this post was submitted on 14 Nov 2023
3 points (100.0% liked)

Self-Hosted Main

515 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
3
Secure authentication in front of a web server open to internet (alien.top)
submitted 1 year ago by chaplin2@alien.top to c/main@selfhosted.forum
4 comments fedilink hide all child comments
 

I would like to open an instance of a web server such as nextcloud, synology, etc to the internet. VPN is not possible since recipients are not a prior known. Reverse proxy seems like a good option.

Cloudflare tunnels provide a layer of authentication in front of the web server. But I don’t want Cloudflare having access to my traffic and don’t know a way to add a layer of encryption to keep Cloudflare out of traffic.

I know authelia, but haven’t worked with it.

What are the options?

top 4 comments
sorted by: hot top controversial new old
[–] ziviz@lemmy.sdf.org 2 points 1 year ago

Nginx reverse proxy with keycloak for auth? There are a couple solutions for it, but here is one https://kevalnagda.github.io/configure-nginx-and-keycloak-to-enable-sso-for-proxied-applications

[–] Ben4425@alien.top 2 points 1 year ago

I use Traefik and Oauth to implement two-factor authentication with single sign-on via Google. Works fine if you don't mind the requirement that all your users must have a gmail account with Google.

[–] PhilipLGriffiths88@alien.top 1 points 1 year ago

zrok.io using the free SaaS together with 0Auth - https://blog.openziti.io/the-zrok-oauth-public-frontend

[–] jogai-san@alien.top 1 points 1 year ago

https://cosmos-cloud.io/