The second part of the series on a shared PostgreSQL for a home server. We create a dedicated, minimally privileged user and database in pgAdmin for a specific application, connect Authentik to the shared database instead of its own container, and cover basic maintenance - VACUUM, ANALYZE, REINDEX, and when you actually need to do any of this by hand.
A step-by-step setup of the Reputation Policy and GeoIP in Authentik for restricting access by IP reputation and country, with a breakdown of typical protection scenarios.
A step-by-step guide to setting up email notifications in Authentik: connecting SMTP, enabling event notifications, configuring email templates, and verifying delivery.
A detailed guide to setting up Cloudflare Turnstile - a modern alternative to CAPTCHA for protecting login, registration, and password recovery forms without degrading the user experience.
A detailed guide to setting up password recovery in Authentik, covering flows, stages, and policies, along with recommendations for protecting against username enumeration attacks.
A detailed explanation of how Authentik’s Proxy Provider adds authentication and SSO to any application. A simple flow diagram, key concepts, and usage examples.
A detailed overview of the initial setup of Authentik - an open source system for centralized authentication and authorization (IdP/SSO). We’ll walk through the very first steps of setting up Authentik.
A detailed overview of Authentik - an open-source system for centralized authentication and authorization (IdP/SSO). We’ll cover why IAM solutions are needed, the architecture, key features, and a comparison with alternatives.
A detailed look at TOTP, WebAuthn, passkeys, and Passwordless Login: how they work, their strengths and weaknesses, and recommendations for choosing the right technology for logging into your services.
A step-by-step guide to installing and configuring Authelia in Docker - deployment, 2FA configuration, Traefik integration via forwardAuth, and a breakdown of the main config parameters.
A step-by-step guide to installing and configuring Zitadel for two-factor authentication behind a reverse proxy. Covers user configuration, Docker integration, and recommendations for improving the security of web services.
A step-by-step guide to installing and configuring Keycloak for SSO and two-factor authentication behind a reverse proxy. Covers the Docker Compose configuration, first login to the admin console, creating a realm and a client, and recommendations for improving security.
A comparative overview of popular authentication solutions: Authelia, Authentik, Keycloak, and Zitadel. Covers the capabilities, pros and cons of each service, use-case scenarios, and recommendations for choosing the right tool for home or corporate use.
