Probably a good idea to switch over to WPA-Enterprise using Authentik’s RADIUS server support and let all of the users of your wireless access point log in with their own network credentials, while you’re at it.
DownByLaw@sh.itjust.works 1 day ago
Have you already tried implementing an identity provider like Authentik, so you can add OIDC and ldap for all your services, while you are the only one that’s using them? 🤔
tal@lemmy.today 1 day ago
epicshepich@programming.dev 1 day ago
Hey my wife uses some of them too!
PumpkinEscobar@lemmy.world 1 day ago
Behind a traefik reverse proxy with lets encrypt for ssl even though the services aren’t exposed to the internet?
DownByLaw@sh.itjust.works 1 day ago
Don’t forget about Anubis and crowdsec to make it even safer inside your LAN
diablomnky666@lemmy.wtf 1 day ago
To be fair a lot of apps don’t handle custom CAs like they should. Looking at you Home Assistant! 😠
suicidaleggroll@lemmy.world 1 day ago
Who cares if it’s exposed to the internet?
Encrypting your local traffic is still valuable to protect your systems from any bad actors on your local network (neighbor kid cracks your wifi password, some device on your network decides to start snooping on your local traffic, etc)
Many services require HTTPS with a valid cert to function correctly, eg: Bitwarden. Having a real cert for a real domain is much simpler and easier to maintain than setting up your own CA