Selfhosted

selfhosted@lemmy.world

(Group)

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.

Rules:

Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.
No spam.
Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.
Don’t duplicate the full text of your blog or git here. Just post the link for folks to click.
Submission headline should match the article title.
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.
Questions? DM the mods!

lemmy

abeorch via Selfhosted

today, 8:00 AM

abeorch
today, 8:00 AM

New to Authentik - Challenges with getting my first application working

!Selfhosted - I'm new to #Authentik - I've just spun up a test instance and tried to connect my first application (#Postiz) but I'm kind of stuck.

I've installed both Postiz and Authentik using Docker Compose - as provided by the relevant apps.

As far as #Authentik goes it looks like its approving authentication requests (its showing successes in the GUI) but the application just returns to the login screen without progressing.

One thing that I found was that within the configuration of the Application and Provider one URL provided by Authentik is the /application/o/postiz/.well-known/openid-configuration which lists several URLs used by the application - one is /application/o/authorize/ but unlike all the others this returns a 404 error when I try to load it via the browser.

I am struggling to work out if - this URL should 404 should occur and also how to diagnose what the problem is.

I've popped messages in their relevant Discord forums but any ideas or input would be greatly appreciated - I'm figuring getting Authentik is going to be key to getting other applications going.

#authentik !Selfhosted

like this

Selfhosted reshared this.

in reply to abeorch

devaly

in reply to abeorch today, 9:25 AM

Any particular reason for Authentik? I found it very resource hungry and slow. PocketId on the other hand, is super lightweight and fast

like this

in reply to devaly

abeorch

in reply to devaly today, 9:33 AM

I really just went for the one that Postiz had suggested and had some template configurations for .. and it seemed to be one of the most used (oh and a friend had suggested it to )

Selfhosted reshared this.

in reply to devaly

abeorch

in reply to devaly today, 9:35 AM

Is it possible to use PocketID without Https if I am testing it internally ?

Selfhosted reshared this.

in reply to abeorch

devaly

in reply to abeorch today, 9:41 AM

nope, https only. Because pocket id uses web authn which requires encryption

This entry was edited (today, 9:41 AM)

saddlebag likes this.

in reply to devaly

abeorch

in reply to devaly today, 9:46 AM

Ah ok .. it looks interesting.. I might need to push on with Authentik in the meantime just till I get more of an idea - It might also prove useful when I need to link to LDAP and Azure AD

like this

saddlebag doesn't like this.

Selfhosted reshared this.

in reply to abeorch

saddlebag

in reply to abeorch today, 11:22 AM

Pocket-id also supports ldap sync pocket-id.org/docs/configurati…

I tried Authentik then moved to Authelia and then to pocket-id. I found the first two unnecessarily complicated for selfhosting unless you want to specifically learn them.

Setting up https is quite straightforward, especially with caddy.

LDAP Integration | Pocket ID Docs

Connect Pocket ID to your LDAP server for user synchronization

^{Pocket ID}

in reply to abeorch

dlsolo

in reply to abeorch today, 9:58 AM

I moved away from authentik for void-auth: github.com/voidauth/voidauth

Life is so much better...

GitHub - voidauth/voidauth: Single Sign-On for Your Self-Hosted Universe

Single Sign-On for Your Self-Hosted Universe. Contribute to voidauth/voidauth development by creating an account on GitHub.

^GitHub

like this

in reply to dlsolo

Starfighter

in reply to dlsolo today, 2:28 PM

If you don't mind me asking, what made you go with VoidAuth vs Authelia or something else entirely?

I'm in a similar boat as OP and while VoidAuth looks very promising I'm put off a little by the young age and size of the project.

This entry was edited (today, 2:29 PM)

in reply to abeorch

Tolookah

in reply to abeorch today, 10:35 AM

If you are getting the authentik login screen and being redirected, it's either the redirect url not being right or the app itself not being configured for authentik.

Source: my limited knowledge with authentik and other apps.