_cryptagion [he/him]

the only way to get into whatever version of heaven you believe in is to kill as many nazis and zionists as you can.

proud member of the db0 grassroots left wing qanon Russian troll farm sent to divide you all.

Follow me on Mastodon

  • 0 Posts
  • 358 Comments
Joined 11 months ago
cake
Cake day: November 4th, 2024

help-circle






  • EDIT: it’s been pointed out to me that using NetworkManager for Wireguard setup is shit. Instead use nmcli, this seems to have solved my problem.

    I’m using Bazzite Linux with KDE, and for me Wireguard setup is copy/pasting several bits of information on multiple settings pages. OpenVPN is just downloading a single config file and inputting my user/pass.

    Also, Wireguard disconnects so often, no matter which distro I’m on, that it’s a pain in the butt having to reconnect a few times an hour. Not to mention that I can’t have it set to autoconnect on login, or my internet doesn’t work until I disconnect and reconnect.










  • yes, it can do that, assuming you are using LDAP or have set up users/groups in the Authelia config. you don’t need to set it up in the caddyfile though, you can handle everything from Authelia’s end. for example, here is a typical protected item from my caddyfile.

    # this is a bit of code at the top that I use for every protected item, and call it each time to save space
    (protected) {
    	tls /ssl/home-cert.pem /ssl/home-key.pem
    	forward_auth :4100 {
    		uri /api/verify?rd=https://auth.myurl.xyz/
    		copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
    		header_up Host {upstream_hostport}
    	}
    	encode gzip
    }
    
    # UptimeKuma
    uptime.myurl.xyz {
        # now to call the code above for this item
    	import protected *
    	reverse_proxy :4000
    }
    

    that’s all I need in my caddyfile, just the bits that forward the information about the user to each site to log them in. I can then handle all the auth rules like saying which sites are only for admins or users in the Authelia config. since I use LDAP, I can set up the groups in that, then just specify which sites are DENY or TWO_FACTOR for each group in the Authelia config. or even in the apps themselves, if they support LDAP like Jellyfin and Forgejo.