How I Migrated From Authentik to Pocket ID With TinyAuth on NixOS
A while back I wrote about how I set up Authentik forward auth with Traefik on NixOS. It worked, but over time Authentik got a bit heavy for what I actually needed from it, i.e. one identity provider and a forward auth in front of a few self-hosted apps. So I swapped it out for Pocket ID (a small OIDC provider) and TinyAuth (a tiny forward auth that talks to it). This post is the sequel to that one, showing how I did the migration on NixOS. The services themselves are NixOS modules, and the OIDC clients and their secrets are declared in nix too but applied with OpenTofu via Terranix, so the whole thing is declarative end to end. ...