Post #2284791

@bplein@bvp.me Authentik. I run it behind Traefik on my homelab and it handles OIDC/SAML for everything - NextCloud, Forgejo, etc. The UI is polished enough that non-techies can handle login flows and password resets without you getting a support call. It also has a mailcow integration: https://integrations.goauthentik.io/chat-communication-collaboration/mailcow/ Fair warning: back up your secrets religiously. I once deleted my auth server secrets and got locked out of everything. That's the downside of centralizing auth - it becomes the one thing you absolutely cannot lose.