• Maximilious@kbin.social
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    10 months ago

    This is the way. My setup is very similar except I only use authentik for Nextcloud. I don’t expose my “arr” services to the Internet so I don’t feel it necessary to put them behind authentik, although I could if I wanted.

    Using Duo’s free 10 personal licenses is also great as it can also plug into authentik for MFA through the solution.

    • Lem453@lemmy.ca
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      10 months ago

      The primary reason to put authentik in front of arrs is so I don’t have to keep putting in different password for each when logging in. I disable the authentication for each of them in the app itself and then disable the exposed docker port as well so the only way to access it it via traefik + authentik. It has local access only so isn’t directly exposed to the internet.

      10 free accounts on duo is very nice but I hate being locked into things (not self hosted). An open source or self hosted alternative to duo would be great.