Submitted â¨â¨8⊠â¨months⊠ago⊠by â¨notquitenothing@sh.itjust.works⊠to â¨selfhosted@lemmy.worldâŠ
https://github.com/voidauth/voidauth
A new open-source Single Sign-On (SSO) provider designed to simplify user and access management.
Features:
I just (partially) got authentik running â how does it compare?
VoidAuth is simpler to setup/use than Authentik for sure, but of course Authentik has more features. They both support proxy-auth, OIDC, and have user management UIs so in that way they are similar. I like VoidAuth for its simplicity but you can always run both and decide, if you have any questions about setup I will try to answer!
Iâll definitely check it out today - I found the authentik learning curve to be surprisingly difficult. All I need is a basic set up for getting my friends and family into audiobookshelf, immich, etc, so this may be a welcome improvement
Definitely giving this a go, seems exactly what Iâve been looking for for my small self hosted stack.
If you run into any issue during setup let me know! I am still working on the documentation so hopefully it is somewhat understandable đ
the Postgres requirement is a dealbreaker for me. I donât get why all these âsimpleâ self-hosted apps need a bloated database. how many users is a self-hoster going to have, maybe 1-10? SQLite can easily handle thousands. Iâm currently using Authelia, and it even has a database-less YAML option for managing users
On my server I run a single postgres container and create DBs and users for different apps within. Super resource light and I have 7 apps pointed at a single container. Much easier to manage backups as well when there are several apps in the single DB.
You can do this with VoidAuth as well, by setting the DB_NAME variable
I do agree. I have been thinking about adding a SQLite option which should be easy since knex (the database package that VoidAuth uses) supports it. Before releasing that I would want to create some way to migrate your data from one database type to another. If you want to use VoidAuth feel free to make an issue for this!
Having run minor projects using PocketBase before and also seen what PocketBase itself can do and SQLite configured correctly in general, Itâs great. Iâve gotten to be a big fan of it by the years and gladly opt for it over the bigger ones.
If this project got SQLite support it would be a great replacement for my own setup which requires about 3 or 4 accounts. Currently using a proprietary solution and been looking into moving to Authentik but itâs a bit too heavy resource wise for my current servers.
This thing looks great but it has layers of supply-chain sploit risk. Make sure youâre really secure before trying it â and if youâre (otherwise) iso27002 compliant, give it a pass.
Iâm trying to wrap my head around your comment to understand. What exactly do you mean by supply chain sploit risk?
The tool is using 3rd party libraries and those libraries could be used to introduce vulnerabilities in the app?
This is the correct read.
This is also the same as any other software package in existence. In fact, if someone claimed to not use any libraries, Iâd be taking a close look at that too.
The key difference is if youâre a paying a company for support and certification of the product as delivered, you can yell at them about it. If youâre using a free product with no support, you can yell at yourself.
I would not recommend using VoidAuth to anyone who needs to be any kind of security compliant. I am not a security professional and am using packages for the OIDC and other security heavy-lifting. I can recommend VoidAuth for those just looking for a simple but good looking auth app for securing their own selfhosted apps and resources.
How does it compare to keycloak?
While I havenât spun up Keycloak myself, I think VoidAuth would supply some similar functionality. Ideally the features of Keycloak that you are likely to need but easier to setup and use!
This i need to try!
Let me know how it goes!
q7mJI7tk1@lemmy.world â¨8⊠â¨months⊠ago
Just to say Iâve tried this today and love it. Was running Authelia but wasnât happy with the way it was configured. I spun up VoidAuth in about 5mins and am impressed. Running as basic auth for a Caddy reverse proxy, this feels very slick. Well done!
Easy to follow documentation as well. Less is more sometimes.
I like the way you have it checking SMTP credentials in the background with a simple âthis is not configured properlyâ on the UI.
notquitenothing@sh.itjust.works â¨8⊠â¨months⊠ago
Thank you!