this post was submitted on 02 Aug 2023
101 points (99.0% liked)

Selfhosted

40466 readers
579 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
ruud
Loki
CannaVet
devve
HybridSarcasm
[email protected]
101
nforwardauth - simple and minimalist forward auth service intended for use with reverse proxies (Traefik, Caddy, etc). added basic auth and logout support (github.com)
submitted 1 year ago by nos to c/selfhosted
13 comments fedilink hide all child comments
 

Hey all!

New to lemmy and want to share a project I've been working on: nforwardauth (https://github.com/NOSDuco/nforwardauth) a simple forwardauth service for Traefik (and other reverse proxies) I built after being sick of basic auth. It now contains a logout page if you navigate to the auth service after being logged in. Another upgrade added is basic auth compatibility. For things like nzb360 where you need to skip the login form, you can specify your same credentials in the URL via basic auth and you will be authenticated with each request.

Hope this is useful to someone :)

top 13 comments
sorted by: hot top controversial new old
[–] [email protected] 8 points 1 year ago (2 children)

Looks good. Do you have an example for Nginx Proxy Manager?

[–] d_ohlin 2 points 1 year ago* (last edited 1 year ago)

Ditto! I'd also appreciate a normal nginx example as well!

[–] [email protected] 0 points 1 year ago (1 children)

Watching this comment...

I need a reminder bot...

[–] [email protected] 4 points 1 year ago (1 children)

Wow, this looks incredible! I always wanted to to deploy something like Authelia or Authentik but they seemed way too heavy for my purpose.

Whats the runtime memory usage of the docker container?

[–] nos 6 points 1 year ago

That exact reasoning is what led me to make this project! :)

As for memory usage, the nforwardauth container uses about 4MB of memory when running with the Traefik example (under examples/traefik-v2)

Thanks and hope this helps!

[–] node815 3 points 1 year ago (1 children)

I'll admit, I'm not a huge fan of Traefik (It's too big of a hassle for me and I use Cloudflare tunnels anyway). I couldn't get past the login even after literally copy pasta of your example for the user test as a last resort. So, I'm not sure if it's because I'm not using Traefik or some other reason. (Username tried was test Password Test) I also tried at first my username/password combo I set for it using the command to generate the passwd file.

[–] damo_omad 1 points 1 year ago

I had this problem until I realised I wasn't mounting the passwd file correctly. You need to mount passwd.txt not the passwd folder

[–] raffomania 2 points 1 year ago

Cool project, I’ve been looking for something like this!

[–] damo_omad 2 points 1 year ago (2 children)

Looks good I'm going to spin this up. To use with Caddy is it the same as Authelia?

https://caddyserver.com/docs/caddyfile/directives/forward_auth#authelia

[–] conrad82 2 points 1 year ago* (last edited 1 year ago) (1 children)

Nevermind, found the correct config in the examples folder ~~(there is also nginx example there 😅 )~~ (edit: it was traefik)

https://github.com/nosduco/nforwardauth/tree/main/examples

[–] damo_omad 1 points 1 year ago

I haven't had time to set it up yet so thanks for finding that! Looks nice and simple

[–] conrad82 1 points 1 year ago

Did it work?