Selfhosted

49411 readers

1093 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago

MODERATORS

[email protected]

187

GitHub - voidauth/voidauth: An Easy to Use and Self-Host Single Sign-On Provider 🐈‍⬛🔒 (github.com)

submitted 1 day ago* (last edited 1 day ago) by [email protected] to c/[email protected]

17 comments fedilink hide all child comments

A new open-source Single Sign-On (SSO) provider designed to simplify user and access management.

Features:

🙋‍♂️ User Management
🌐 OpenID Connect (OIDC) Provider
🔀 Proxy ForwardAuth Domains
📧 User Registration and Invitations
🔑 Passkey Support
🔐 Secure Password Reset with Email Verification
🎨 Custom Branding Options

Screenshot of the login portal:

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 10 points 22 hours ago (2 children)

This thing looks great but it has layers of supply-chain sploit risk. Make sure you're really secure before trying it -- and if you're (otherwise) iso27002 compliant, give it a pass.

[–] [email protected] 11 points 20 hours ago

I would not recommend using VoidAuth to anyone who needs to be any kind of security compliant. I am not a security professional and am using packages for the OIDC and other security heavy-lifting. I can recommend VoidAuth for those just looking for a simple but good looking auth app for securing their own selfhosted apps and resources.

[–] [email protected] 6 points 19 hours ago

I'm trying to wrap my head around your comment to understand. What exactly do you mean by supply chain sploit risk?

The tool is using 3rd party libraries and those libraries could be used to introduce vulnerabilities in the app?