@jerry You may find them terribly rudimentary, but you're welcome to use our configs, and I've been looking for experienced admins to discuss the challenges it presents for these apps. I think it could ultimately render something that better empowers users, but until then it clearly gives administrators more power to root users to the instance. I'm on Matrix at @bobbyd0g:hellsite.net . Don't mind the senseless utulalia in the readme -- https://github.com/bobbyd0g/commlab
@mikemacleod @bobbyd0g I believe you would be directed to keycloak to create an ID, which would then allow you to login to Mastodon
@jerry @mikemacleod Keycloak has basic signup and login flows built-in, they are about as slapped-together as could possibly be on Hellsite.net and it works. New users sign up for Keycloak, and as soon as they visit each app with that auth, it creates an account with the same username. And so, obviously, begin the complications! :) Migration and integration should be greatly assisted by Keycloak's mapping config & SAML/LDAP support
@bobbyd0g I started using mastodon’s oauth provider - Infosec.press uses it. I expect to move peertube and pixelfed to it as well. It’s not ideal, but the ideal case would have been to use keycloak from the start.
I am considering another set of instances that start from the ground up using keycloak, though.