Authentik - Making authentication simple.

[fbartels]

@ccfu if you want to take advantage of Authentiks proxy mode, when I would recommend to install Authentik independently of Cloudron. You can still connect the two however by configuring Cloudron as an LDAP client of Authentik.

[Sam_uk]

@ccfu You could put it on https://elest.io/open-source/authentik if it's worth $10/month to you.

[stalecontext]

I've put up a Git repo to make a Cloudron app for Authentik. I was able to fully set it up, but let me know if you guys have any issues
https://github.com/stalecontext/authentik-cloudron-app

I also had to fork the Immich app to allow custom OAuth configuration incase you guys want to use Authentik for that:
https://github.com/stalecontext/immich-cloudron-custom-oauth

[jdaviescoates]

@stalecontext said in Authentik - Making authentication simple.:

I've put up a Git repo to make a Cloudron app for Authentik. I was able to fully set it up, but let me know if you guys have any issues
https://github.com/stalecontext/authentik-cloudron-app

I also had to fork the Immich app to allow custom OAuth configuration incase you guys want to use Authentik for that:
https://github.com/stalecontext/immich-cloudron-custom-oauth

I'm getting 404s on both those links

[james]

Hello @jdaviescoates

The whole profile is gone https://github.com/stalecontext/ maybe he has renamed his github account?

[stalecontext]

Have to email GitHub Support to get my account fixed. I think one of my repos needed cleaning up or something. I've reposted it on my private git incase you wanna check it out there @jdaviescoates @james

https://git.cathedral.gg/Ben/authentik-cloudron-app

https://git.cathedral.gg/Ben/immich-cloudron-custom-oauth

[stalecontext]

Authentik has been working magnificently in my case by the way. It's really nice and documentation for it is extremely thorough.

[crazybrad]

@james What does the team think about making Authentik an official Cloudron-supported app? @stalecontext has started the process. I think Authentik would serve a niche between Cloudron OIDC (simple) and Keycloak (Enterprise/complex).

If someone wanted to run "auth-as-a-service", Authentik would be perfect for that use case. Having it official at Cloudron would make it less risky to implement.

[Lanhild]

@crazybrad Core features such as outposts wouldn't work by packaging authentik as a Cloudron application.

As mentioned earlier in this topic, authentik is the kind of application I'd suggest having installed on a separate server.

[crazybrad]

@lanhild Didn't see the comment you were referring to. Can you explain why outposts would not work if Authentik were packaged as a Cloudron app? Why would it be any different from any other Docker app or Authentik hosted on an independent server running Docker?

[Lanhild]

@crazybrad outposts are their own docker containers, created by the authentik worker, itself connected to the docker socket. I recon we have an addon to connect an app to the socket, but iirc it's not recommended to use it.