Authentication
reddit / selfhosted

----------------------------------------------------------------------
lazy_zz · 2023-12-17 16:48

Hello guys,

I need some guidance on setting up an authentication server for safely
exposing my self hosted services.

I have a domain name already set up and pointing to my ip and nginx
proxy manager handling the request from there with ssl already set up

I am currently using Cloudflare for authentication purposes but it
doesn’t go along well with signing on mobile applications.

I have looked into authentik and authelia so far but I’m not very
comfortable or tech savvy enough to set it up it seems like.

Would you guys be able to point me towards a bit easier solution that
is self hosted as I am using synology and a raspberry pi, the two
applications I listed are too complicated for me to set up with very
little knowledge of how configuration files work

Let me know if there’s a better place for me to ask this instead.

----------------------------------------------------------------------
rbatersi · 2023-12-17 16:59

[DB Tech does an excellent tutorial on getting Authelia up and
running.](https://youtu.be/4UKOh3ssQSU?si=BZiddbDEJQ6bmEL5)

----------------------------------------------------------------------
ericesev · 2023-12-17 17:32

Maybe it's the selfhosted software I'm using, but so far I haven't
needed to install a mobile app. I do add home screen shortcuts for the
websites though.

----------------------------------------------------------------------
lazy_zz · 2023-12-17 17:50

well i use bitwarden, jellyfin joplin and couple more that have mobile
apps. And you cant bypass cloudflare login for them.

----------------------------------------------------------------------
arpanghosh8453 · 2023-12-17 21:18

Use Nginx Proxy Manager with Authentik. Very easy to set up, works
like a charm.

----------------------------------------------------------------------
Simplixt · 2023-12-17 21:58

Authentik is your best bet. You can use oAuth / SAML for apps like
Nextcloud or Immich and Forward-Auth to protect apps without SSO
support.


If it's to complicated yet, stay with Cloudflare or VPN until you have
the time to look into it.

----------------------------------------------------------------------
jogai-san · 2023-12-18 13:21

r/cosmosserver