#pocketid — Public Fediverse posts

@jwildeboer @homelab I also have #PocketID running in my homelab also with my own CA (#stepca) but using a #caddy reverse proxy.

If you also need/want SSH key provisioning (amongst other things) I can recommend #kanidm

It doesn't offer a fancy admin web interface like PocketID, though. There is a minimal one for users - for admins there is a powerful CLI.

https://kanidm.github.io/

@jwildeboer @homelab I also have #PocketID running in my homelab also with my own CA (#stepca) but using a #caddy reverse proxy.

If you also need/want SSH key provisioning (amongst other things) I can recommend #kanidm

It doesn't offer a fancy admin web interface like PocketID, though. There is a minimal one for users - for admins there is a powerful CLI.

https://kanidm.github.io/

@jwildeboer @homelab I also have #PocketID running in my homelab also with my own CA (#stepca) but using a #caddy reverse proxy.

If you also need/want SSH key provisioning (amongst other things) I can recommend #kanidm

It doesn't offer a fancy admin web interface like PocketID, though. There is a minimal one for users - for admins there is a powerful CLI.

https://kanidm.github.io/

@jwildeboer @homelab I also have #PocketID running in my homelab also with my own CA (#stepca) but using a #caddy reverse proxy.

If you also need/want SSH key provisioning (amongst other things) I can recommend #kanidm

It doesn't offer a fancy admin web interface like PocketID, though. There is a minimal one for users - for admins there is a powerful CLI.

https://kanidm.github.io/

@panda @tandemblog @hrafnagud @homelab Exactly, that‘s why i‘m rolling out pocket-id for all my personal services. https://pocket-id.org #pocketid

@[email protected] @tandemblog @hrafnagud @homelab Exactly, that‘s why i‘m rolling out pocket-id for all my personal services. https://pocket-id.org #pocketid

@panda @tandemblog @hrafnagud @homelab Exactly, that‘s why i‘m rolling out pocket-id for all my personal services. https://pocket-id.org #pocketid

@panda @tandemblog @hrafnagud @homelab Exactly, that‘s why i‘m rolling out pocket-id for all my personal services. https://pocket-id.org #pocketid

I know some of you are waiting for a blog post or gist on how I do it, but I first need to solve a few problems, mainly on how to get PocketID on a separate virtual network so that name resolution and connections work between the various containers on the same machine. Also: how to map the host CA certificates into the containers. If you know, how to do this with #podman please share, so that I can learn! Stay tuned :)

#PocketID #SSO #SelfHost @homelab

I know some of you are waiting for a blog post or gist on how I do it, but I first need to solve a few problems, mainly on how to get PocketID on a separate virtual network so that name resolution and connections work between the various containers on the same machine. Also: how to map the host CA certificates into the containers. If you know, how to do this with #podman please share, so that I can learn! Stay tuned :)

#PocketID #SSO #SelfHost @homelab

I know some of you are waiting for a blog post or gist on how I do it, but I first need to solve a few problems, mainly on how to get PocketID on a separate virtual network so that name resolution and connections work between the various containers on the same machine. Also: how to map the host CA certificates into the containers. If you know, how to do this with #podman please share, so that I can learn! Stay tuned :)

#PocketID #SSO #SelfHost @homelab

Wrt my previous post, yesterday I was setting up Affine on my SO's phone to finally get off our iCloud shared Notes

Everything works well, get the app, configure the server URL, login in with OIDC... Woops, 503 error

PocketID had been descheduled and left hanging after a failing node took the longhorn lock in its downfall

A quick lock release and boom, we are back to business, all notes are in both of our phones, and with realtime editing !

#selfhost #selfhosted #selfhosting #homelab #affine #note #notes #notetaking #OIDC #sso #pocketid #kubernetes #longhorn #icloud #sovereignty #dataownership #apple #deapple

Wrt my previous post, yesterday I was setting up Affine on my SO's phone to finally get off our iCloud shared Notes

Everything works well, get the app, configure the server URL, login in with OIDC... Woops, 503 error

PocketID had been descheduled and left hanging after a failing node took the longhorn lock in its downfall

A quick lock release and boom, we are back to business, all notes are in both of our phones, and with realtime editing !

