Honestly, the one major thing I want from Authelia is the ability to add to it without deauthenticating the entire userbase.

Well, that and an easier way to organize than everything in one single file…

HTTPS traffic is still HTTP traffic. There’s just an encryption layer in there.

And yes cloudflare absolutely supports https.

My understanding is that there is no hard limit. At some point they will decide “this is business level traffic” at which point they will start harassing you to purchase a business plan.

That cutover point is unknown. I’ve never even seen an estimation of when it happens, so it could very well be the type of traffic instead of the amount.

They also only allow HTTP traffic for the free tier, which is another way they push you towards business tiers.

Not to mention, the amount of data you can run through it is nuts. I’ve been running Stremio web through it for months without issue to watch content at work.

Personally I didn’t want to have to hand out VPN credentials to everyone, so I went with a cloudflare tunnel with Authelia as the method of authentication.

Doesn’t the DS… just have a browser? Meaning you’re just pointing at a web page here?

Very much in the same vein as Azure.

Thank you, I appreciate this!

Any comparison to tandoor? I see we can import from it but I have a hard time trying to get free time to test things like this. X.x

I don’t see the humor…

<.< Let me just throw two scenarios at you real quick to show you why that’s a problem:

That third party can easily just use your connection to view and download CSAM and all external monitoring would suggest that activity was coming from within your network. Because it is.

That third party has full network access to anything your PC does (or at least that nic) which includes anything in your local network. Insecure IoT, other PCs, etc.

I like TacticalRMM though may be a little more in depth than you’re looking for.

This wouldn’t be a problem if you used Linux.

Not gonna lie, this is super, super suspicious.

The reason stated isn’t even something that would legitimately prevent sharing the source.

Hard pass. Honestly this’ll taint my feelings going forward as well.

no notes.

Wait…

Cloudflare tunnels have a zero trust option to them. You can authenticate through a number of sources, including arbitrary OIDC.

Isn’t this the case with all existing panels?

Oh? Interesting. I asked because I don’t see it on my iOS YouTube install, but I suppose it may be A/B testing.

Which app is this?

Is that a download button I see? If so that means the UI has been edited by a third party tool, and this can’t really be blamed on Google…