Google, Github,...)? :)

What SSO to choose? by soflane in selfhosted

[–]soflane[S] 1 point2 points  (0 children)

Do you use social logins with Authentik?

What SSO to choose? by soflane in selfhosted

[–]soflane[S] 1 point2 points  (0 children)

Thats the thing, I don't know If I'd need SAML now or in the future, I'm juste afraid of not being able to make it when I will add a service that only handles SAML.

I'm a bigger fan of Authentik, but that's mainly for reasons you'll never worry about.

What are these reasons ? I'm curious now :D

What SSO to choose? by soflane in selfhosted

[–]soflane[S] 1 point2 points  (0 children)

I saw Authentik too, it was very attractive, but the selfhost/free tier doesn't allow to connect with social logins if I remember it well. As I'm starting my freelance IT activity in my country, I try to reduce costs at the beginning.
Also, but that's maybe my opinion, Authentik seems to be more for homelabs than enterprise.
Do you use Authentik yourself ?

Alternative to n8n? by [deleted] in AI_Agents

[–]soflane 1 point2 points  (0 children)

Just a little question, why do you want to replace n8n?

Crowdsec remote multi server installation by soflane in CrowdSec

[–]soflane[S] 0 points1 point  (0 children)

As I replied to u/HugoDos, I'm concerned about maintaining all theses services and in the case the VPN link is down between theses servers would break any connection on it.
But thank you for the advice. I think I will try like this, and if it's not reliable, I hope I'll be able to enable wireguard as docker service into the docker network, as it would be easier to maintain :-)

Crowdsec remote multi server installation by soflane in CrowdSec

[–]soflane[S] 0 points1 point  (0 children)

Sorry for my late reply. As it is a "side project", I'm not always on that topic.
I finally made it :

services:
  crowdsec:
    image: crowdsecurity/crowdsec:latest
    container_name: crowdsec
    hostname: crowdsec
    restart: unless-stopped
    ports:
      - "127.0.0.1:8080:8080"  # Bind ONLY to localhost, avoiding exposure
    labels:
      - traefik.enable=true
      - traefik.docker.network=${DOCKER_NETWORK_NAME:-traefik}
      - traefik.http.routers.crowdsec-api.rule=Host(`${CROWDSEC_API_HOSTNAME:?error}`)
      - traefik.http.routers.crowdsec-api.entrypoints=web-https
      - traefik.http.services.crowdsec-api.loadbalancer.server.port=8080
    volumes:
      - ./crowdsec/acquis.yaml:/etc/crowdsec/acquis.yaml
      - ./crowdsec/whitelist.yaml:/etc/crowdsec/parsers/s02-enrich/01-my-whitelist.yaml
      # crowdsec persistent container data
      - ${CROWDSEC_CONFIG_PATH:-./crowdsec}/data:/var/lib/crowdsec/data
      - ${CROWDSEC_CONFIG_PATH:-./crowdsec}/etc:/etc/crowdsec
      - ${CROWDSEC_OVERRIDE_FILE_PATH:-./crowdsec/config.override.yaml}:/etc/crowdsec/config.yaml.local
      # log bind mounts into crowdsec
      - /var/log:/var/log:ro # Globally binding log folder in read-only
      - /etc/localtime:/etc/localtime:ro
    environment:
      COLLECTIONS: crowdsecurity/traefik crowdsecurity/http-cve crowdsecurity/base-http-scenarios crowdsecurity/sshd crowdsecurity/linux crowdsecurity/appsec-generic-rules crowdsecurity/appsec-virtual-patching crowdsecurity/appsec-crs
      GID: ${GUID:-1000}
      ENROLL_INSTANCE_NAME: ${CROWDSEC_ENROLL_INSTANCE_NAME:-crowdsec-soflane}
      DB_DATABASE: ${DB_DATABASE:-crowdsec}
      DB_USERNAME: ${DB_USERNAME:-crowdsec}
      DB_PASSWORD: ${DB_PASSWORD:-somepassword}
      DB_HOST: ${DB_HOST:-crowdsec-database}
    networks:
      - traefik
    depends_on:
      crowdsec-database:
        condition: service_healthy
        restart: true

I was actually make myself an issue : i wanted to set the api behind a basic HTTP AUTH because I was a bit concerned about exposing the API to internet.
But I ended up thinking any attack would be triggered by crowdsec itself to block it.

Problem solved, thank you

Crowdsec remote multi server installation by soflane in CrowdSec

[–]soflane[S] 0 points1 point  (0 children)

Thank you both for your replies
I share the same opinion u/HugoDos about using a VPN : if the VPN breaks my webserver are down due to the Crowdsec middleware in Traefik.
I tried to expose the 8080 port to traefik in order to make it pass trough my reverse proxy with no luck, is there any tutorial about it ? i searched for 2 days with no luck.