Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Caddy is great but there sadly isn't anything like nginx-proxy-manager for it. The proxy manager is actually a full little identity provider and authenticating proxy--it's very slick and perfect for simple home self-hosting scenarios with a handful of users.


If you need auth, we (Caddy maintainers) are working on making it easier to integrate with external auth gateways, like Authelia. Today, we got it all working, so it's coming in the next release.


Could you please go into more detail regarding "a full little identity provider and authenticating proxy"? Does nginx-proxy-manager do something like SSO?


It does, there's a whole user management and permission model. Check the screenshots, there isn't much written in the docs: https://nginxproxymanager.com/screenshots/

It doesn't do SSO with SAML, OIDC, etc. like more heavyweight solutions. It's basically just a database of users (not even LDAP, it's all internal) who you grant access to proxied apps. Internally it just uses nginx's forward auth proxy support to do all this, it's not using anything complex or fancy. You'll have to configure proxied apps to read the logged in user from a header that nginx sets on redirect (most apps can do this, but not all).

edit: Spin up a docker container of it to kick the tires, it's very easy to get going and see what it can do: https://nginxproxymanager.com/guide/#quick-setup


Thanks!

I already have it running, I just had no idea it could do that. Guess I know what I'll do on the weekend :)


Yeah I can't find anything on the site about that. Could be a killer app if it also had some Fail2Ban mechanism + auth gateway. Then I could host apps that may have questionably robust auth and feel a bit better about it exposed to the internet.


For auth and identity stuff, try this plugin: https://github.com/greenpau/caddy-security


I use caddy for the oidc/oauth letsencrypt combo. Does nginx-proxy-manager support oidc? Reading the docs, I see only http basic auth.


Nope it just has its own login system, user management, and authenticating forward proxy all wrapped up into a nice looking low resource nodejs server. If you want full OIDC, etc. you probably want keycloak or some similar heavyweight IDP.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: