home.social

#glauth — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #glauth, aggregated by home.social.

  1. @pezhore

    I had deployed #FreeIPA before briefly but recently I chose #GLauth which is lighter than both FreeIPA and #OpenLDAP. I'll probably revisit it at some point and I'll be sure to check out the #ansible roles for it, but for now #GLauth is sitting in fine.

    I like that GLauth can be configured by a singular text file which I can easily version in Git. I'll have to see if there are ansible roles for adding GLauth user entires. I will also be using #Keycloak for my first test.

    As for running a three-node-cluster yeah I think you'll be happy with it. I'm using #Terraform with the #Proxmox provider. You need to set up an API key and then the template OS. The easiest way is to use a Cloud image that has cloud-init capabilities so you can seed users/keys. That way your later #Ansible playbooks can hook in easily. You can probably also find a strictly Ansible way to deploy to Proxmox on Ansible Galaxy, but I like using Terraform where it fits best -- provisioning.

    Good point about secret management, I'll be using a combination of tools but HC #Vault will be among them.

    What are your learning goals with your lab and what do you tend to do with yours?

  2. @silverwizard for my somewhat simple setup I used #openldap for a while but it was honestly overkill. I found #glauth and that has fit the bill nicely for me. I don't have any experience with HA/failover for it though.