Authentik forward auth with Traefik
Put Authentik in front of any app with Traefik forwardAuth: proxy provider, outpost address, header pass-through, and the redirect loops explained.
#sso
Filtering by topic #sso · clear
authd: cloud logins on your Ubuntu server
How Canonical's authd logs Ubuntu server users in with Google or Entra ID, what the broker snaps cost you, and the break-glass account to build first.
Self-host Zitadel on a VPS with Docker
Zitadel wants 4 cores and 8GB. Set up Postgres, the masterkey, TLS, SMTP and backups on one VPS, and learn what an upgrade does to your database.
Put any app behind SSO with oauth2-proxy
Forward auth puts an app that has no login behind your OIDC provider. Wire oauth2-proxy into nginx or Traefik, and avoid the cookie and redirect traps.
The SSO tax in self-hosted software
Open source apps that keep OIDC and SAML in a paid tier: why maintainers price it that way, and the checklist to run before you install anything.
Keycloak vs Authentik vs Zitadel on one VPS
Three self-hosted SSO servers, one small VPS. The RAM floor each one really needs, which handles apps that speak no SSO, and where each one loses.
Authentik: self-hosted SSO for your apps
Run Authentik on Docker Compose for one login across every app you host: the env values that matter, the akadmin bootstrap, and forward auth via Traefik.