It’s really new.

It’s by the creator of Bottles btw.

I like Authentik, as I really like:

• Support for every auth protocol, particularly OIDC and LDAP
• Invites that can invite multiple people, letting me onboard a room of people at once
• Python based scripting that lets me script some integrations and do API calls when users authenticate

But at the same time, Authentik is very, very complex.

If you just want LDAP and OIDC in the same app, I would probably recommend KanIDM. KanIDM also does invites (although only one user at a time).

If you just want OIDC itself, pocket ID (passwordless /passkey only) and void auth both are really simple OIDC providers (that also support sign ups/invite links. EDIT: Ah, it looks like Void Auth has an experimental read only LDAP server feature. Nice.

I am also paying attention to (some less popular options):

• Rauthy: Fairly minimal, supporting OIDC… but also supports PAM for Linux/Unix integrations
• Casdoor: seems to be feature rich like authentik, but perhaps not as difficult to deploy and configure
• Univention Nubus: An open source, European auth software, that is feature rich, but has an appliance virtual machine that might make it easier to install.

I like Authentik, although I really like:

• Support for every auth protocol, particularly OIDC and LDAP
• Invites that can invite multiple people, letting me onboard a room of people at once
• Python based scripting that lets me script some integrations and do API calls when users authenticate

But at the same time, Authentik is very, very complex.

If you just want LDAP and OIDC in the same app, I would probably recommend KanIDM. KanIDM also does invites (although only one user at a time).

If you just want OIDC itself, pocket ID (passwordless /passkey only) and void auth both are really simple OIDC providers (that also support sign ups.

I am also paying attention to:

• Rauthy

• Casdoor (seems to be similarly feature rich like auhentik

I only wish it had mock-LDAP so I could use it with things that don’t do OIDC like OpnSense

KanIDM is probably the simplest auth server that does both OIDC and LDAP in one app. Although Kanidm’s LDAP is read only.

Hmmm, games / game servers are a bit different since, they are rarely ARM and mostly x86.

You can use tools like muvm or fex to run the x86 version of wine, and then use that to run game servers: https://docs.fedoraproject.org/en-US/fedora-asahi-remix/x86-support/

People have been able to game on the M1 since it has hardware acceleration, although I never gamed.

When I had Asahi, I just used it as a daily driver laptop. It worked perfectly fine for all of the stuff I wanted to do on my M1.

For a server, it will probably work fine as well. You have to ensure that say, the apps/docker containers you use support ARM, but ARM is fairly popular and well supported nowadays.

I did have one issue with podman, where apparently the memory is organized differently on the M1, which causes some docker containers, even if they are built for ARM, to be incompatible. I had to use podman machine, which is podman’s built in virtual machine that lets you run containers in their instead. It is designed for Mac OS, which is kind of ironic since the whole point of using Linux was that I wouldn’t have to run a virtual machine just to run podman/docker containers.