I mean, it is a bit rough, they’re not at 1.0 yet, also: are you looking at the stable or latest docs? That may be the reason the commands do not match with the docs.

I didn’t have any issues, do you see anything in the logs?

Yeah, sounds like a security feature… I was able to configure Traefik to connect with TLS, verifying the peer certificate.

Yes, it should cover all the use cases you mention!

I use oauth2-proxy as ForwardAuth on Traefik so I can protect apps that do not support OAuth/OIDC login/

I use kanidm with oauth2-proxy. No issues so far, it was pretty easy to set up.

Note that the connection to kanidm needs to be TLS even if you have a reverse proxy!

EDIT: currently using 80MB RAM for two users and three Service Providers.

I also moved away my domains and the ones of the hackerspace I manage, mainly to:

• infomaniak (Switzerland): a bit too pushy with extra services, but not bad
• openprovider (NL): more geared towards bulk users, have to prepay (min 20€), but okay so far
• aruba: meh, but free mailboxes are nice

I also use Migadu, they have been great so far!

desec.io for DNS, also great and supported by Traefik for DNS-01 ACME challenge.

I think you can create a group for friends and a group for family. If you want more separation I think Authentik handles multi-tenancy as well

I’m using sops with my GPG key currently.

Maybe you could try tryton? It’s modular and you can add a lot of useful functionality for businesses, like stocks/orders etc

I’m also leaving, migrates to infomaniak as a registrar, DeSec as DNS provider and Migadu for email… no regrets!

I use sops, usually with exec-env

Huh, that’s actually way better than my current setup of spamming me on Telegram every time there’s an update

Huh, great idea about client certs! I think I’ll implement mine that way!

Yeah, I was registering my domains there because they are in Europe and had some extra services, I’ll be taking my business elsewhere now

Oh nice, and they’re based in EU too, which is better for me, too!

I received the notice via email, but their FAQ about GandiMail discontinuation is here. Updated prices list (PDF) is here

Yeah, that’s a solid choice! I’ve used their proxy service and was pretty solid.