this post was submitted on 10 Nov 2023
1 points (66.7% liked)

Self-Hosted Main

515 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
1
Authentik as it's own VM/Container - Does it provide extra security? (alien.top)
submitted 1 year ago by useless_mlungu@alien.top to c/main@selfhosted.forum
0 comments fedilink hide all child comments
 

The title really.

I've just got my head around Authentik and OAuth in general, and I will start implementing it in my homelab. But I was wondering, if I run the Authentik docker container alongside my other containerized services in the same VM, does this provide as much security as running this on a separate VM?

In my head, if there is this "physical" separation, the attacker would have nowhere to go if they somehow defeated Authentik.

So is it categorically better, or just a placebo to separate them out? I'd love to understand this fully, and do some recommended reading on the concepts whatever the answer, but I'm struggling to discover what to search for exactly. Thanks!

no comments (yet)
sorted by: hot top controversial new old
there doesn't seem to be anything here