A while back I wrote about how I set up Authentik forward auth with Traefik on NixOS. It worked fine but recently I decided to rebuild my homelab/vps from scratch and decided to try moving to Pocket ID (and TinyAuth). We will also cover how I migrated over, though this was very basic I didn’t actually move any data over. This is all installed via NixOS, so I want things to be as declarative as possible, i.e. fewest manual steps I need to do. ...
A while back I wrote about how I set up Authentik forward auth with Traefik on NixOS. It worked, but over time Authentik got a bit heavy for what I actually needed from it, i.e. one identity provider and a forward auth in front of a few self-hosted apps. So I swapped it out for Pocket ID (a small OIDC provider) and TinyAuth (a tiny forward auth that talks to it). This post is the sequel to that one, showing how I did the migration on NixOS. The services themselves are NixOS modules, and the OIDC clients and their secrets are declared in nix too but applied with OpenTofu via Terranix, so the whole thing is declarative end to end. ...