Notices by p̻̻̥r̥̻̥o̻j̤͛ec͔t̞dp :verifiedpurple: (projectdp@infosec.exchange)

@y3mz

Thanks for the recommendations on each point that was very thorough. Yes for the idm/p sso f2 stuff those are definitely some of the options I'll end up testing out. For #StableDiffusion I plan on trying from my container host first without GPU pass-through and check performance. Otherwise I may use one of my GPU rigs to do so. For IaC, I've heard of #Drone but not #WoodPecker.

I like that you're using #nixos that's great! I was hoping to understand your lab goals a bit better. Regarding the darknet mesh is that mostly to allow private access to your lab #network? Can you explain what goals you'd like to accomplish with your #homelab activities?

@silverwizard @mhamzahkhan You could also look into Keycloak + (Open)LDAP for an SSO option. I'm thinking you could also run FreeIPA LDAP and set up Keycloak with that for a decent SSO setup for your lab.

I'm still looking into options myself. There are a bunch of ways to do the internet-to-homelab proxying with solid SSO and security throughout and I haven't found out what works for me the best quite yet. Part of it is doing proper implementation of ZeroTrust principles throughout the entire process.

@mhamzahkhan @silverwizard That's good to hear about Keycloak I do want to try it out. What part about FreeIPA was annoying to maintain?

@silverwizard @mattknight I haven't tried these but have been meaning to: https://glauth.github.io/ and https://www.freeipa.org/