#selfhost #selfhosted #selfhosting #homelab #affine #note #notes #notetaking #OIDC #sso #pocketid #kubernetes #longhorn #icloud #sovereignty #dataownership #apple #deapple

Wrt my previous post, yesterday I was setting up Affine on my SO's phone to finally get off our iCloud shared Notes

Everything works well, get the app, configure the server URL, login in with OIDC... Woops, 503 error

PocketID had been descheduled and left hanging after a failing node took the longhorn lock in its downfall

A quick lock release and boom, we are back to business, all notes are in both of our phones, and with realtime editing !

#selfhost #selfhosted #selfhosting #homelab #affine #note #notes #notetaking #OIDC #sso #pocketid #kubernetes #longhorn #icloud #sovereignty #dataownership #apple #deapple

Wrt my previous post, yesterday I was setting up Affine on my SO's phone to finally get off our iCloud shared Notes

Everything works well, get the app, configure the server URL, login in with OIDC... Woops, 503 error

PocketID had been descheduled and left hanging after a failing node took the longhorn lock in its downfall

A quick lock release and boom, we are back to business, all notes are in both of our phones, and with realtime editing !

#selfhost #selfhosted #selfhosting #homelab #affine #note #notes #notetaking #OIDC #sso #pocketid #kubernetes #longhorn #icloud #sovereignty #dataownership #apple #deapple

Thinking about using PocketID for authenticating myself (and other tenants) onto my K3S cluster

Thing is, said PocketID instance lives on said K3S cluster 🤔

I think it’s gonna be a chicken, egg and break-glass situation all over again

#k3s #kubernetes #kubectl #pocketid #sso #oidc #selfhosted #selfhost #selfhosting #homelab

Thinking about using PocketID for authenticating myself (and other tenants) onto my K3S cluster

Thing is, said PocketID instance lives on said K3S cluster 🤔

I think it’s gonna be a chicken, egg and break-glass situation all over again

#k3s #kubernetes #kubectl #pocketid #sso #oidc #selfhosted #selfhost #selfhosting #homelab

Thinking about using PocketID for authenticating myself (and other tenants) onto my K3S cluster

Thing is, said PocketID instance lives on said K3S cluster 🤔

I think it’s gonna be a chicken, egg and break-glass situation all over again

#k3s #kubernetes #kubectl #pocketid #sso #oidc #selfhosted #selfhost #selfhosting #homelab

Thinking about using PocketID for authenticating myself (and other tenants) onto my K3S cluster

Thing is, said PocketID instance lives on said K3S cluster 🤔

I think it’s gonna be a chicken, egg and break-glass situation all over again

#k3s #kubernetes #kubectl #pocketid #sso #oidc #selfhosted #selfhost #selfhosting #homelab

Y por su puesto integración con OIDC
⚠️ Cuidado que #PocketID engancha

Y por su puesto integración con OIDC
⚠️ Cuidado que #PocketID engancha

Y por su puesto integración con OIDC
⚠️ Cuidado que #PocketID engancha

Y por su puesto integración con OIDC
⚠️ Cuidado que #PocketID engancha

@jwildeboer @homelab Switched from authentik to #PocketID as well two weeks ago. Great software and although authentik worked well, this one is smaller and there's less to misconfigure: A great choice for smaller setups with "#Passkeys first" in mind!

@jwildeboer @homelab Switched from authentik to #PocketID as well two weeks ago. Great software and although authentik worked well, this one is smaller and there's less to misconfigure: A great choice for smaller setups with "#Passkeys first" in mind!

@jwildeboer @homelab Switched from authentik to #PocketID as well two weeks ago. Great software and although authentik worked well, this one is smaller and there's less to misconfigure: A great choice for smaller setups with "#Passkeys first" in mind!

@jwildeboer @homelab Switched from authentik to #PocketID as well two weeks ago. Great software and although authentik worked well, this one is smaller and there's less to misconfigure: A great choice for smaller setups with "#Passkeys first" in mind!

I guess I will add #PocketID [1] to my homelab. I already have my own CA (Certificate Authority) with step-ca [2] and my own S3 compatible storage layer with Garage [3], so it seems to be the perfect companion to create a "simple datacenter in a few boxes" that supports open(-ish) standards but without the complexity of running an oversized infrastructire layer. Small and open is beautiful.

