Selfhosted

59999 readers

432 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam.
Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.
Don't duplicate the full text of your blog or git here. Just post the link for folks to click.
Submission headline should match the article title.
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

🛡️ uSentry - Identity & Access Management (github.com)

submitted 1 year ago by TCB13@lemmy.world to c/selfhosted@lemmy.world

25 comments fedilink hide all child comments

uSentry is a lightweight, self-hosted Identity and Access Management (IAM) and Single Sign-On (SSO) solution designed for homelab and small-scale environments.

⚡ A single PHP file. < 400 lines of code. No database. No background processes. No cloud. Just works. ⚡

Most IAM and SSO solutions require databases, certificates and background services baked into a dozen containers. This is all fine but also also overkill for homelabs and impossible for low-power ARM devices. uSentry is different, it isn't pretty but it sucks less for a lot of use cases.

Enjoy!

you are viewing a single comment's thread
view the rest of the comments

[–] cecilkorik@lemmy.ca 8 points 1 year ago* (last edited 1 year ago) (1 children)

I have been constantly asking myself why there isn't something like this, and just wondering if maybe I was missing something about the seeming immense complexity of doing this on a small scale.

Now there is something like this.

I don't love PHP, but I also don't love having dozens of separate passwords, keys, certificates and other nonsense to keep track of like I'm doing now. I don't mind using PHP to get around that if I can.

[–] TCB13@lemmy.world 4 points 1 year ago

Well, it isn’t pretty, but gets the job done.

The thing with PHP in this case is that I was already serving a ton of simple websites / small apps like freshrss that use PHP and by making this tool in PHP it means I don’t need yet another process running and wasting resources, can just re-use the existing php-fpm for this.

For what’s worth PHP is better than it looks, and my implementation is very crude, but also small and auditable and contained to a single file. :)