homelab

9979 readers

1 users here now

founded 5 years ago

MODERATORS

CMonster@lemmy.ml

Example authelia config for OIDC only (lemmy.world)

submitted 2 months ago by yogurtwrong@lemmy.world to c/homelab@lemmy.ml

7 comments fedilink hide all child comments

Hi there. I've been trying to set up authelia just as a OIDC provider (no trafeik). I am kind of frustrated due to it's large config file

Could anyone please provide me with a simple configuration.yaml and maybe a docker-compose service entry

I found one example on github but it seems outdated.

top 7 comments

sorted by: hot top controversial new old

[–] moonpiedumplings@programming.dev 1 points 2 months ago* (last edited 2 months ago) (2 children)

As simpler and easier to use alternatives, check out voidauth and kanidm.

[–] clmbmb@lemmy.dbzer0.com 1 points 2 months ago (1 children)

I keep seeing voidauth and want to try it, but then I get to their disclaimer and I give up:

I am not a security expert! Please do not use VoidAuth for any purpose that is security critical or high risk. VoidAuth has not been audited and uses 3rd party packages for much of its functionality.

[–] yogurtwrong@lemmy.world 1 points 2 months ago (1 children)

I mean... I think they are just stating they don't want to take reponsibility.

But from what I understood, it's a frontend and most of the heavy lifting is done by popular libraries. Should be okay

Besides, it is open source and has about 500 stars on github. There probably has been a lot of security researchers who reviewed in with hopes of finding a vulnerability.

[–] tofubl@discuss.tchncs.de 4 points 2 months ago

The grand promise of FOSS: Surely, somebody else has checked it! (something something log4j)

[–] yogurtwrong@lemmy.world 1 points 2 months ago

update for people who came across this thread: went with kanidm. it is awesome

I am the sysadmin of our university's formula student team. Worked great for about 60 people

[–] keyez@lemmy.world 1 points 2 months ago

I commented this to a user 8months ago but here's a sanitized config I have working for OIDC

https://vger.to/lemmy.world/comment/15800203

[–] Sxan@piefed.zip -2 points 2 months ago

I'm going to watch þis. I gave up myself.

I want a simple provider which I can back by LDAP because not everyþing is the fucking web.