1/6

[1] https://pocket-id.org
[2] https://jan.wildeboer.net/2025/07/letsencrypt-homelab-stepca/
[3] https://jan.wildeboer.net/2026/01/1-Local-S3-With-Garage/

@homelab

I guess I will add #PocketID [1] to my homelab. I already have my own CA (Certificate Authority) with step-ca [2] and my own S3 compatible storage layer with Garage [3], so it seems to be the perfect companion to create a "simple datacenter in a few boxes" that supports open(-ish) standards but without the complexity of running an oversized infrastructire layer. Small and open is beautiful.

1/6

[1] https://pocket-id.org
[2] https://jan.wildeboer.net/2025/07/letsencrypt-homelab-stepca/
[3] https://jan.wildeboer.net/2026/01/1-Local-S3-With-Garage/

@homelab

I guess I will add #PocketID [1] to my homelab. I already have my own CA (Certificate Authority) with step-ca [2] and my own S3 compatible storage layer with Garage [3], so it seems to be the perfect companion to create a "simple datacenter in a few boxes" that supports open(-ish) standards but without the complexity of running an oversized infrastructire layer. Small and open is beautiful.

1/6

[1] https://pocket-id.org
[2] https://jan.wildeboer.net/2025/07/letsencrypt-homelab-stepca/
[3] https://jan.wildeboer.net/2026/01/1-Local-S3-With-Garage/

@homelab

I've really loved #authentik but over time, it growed beyond the needs of someone running just some services in his #homelab. Then I stumbled upon #PocketID and discovered that - ditching passwords and only focusing on #passkeys - this one matched my needs in terms of speed, standards and flexibility even more.

Check it out at https://pocket-id.org - it's easy to deploy and even more easier to deal with. Great, modern application supporting #OpenID Connect and #OAuth 2.0!

Solutions like authentik or Keycloak are still great but - at least in my case -rather taking a sledgehammer to crack a nut but hey - home is no Enterprise!

@homelab @homelab_de

I've really loved #authentik but over time, it growed beyond the needs of someone running just some services in his #homelab. Then I stumbled upon #PocketID and discovered that - ditching passwords and only focusing on #passkeys - this one matched my needs in terms of speed, standards and flexibility even more.

Check it out at https://pocket-id.org - it's easy to deploy and even more easier to deal with. Great, modern application supporting #OpenID Connect and #OAuth 2.0!

Solutions like authentik or Keycloak are still great but - at least in my case -rather taking a sledgehammer to crack a nut but hey - home is no Enterprise!

@homelab @homelab_de

I've really loved #authentik but over time, it growed beyond the needs of someone running just some services in his #homelab. Then I stumbled upon #PocketID and discovered that - ditching passwords and only focusing on #passkeys - this one matched my needs in terms of speed, standards and flexibility even more.

Check it out at https://pocket-id.org - it's easy to deploy and even more easier to deal with. Great, modern application supporting #OpenID Connect and #OAuth 2.0!

Solutions like authentik or Keycloak are still great but - at least in my case -rather taking a sledgehammer to crack a nut but hey - home is no Enterprise!

@homelab @homelab_de

I've really loved #authentik but over time, it growed beyond the needs of someone running just some services in his #homelab. Then I stumbled upon #PocketID and discovered that - ditching passwords and only focusing on #passkeys - this one matched my needs in terms of speed, standards and flexibility even more.

Check it out at https://pocket-id.org - it's easy to deploy and even more easier to deal with. Great, modern application supporting #OpenID Connect and #OAuth 2.0!

Solutions like authentik or Keycloak are still great but - at least in my case -rather taking a sledgehammer to crack a nut but hey - home is no Enterprise!

@homelab @homelab_de

Win of the day

I am currently thousands of kilometers from my homelab, and one of my nodes crashed. This cascaded into several services going down, including my auth provider (PocketID), so I couldn't log in from new devices

I recently installed a network enabled PDU into the rack, so I could log into its web interface by tunneling through various SSH hoops, but I never mapped which outlet goes to what host

I eventually could correspond the last node event in my k3s cluster with the consumption on one outlet, sent a reboot instruction, and the node came back up

Is it what I'm supposed to cross arms and say "Hackerman" ?

