3 ms·

Caddy is great but there sadly isn't anything like nginx-proxy-manager for it. The proxy manager is actually a full little identity provider and authenticating

Caddy is great but there sadly isn't anything like nginx-proxy-manager for it. The proxy manager is actually a full little identity provider and authenticating proxy--it's very slick and perfect for simple home self-hosting scenarios with a handful of users.

fdw 4y ago
Could you please go into more detail regarding "a full little identity provider and authenticating proxy"? Does nginx-proxy-manager do something like SSO?
- tegiddrone 4y ago
  Yeah I can't find anything on the site about that. Could be a killer app if it also had some Fail2Ban mechanism + auth gateway. Then I could host apps that may have questionably robust auth and feel a bit better about it exposed to the internet.
- qbasic_forever 4y ago
  It does, there's a whole user management and permission model. Check the screenshots, there isn't much written in the docs: https://nginxproxymanager.com/screenshots/ https://nginxproxymanager.com/screenshots/ It doesn't do SSO with SAML, OIDC, etc. like more heavyweight solutions. It's basically just a database of users (not even LDAP, it's all internal) who you grant access to proxied apps. Internally it just uses nginx's forward auth proxy support to do all this, it's not using anything complex or fancy. You'll have to configure proxied apps to read the logged in user from a header that nginx sets on redirect (most apps can do this, but not all). edit: Spin up a docker container of it to kick the tires, it's very easy to get going and see what it can do: https://nginxproxymanager.com/guide/#quick-setup https://nginxproxymanager.com/guide/#quick-setup
  - fdw 4y ago
    Thanks! I already have it running, I just had no idea it could do that. Guess I know what I'll do on the weekend :)
0xEFF 4y ago
I use caddy for the oidc/oauth letsencrypt combo. Does nginx-proxy-manager support oidc? Reading the docs, I see only http basic auth.
- qbasic_forever 4y ago
  Nope it just has its own login system, user management, and authenticating forward proxy all wrapped up into a nice looking low resource nodejs server. If you want full OIDC, etc. you probably want keycloak or some similar heavyweight IDP.
mholt 4y ago
For auth and identity stuff, try this plugin: https://github.com/greenpau/caddy-security https://github.com/greenpau/caddy-security
francislavoie 4y ago
If you need auth, we (Caddy maintainers) are working on making it easier to integrate with external auth gateways, like Authelia. Today, we got it all working, so it's coming in the next release.

fdw 4y ago

Could you please go into more detail regarding "a full little identity provider and authenticating proxy"? Does nginx-proxy-manager do something like SSO?

tegiddrone 4y ago
Yeah I can't find anything on the site about that. Could be a killer app if it also had some Fail2Ban mechanism + auth gateway. Then I could host apps that may have questionably robust auth and feel a bit better about it exposed to the internet.
qbasic_forever 4y ago
It does, there's a whole user management and permission model. Check the screenshots, there isn't much written in the docs: https://nginxproxymanager.com/screenshots/ https://nginxproxymanager.com/screenshots/ It doesn't do SSO with SAML, OIDC, etc. like more heavyweight solutions. It's basically just a database of users (not even LDAP, it's all internal) who you grant access to proxied apps. Internally it just uses nginx's forward auth proxy support to do all this, it's not using anything complex or fancy. You'll have to configure proxied apps to read the logged in user from a header that nginx sets on redirect (most apps can do this, but not all). edit: Spin up a docker container of it to kick the tires, it's very easy to get going and see what it can do: https://nginxproxymanager.com/guide/#quick-setup https://nginxproxymanager.com/guide/#quick-setup
- fdw 4y ago
  Thanks! I already have it running, I just had no idea it could do that. Guess I know what I'll do on the weekend :)

0xEFF 4y ago

I use caddy for the oidc/oauth letsencrypt combo. Does nginx-proxy-manager support oidc? Reading the docs, I see only http basic auth.

qbasic_forever 4y ago
Nope it just has its own login system, user management, and authenticating forward proxy all wrapped up into a nice looking low resource nodejs server. If you want full OIDC, etc. you probably want keycloak or some similar heavyweight IDP.

mholt 4y ago

For auth and identity stuff, try this plugin: https://github.com/greenpau/caddy-security https://github.com/greenpau/caddy-security

francislavoie 4y ago

If you need auth, we (Caddy maintainers) are working on making it easier to integrate with external auth gateways, like Authelia. Today, we got it all working, so it's coming in the next release.