Self-host Zitadel on a VPS with Docker
Zitadel itself needs about 512MB of RAM. Set up Postgres, the masterkey, TLS, SMTP and backups on one VPS, and learn what an upgrade does to your database.
#sso
Filtering by topic #sso · clear
Put any app behind SSO with oauth2-proxy
Forward auth puts an app that has no login behind your OIDC provider. Wire oauth2-proxy into nginx or Traefik, and avoid the cookie and redirect traps.
authd: cloud logins on your Ubuntu server
How Canonical's authd logs Ubuntu server users in with Google or Entra ID, what the broker snaps cost you, and the break-glass account to build first.
Authelia vs Authentik: which SSO for one VPS
Authelia is a YAML forward-auth portal with 2FA. Authentik is a full identity provider with a UI and Postgres. Here is which one a single VPS needs.
Keycloak vs Authentik vs Zitadel on one VPS
Three self-hosted SSO servers, one small VPS. The RAM floor each one really needs, which handles apps that speak no SSO, and where each one loses.
Authentik: self-hosted SSO for your apps
Run Authentik on Docker Compose for one login across every app you host: the env values that matter, the akadmin bootstrap, and forward auth via Traefik.
The SSO tax in self-hosted software
Open source apps that keep OIDC and SAML in a paid tier: why maintainers price it that way, and the checklist to run before you install anything.
Authentik forward auth with Traefik
Put Authentik in front of any app with Traefik forwardAuth: proxy provider, outpost address, header pass-through, and the redirect loops explained.