Hacker News Reader

Considering codeberg.org is a productionized deployment of Gitea, I'm guessing deploying a HA version is possible, and you can bet that an LB can be put in front of it. As for SSO, I'm not sure if Azure AD is supported, but some SSO configurations are supported directly in Gitea[0].

[0] https://docs.gitea.io/en-us/authentication/

View on HN

For SSO the idea we have is to configure it at the LB ("Authenticate" in the LB rule for an OIDC source which would be Azure AD) and then Gitea would have to look at the JWT in the header to get from there the authenticated user email.

So Azure AD and the AWS LB handle authentication whilst Gitea only handles authorization.

Reply on news.ycombinator.com