Authentik is also worth checking out: https://goauthentik.io/
The biggest benefit is that Authentik supports Forward Auth out of box. This means that you might not need oauth2proxy.
The biggest benefit is that Authentik supports Forward Auth out of box. This means that you might not need oauth2proxy.
> The docker integration will automatically deploy and manage outpost containers using the Docker HTTP API.
> This integration has the advantage over manual deployments of automatic updates (whenever authentik is updated, it updates the outposts)
NO. I do not want software I use to update itself automatically in prod. And I especially do not want to give a docker socket to it so that it can automatically add new components.
It seems to support groups/selective access to services through group membership, which is great. Does it support username authentication or does it require that an LDAP server or other OIDP is used as a source of truth?
I think Keycloak 18 should use less memory? Might be worth a try.
Edit: Ok now. Looks like they use Let's Encrypt which will default to a self signed cert if it can't get a LE one for whatever reason IIRC.