Hacker News Reader

Can Gitea be configured behind an AWS Load Balancer? I'd like to have the ALB to do OIDC authentication with Azure AD, and also take care of the SSL offloading (so that we can use ACM certificates).

View on HN

Considering codeberg.org is a productionized deployment of Gitea, I'm guessing deploying a HA version is possible, and you can bet that an LB can be put in front of it. As for SSO, I'm not sure if Azure AD is supported, but some SSO configurations are supported directly in Gitea[0].

[0] https://docs.gitea.io/en-us/authentication/

For SSO the idea we have is to configure it at the LB ("Authenticate" in the LB rule for an OIDC source which would be Azure AD) and then Gitea would have to look at the JWT in the header to get from there the authenticated user email.

So Azure AD and the AWS LB handle authentication whilst Gitea only handles authorization.

Reply on news.ycombinator.com