Simple authentication for homelab? - eviltoast

What’s everyones recommendations for a self-hosted authentication system?

My requirements are basically something lightweight that can handle logins for both regular users and google. I only have 4-5 total users.

So far, I’ve looked at and tested:

  • Authentik - Seems okay, but also really slow for some reason. I’m also not a fan of the username on one page, password on the next screen flow
  • Keycloak - Looks like it might be lighter in resources these days, but definitely complicated to use
  • LLDAP - I’d be happy to use it for the ldap backend, but it doesn’t solve the whole problem
  • Authelia - No web ui, which is fine, but also doesn’t support social logins as far as I can tell. I think it would be my choice if it did support oidc
  • Zitadel - Sounds promising, but I spent a couple hours troubleshooting it just to get it working. I might go back to it, but I’ve had the most trouble with it so far and can’t even compare the actual config yet
  • notfromhere@lemmy.ml
    link
    fedilink
    English
    arrow-up
    3
    ·
    9 months ago
    • Authentik is pretty resource intensive. Needs something like 3 servers/instances. A database, a server and a worker. Uses something like 800+ MB ram just for this service. Since I run my services on raspberry Pi 3s, I ended up moving away from this
    • Keycloak works great but is a bit difficult to set up and doesn’t support all the authentication protocols that Authentik does
    • johntashOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      9 months ago

      Did you move to Keycloak, or something else?

      • notfromhere@lemmy.ml
        link
        fedilink
        English
        arrow-up
        5
        ·
        9 months ago

        Honestly I just moved back to local accounts. I’m interested in the other comments on this post for a good solution to move to.