Does anyone have any experience with #authentik in terms of #homelab ?
Uncategorized
4
Posts
4
Posters
0
Views
-
Does anyone have any experience with #authentik in terms of #homelab ?
My Idea is to use it to secure all my services with #mfa even if they don't support it.
Interested in how this has worked for others.
#askFedi -
Does anyone have any experience with #authentik in terms of #homelab ?
My Idea is to use it to secure all my services with #mfa even if they don't support it.
Interested in how this has worked for others.
#askFedi@thewk i found it a little big and ended up deploying pocket id instead
-
Does anyone have any experience with #authentik in terms of #homelab ?
My Idea is to use it to secure all my services with #mfa even if they don't support it.
Interested in how this has worked for others.
#askFedi@thewk I’m looking to do the same thing. My goals are a little broader, though. I want SSO + MFA for all my services and I also want to be an OIDC and SAML identity provider, so I can collaborate and federate with other homelabers, and for any cloud services I still use,
-
Does anyone have any experience with #authentik in terms of #homelab ?
My Idea is to use it to secure all my services with #mfa even if they don't support it.
Interested in how this has worked for others.
#askFedi@thewk yes that's possible. There are 2 ways you can use (and combine). One is using authentik with forward auth via Middleware. That means authentik (and therefore also possible MFA) is shown before you can reach your service. The other way is when your service supports oidc, saml etc. Then authentik is called from that service at login.
-
undefined oblomov@sociale.network shared this topic
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@mathewi or a marketing stint
-
@mray Encryption is being explored by a FEP
-
Ma #TeleMonteCarlo e i suoi #giochi interattivi in #TV ?
-
@katzenberger Fair enough, I'm not arguing against that. It's just that encryption isn't easy and will take a long time. I'm using this as a 'research foil' to understand why people use Signal vs encrypted Mastodon PMs.
I totally get that people just want safety baked into everything, I'm not against that in any way. But it is very hard to do well.
-
@scottjenson Don't really need encryption just for the DM edge-case. I only need to know where/for who exactly my message will pop up automatically, though.
Suggesting "encryption" exists in mastodon, how can one make sure it is interoperable with ActivityPub AND nobody gets it wrong and falsely assumes encryption is omnipresent, when it is absolutely not.
-
@mapache Yes, I know! ;-) I'm not saying no I'm exploring when (as encryption will take longer than UX improvements
-
@scottjenson My take (which seems to fly in the face of the zeitgeist) is that Mastodon is not meant foremost as a private messaging app. It is at its core, an *open, social* microposting platform. There are apps that are radically better suited for private and safe comms, and I am a huge proponent of letting things be true to themselves. When you try to shoehorn stuff into a system not intended to do that stuff, it ends poorly.
So, sure, DMs out of the timeline, but no Signal-like hardening.
-
@scottjenson I think, given today's climate, encryption should be a priority over UX changes. My thought is not whether microblogging DMs should be encrypted or not, but simply if *any* kind of messaging exists that is not public, on any service, it should be encrypted. It's the sad world we live in now where services can't be trusted. Non-public messaging that isn't encrypted shouldn't exist. Should microblogging services be Signal? Not at all. But DMs already exist, so now it has to be dealt with. Simply telling users "it's not for private discussions" isn't enough.
