#oidc
2 posts tagged oidc.
The gateway: self-hosted NetBird behind Caddy, with a relay
Now the WireGuard control plane. This part stands up self-hosted NetBird on a DMZ gateway, fronts it with Caddy issuing TLS over DNS-01, points it at the SSO for auth, and adds a coturn relay for the peers that can't connect directly.
The identity spine: Keycloak in front of an existing directory
Before the mesh can ask 'who are you?', something has to answer with authority. This part stands up Keycloak as the SSO front door and federates the existing directory read-only, adding MFA without migrating a single account.