Authentik - Making authentication simple.

[stalecontext]

Have to email GitHub Support to get my account fixed. I think one of my repos needed cleaning up or something. I've reposted it on my private git incase you wanna check it out there @jdaviescoates @james

https://git.cathedral.gg/Ben/authentik-cloudron-app

https://git.cathedral.gg/Ben/immich-cloudron-custom-oauth

[stalecontext]

Authentik has been working magnificently in my case by the way. It's really nice and documentation for it is extremely thorough.

[crazybrad]

@james What does the team think about making Authentik an official Cloudron-supported app? @stalecontext has started the process. I think Authentik would serve a niche between Cloudron OIDC (simple) and Keycloak (Enterprise/complex).

If someone wanted to run "auth-as-a-service", Authentik would be perfect for that use case. Having it official at Cloudron would make it less risky to implement.

[Lanhild]

@crazybrad Core features such as outposts wouldn't work by packaging authentik as a Cloudron application.

As mentioned earlier in this topic, authentik is the kind of application I'd suggest having installed on a separate server.

[crazybrad]

@lanhild Didn't see the comment you were referring to. Can you explain why outposts would not work if Authentik were packaged as a Cloudron app? Why would it be any different from any other Docker app or Authentik hosted on an independent server running Docker?

[Lanhild]

@crazybrad outposts are their own docker containers, created by the authentik worker, itself connected to the docker socket. I reckon we have an addon to connect an app to the socket, but iirc it's not recommended to use it.

[crazybrad]

@lanhild Got it. Is a dockerized app creating its own connected docker containers a typical pattern? Lastly, is Authentik without the ability to use outposts still useful, or is it crippled without them?

[Lanhild]

@crazybrad

1. For applications with networking related features, not uncommon
2. Depends on the use case, as soon as you need LDAP or other protocols, an outposts necessary. Other features like SAML and OIDC will work without additional configuration.

You can see authentik's documentation about this, it's well detailed.

[crazybrad]

@lanhild Thank you. I will explore the documentation.

[stalecontext]

@Lanhild Interesting. I'll investigate more and see if I can turn the repo into a proxy app