steropes

Raspberry Pi 4B running Authelia.

I use Authelia throughout the lab to provide SSO for the services I host. Ideally, that's with OpenID Connect, but for things that don't support that, I use it as a forward proxy in front of the services.

The forward proxy implies that there are services that are completely inaccessible if Authelia is down, since it must intercept all requests to those services to check if a user is logged in. Because of this, I've found it much less disruptive to host Authelia on a separate machine from other things, so that deploys and reboots are fast, minimizing downtime.

A better approach generally would be to run multiple Authelia machines, but that would require sharing its database and Redis instance between those machines. I briefly explored options for that, but set it aside due to complexity. So far, simply isolating it to this one Raspberry Pi has largely eliminated any meaningful disruption for me.

=> NixOS configuration