Authentik forward auth with Traefik
Put Authentik in front of any app with Traefik forwardAuth: proxy provider, outpost address, header pass-through, and the redirect loops explained.
#authentik
Filtering by topic #authentik · clear
Give your AI agent its own identity
An AI agent using a copy of your API key is invisible in the audit log. Give it its own OIDC client in authentik, scope its token, and revoke only that one.
The SSO tax in self-hosted software
Open source apps that keep OIDC and SAML in a paid tier: why maintainers price it that way, and the checklist to run before you install anything.
Keycloak vs Authentik vs Zitadel on one VPS
Three self-hosted SSO servers, one small VPS. The RAM floor each one really needs, which handles apps that speak no SSO, and where each one loses.
Authentik: self-hosted SSO for your apps
Run Authentik on Docker Compose for one login across every app you host: the env values that matter, the akadmin bootstrap, and forward auth via Traefik.