Secure authentication in front of a web server open to internet
reddit / selfhosted

----------------------------------------------------------------------
chaplin2 · 2023-11-14 19:49

I would like to open an instance of a web server such as nextcloud,
synology, etc to the internet. VPN is not possible since recipients
are not a prior known. Reverse proxy seems like a good option.

Cloudflare tunnels provide a layer of authentication in front of the
web server. But I don’t want Cloudflare having access to my traffic
and don’t know a way to add a layer of encryption to keep Cloudflare
out of traffic.

I know authelia, but haven’t worked with it.

What are the options?

----------------------------------------------------------------------
thekrautboy · 2023-11-14 19:55

> What are the options?

You already mentioned it yourself, a reverse proxy. Traefik, Caddy,
NPM, nginx, apache2, whatever you like.

Most of them have builtin basic authentication features. If those
arent enough you can combine some of them with Authelia or Authentik
etc.

Threads about this exist plenty.

----------------------------------------------------------------------
Ben4425 · 2023-11-15 09:57

I use Traefik and Oauth to implement two-factor authentication with
single sign-on via Google. Works fine if you don't mind the
requirement that all your users must have a gmail account with Google.

----------------------------------------------------------------------
PhilipLGriffiths88 · 2023-11-15 10:49

[zrok.io](https://zrok.io) using the free SaaS together with 0Auth -
https://blog.openziti.io/the-zrok-oauth-public-frontend

----------------------------------------------------------------------
jogai-san · 2023-11-15 13:29

https://cosmos-cloud.io/