There’s SwiftFin, but it’s been a while from the last update (iOS app was updated recently though) and there’s a number of issues. It’s usable though (I’m using it).

Maybe Scribus (FOSS) could scratch that itch?

There’s LaserWeb but apparently it doesn’t support closed source (Chinese) firmware so you’d need to change your laser’s controller…

The only alternative I know of that goes close to what FreeIPA does (minus the cert part) is kanidm. It does:

• oauth2
• ssh key distribution
• RADIUS
• PAM/SSSD
• LDAP

I just noticed they have a beta for multimaster replication, which is nice.

I use it at home. Note, though, that it does not do any hand-holding, and all configuration is done through CLI. Also note, there are docs for the stable or dev branch and there sometimes are big differences between the two.

I mean, it is a bit rough, they’re not at 1.0 yet, also: are you looking at the stable or latest docs? That may be the reason the commands do not match with the docs.

I didn’t have any issues, do you see anything in the logs?

Yeah, sounds like a security feature… I was able to configure Traefik to connect with TLS, verifying the peer certificate.

Yes, it should cover all the use cases you mention!

I use oauth2-proxy as ForwardAuth on Traefik so I can protect apps that do not support OAuth/OIDC login/

I use kanidm with oauth2-proxy. No issues so far, it was pretty easy to set up.

Note that the connection to kanidm needs to be TLS even if you have a reverse proxy!

EDIT: currently using 80MB RAM for two users and three Service Providers.

I also moved away my domains and the ones of the hackerspace I manage, mainly to:

• infomaniak (Switzerland): a bit too pushy with extra services, but not bad
• openprovider (NL): more geared towards bulk users, have to prepay (min 20€), but okay so far
• aruba: meh, but free mailboxes are nice

I also use Migadu, they have been great so far!

desec.io for DNS, also great and supported by Traefik for DNS-01 ACME challenge.

I think you can create a group for friends and a group for family. If you want more separation I think Authentik handles multi-tenancy as well

Saving this for all my future pro-systemd flames, thank you!

I’m using sops with my GPG key currently.

Molise, Italy, which is a whole region that doesn’t exists!

It’s a bit chaotic, and they try to force you to pay for other stuff in the process, but the prices were not that far off from other registrars. Note that I use DeSEC for the actual nameservers though.

I’ve moved mine to Infomaniak (Switzerland), no complaints so far!

My UPS just died :( so I’m trying to repair it. It start beeping like it’s overloaded even with no load attached. I’m suspecting an issue around the current transformer ADC.

Apart from that, I have a TuringPi 2 loaded with SOQuartz boards to start up, I was thinking of trying kubernetes (k0s) to have some resilience for the base infra (dns resolver, dns root zone for the home domain, metrics) but I need a couple of days to start…

Maybe you could try tryton? It’s modular and you can add a lot of useful functionality for businesses, like stocks/orders etc

Grazie della risposta! Io avevo un Osprey ma dopo qualche anno è partita la cerniera (una delle poche cose escluse dalla loro garanzia a vita), e quindi ho preso un North Face, che non era male. Ora ne ho uno cinese tipo quelli di OP, ha moltissime tasche ma la build quality lascia a desiderare, dopo qualche mese ho dovuto far ricucire gli spallacci…

Si, anche a me faceva un po’ strano vedere la tasca portatile così lontana dallo schienale, alla fine sono 2-3kg a ~ 20 cm dalla schiena, che sa di faticoso :/

La retina elastica per la bottiglia com’è? Sul NF si è usurata ed è piena di buchi :/

Aaaa che bait! È carino cavolo, ma è resistente? Com’è zona spalline? Io di solito mi porto lo zaino che è sempre un po’ pesantino, e non lo tratto “benissimo”, quindi vorrei sapere se resiste ad un utilizzo giornaliero più pesante :)