#homelab #selfhost #selfhosted #selfhosting #hackerman #ssh #outage #pocketid #k3s #kubernetes #pdu #remote #network #reboot

Win of the day

I am currently thousands of kilometers from my homelab, and one of my nodes crashed. This cascaded into several services going down, including my auth provider (PocketID), so I couldn't log in from new devices

I recently installed a network enabled PDU into the rack, so I could log into its web interface by tunneling through various SSH hoops, but I never mapped which outlet goes to what host

I eventually could correspond the last node event in my k3s cluster with the consumption on one outlet, sent a reboot instruction, and the node came back up

Is it what I'm supposed to cross arms and say "Hackerman" ?

#homelab #selfhost #selfhosted #selfhosting #hackerman #ssh #outage #pocketid #k3s #kubernetes #pdu #remote #network #reboot

Win of the day

I am currently thousands of kilometers from my homelab, and one of my nodes crashed. This cascaded into several services going down, including my auth provider (PocketID), so I couldn't log in from new devices

I recently installed a network enabled PDU into the rack, so I could log into its web interface by tunneling through various SSH hoops, but I never mapped which outlet goes to what host

I eventually could correspond the last node event in my k3s cluster with the consumption on one outlet, sent a reboot instruction, and the node came back up

Is it what I'm supposed to cross arms and say "Hackerman" ?

#homelab #selfhost #selfhosted #selfhosting #hackerman #ssh #outage #pocketid #k3s #kubernetes #pdu #remote #network #reboot

Win of the day

I am currently thousands of kilometers from my homelab, and one of my nodes crashed. This cascaded into several services going down, including my auth provider (PocketID), so I couldn't log in from new devices

I recently installed a network enabled PDU into the rack, so I could log into its web interface by tunneling through various SSH hoops, but I never mapped which outlet goes to what host

I eventually could correspond the last node event in my k3s cluster with the consumption on one outlet, sent a reboot instruction, and the node came back up

Is it what I'm supposed to cross arms and say "Hackerman" ?

#homelab #selfhost #selfhosted #selfhosting #hackerman #ssh #outage #pocketid #k3s #kubernetes #pdu #remote #network #reboot

I couldn’t really find any documentation on this, so I thought I’d write down what I found:

Setting up OIDC for Mastodon with Pocket ID

https://blog.thms.uk/2026/07/mastodon-oidc-setup/?utm_source=mastodon

#MastoAdmin #oidc #pocketID

I couldn’t really find any documentation on this, so I thought I’d write down what I found:

Setting up OIDC for Mastodon with Pocket ID

https://blog.thms.uk/2026/07/mastodon-oidc-setup/?utm_source=mastodon

#MastoAdmin #oidc #pocketID

I couldn’t really find any documentation on this, so I thought I’d write down what I found:

Setting up OIDC for Mastodon with Pocket ID

https://blog.thms.uk/2026/07/mastodon-oidc-setup/?utm_source=mastodon

#MastoAdmin #oidc #pocketID

I couldn’t really find any documentation on this, so I thought I’d write down what I found:

Setting up OIDC for Mastodon with Pocket ID

https://blog.thms.uk/2026/07/mastodon-oidc-setup/?utm_source=mastodon

#MastoAdmin #oidc #pocketID

Hat jemand #PocketID im Einsatz und das irgendwie ausfallsicher gebaut?

Ich repliziere bei mir auf andere Proxmox Nodes und kann damit den Ausfall des darunterliegenden Systems selbst abfangen.
Was ich nicht kann: Systemische Fehler von PocketID durch Redundanz absichern.

Hat das jemand schon gemacht?

Hat jemand #PocketID im Einsatz und das irgendwie ausfallsicher gebaut?

Ich repliziere bei mir auf andere Proxmox Nodes und kann damit den Ausfall des darunterliegenden Systems selbst abfangen.
Was ich nicht kann: Systemische Fehler von PocketID durch Redundanz absichern.

Hat das jemand schon gemacht?

Hat jemand #PocketID im Einsatz und das irgendwie ausfallsicher gebaut?

Ich repliziere bei mir auf andere Proxmox Nodes und kann damit den Ausfall des darunterliegenden Systems selbst abfangen.
Was ich nicht kann: Systemische Fehler von PocketID durch Redundanz absichern.

Hat das jemand schon gemacht?

Hat jemand #PocketID im Einsatz und das irgendwie ausfallsicher gebaut?

