Ok. The roster so far is:

Infosec.exchange (mastodon)
pixel.Infosec.exchange (pixelfed)
video.Infosec.exchange (peertube)
relay.Infosec.exchange (activitypub relay)
risky.af (alt mastodon)

What’s next? I think I promised some people here bookwyrm

Follow

@jerry Do you have any plans for SSO? We used Keycloak for Mastodon / PeerTube / Matrix and it certainly unfolds a new world of complications

@bobbyd0g I started using mastodon’s oauth provider - Infosec.press uses it. I expect to move peertube and pixelfed to it as well. It’s not ideal, but the ideal case would have been to use keycloak from the start.

I am considering another set of instances that start from the ground up using keycloak, though.

@jerry You may find them terribly rudimentary, but you're welcome to use our configs, and I've been looking for experienced admins to discuss the challenges it presents for these apps. I think it could ultimately render something that better empowers users, but until then it clearly gives administrators more power to root users to the instance. I'm on Matrix at @bobbyd0g:hellsite.net . Don't mind the senseless utulalia in the readme -- github.com/bobbyd0g/commlab

@jerry @bobbyd0g can mastodon dynamically provisions users to keycloak? Just curious what the user on-boarding flow would be if you started with keycloak?

@mikemacleod @bobbyd0g I believe you would be directed to keycloak to create an ID, which would then allow you to login to Mastodon

@jerry @mikemacleod Keycloak has basic signup and login flows built-in, they are about as slapped-together as could possibly be on Hellsite.net and it works. New users sign up for Keycloak, and as soon as they visit each app with that auth, it creates an account with the same username. And so, obviously, begin the complications! :) Migration and integration should be greatly assisted by Keycloak's mapping config & SAML/LDAP support

@bobbyd0g @jerry very interesting. Will peruse the repo you linked elsewhere in the replies later. I’ve been intending to play around with a self-hosted instance.

@jerry @bobbyd0g Should I wait to sign-up/sign-in to the infosec.exchange pixel and video until they are also integrated with mastodon's oauth provider? I love how that was done with press.

Sign in to participate in the conversation
Hellsite

The hell site