I have a Talos k8s setup now and I’m trying to add various services. I have discovered that my old htpasswd file won’t cut it for auth.

I want to host the following,

  1. WebDAV solution (currently sftpgo)
  2. Invidious
  3. *arr tools
  4. Bitwarden

Should I go with keycloak? Are there better auth services?

  • Jul (they/she)@piefed.blahaj.zoneEnglish
    41·
    1 day ago

    Keycloak has some learning curve, but it’s the best OpenID Connect client and the most configurable and feature rich open source SSO system with the fewest major issues that I’ve used. And I use traefik for a reverse proxy, so for things that don’t support SSO directly thomseddon/traefik-forward-auth works flawlessly with Keycloak to provide an auth layer to those apps.