Ich repliziere bei mir auf andere Proxmox Nodes und kann damit den Ausfall des darunterliegenden Systems selbst abfangen.
Was ich nicht kann: Systemische Fehler von PocketID durch Redundanz absichern.

Hat das jemand schon gemacht?

I was researching a way to get to my home network remotely when my #pocketID is unreachable, as I’m using it as an identity provider for #Tailscale. Turns out #unifi One-Click VPN is like Tailscale, but with the server on your router. Also, it is actually a #wireguard so you can connect any server to it. Looks like a good alternative for Tailscale.

#homelab #SelfHosted #selfhost #selfhosting

I was researching a way to get to my home network remotely when my #pocketID is unreachable, as I’m using it as an identity provider for #Tailscale. Turns out #unifi One-Click VPN is like Tailscale, but with the server on your router. Also, it is actually a #wireguard so you can connect any server to it. Looks like a good alternative for Tailscale.

#homelab #SelfHosted #selfhost #selfhosting

I was researching a way to get to my home network remotely when my #pocketID is unreachable, as I’m using it as an identity provider for #Tailscale. Turns out #unifi One-Click VPN is like Tailscale, but with the server on your router. Also, it is actually a #wireguard so you can connect any server to it. Looks like a good alternative for Tailscale.

#homelab #SelfHosted #selfhost #selfhosting

I was researching a way to get to my home network remotely when my #pocketID is unreachable, as I’m using it as an identity provider for #Tailscale. Turns out #unifi One-Click VPN is like Tailscale, but with the server on your router. Also, it is actually a #wireguard so you can connect any server to it. Looks like a good alternative for Tailscale.

#homelab #SelfHosted #selfhost #selfhosting

Dealing with passkeys is kind of hassle for me. Does it get better after a while?

I’m asking because I started selfhosting PocketID and it ONLY has passkeys, no passwords and I have to decide if I keep it or not.

#selfHosting #passkeys #pocketid #askFedi #security

Dealing with passkeys is kind of hassle for me. Does it get better after a while?

I’m asking because I started selfhosting PocketID and it ONLY has passkeys, no passwords and I have to decide if I keep it or not.

#selfHosting #passkeys #pocketid #askFedi #security

Dealing with passkeys is kind of hassle for me. Does it get better after a while?

I’m asking because I started selfhosting PocketID and it ONLY has passkeys, no passwords and I have to decide if I keep it or not.

#selfHosting #passkeys #pocketid #askFedi #security

Dealing with passkeys is kind of hassle for me. Does it get better after a while?

I’m asking because I started selfhosting PocketID and it ONLY has passkeys, no passwords and I have to decide if I keep it or not.

#selfHosting #passkeys #pocketid #askFedi #security

I've installed Pocked ID recently and switched many of my self hosted services over to it, and I absolutely love it! It's pretty, it's fast, it works really well!

Pocket ID is an Open ID provider that you can use for self hosted Single Sign On.

https://pocket-id.org

I just wish more services supported it!

#PocketID #SSO #SelfHosting #OpenID #OIDC

I've installed Pocked ID recently and switched many of my self hosted services over to it, and I absolutely love it! It's pretty, it's fast, it works really well!

Pocket ID is an Open ID provider that you can use for self hosted Single Sign On.

https://pocket-id.org

I just wish more services supported it!

#PocketID #SSO #SelfHosting #OpenID #OIDC

I've installed Pocked ID recently and switched many of my self hosted services over to it, and I absolutely love it! It's pretty, it's fast, it works really well!

Pocket ID is an Open ID provider that you can use for self hosted Single Sign On.

https://pocket-id.org

I just wish more services supported it!

#PocketID #SSO #SelfHosting #OpenID #OIDC

I've installed Pocked ID recently and switched many of my self hosted services over to it, and I absolutely love it! It's pretty, it's fast, it works really well!

Pocket ID is an Open ID provider that you can use for self hosted Single Sign On.

https://pocket-id.org

I just wish more services supported it!

#PocketID #SSO #SelfHosting #OpenID #OIDC

@thoralf hab Pocketid auch noch auf der liste, da es vor einiger Zeit mal in der c't war. Bisher aber leider noch keine Zeit für die Umsetzung. #pocketid

@thoralf hab Pocketid auch noch auf der liste, da es vor einiger Zeit mal in der c't war. Bisher aber leider noch keine Zeit für die Umsetzung. #pocketid