Developer Builds Self-Hosted SSO Gateway for 25+ Services Using Authelia on Kubernetes

·1 views

A homelab operator has detailed how they configured Authelia as a centralised single sign-on (SSO) gateway covering more than 25 self-hosted web services, including Proxmox, Grafana, ArgoCD, and Nextcloud. The setup runs on a k3s Kubernetes cluster, with PostgreSQL managed by CNPG, Redis for session storage, and HashiCorp Vault handling secrets. Traefik's ForwardAuth middleware intercepts every incoming request and checks it against Authelia's verification endpoint before granting or denying access. Five OIDC clients are configured for services that support the protocol, with ArgoCD requiring a non-standard client_secret_post method due to its own implementation quirks. The author also documented a migration from plain Kubernetes Secrets to Vault-backed external secrets to reduce credential exposure within the cluster.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Meta Muse Code and AWS Kiro Lead Shift to Multi-Agent AI Coding Workflows

The AI coding landscape is undergoing a major shift from simple autocomplete tools toward autonomous multi-agent systems capable of planning, writing, testing, and validating code across entire repositories. Meta has launched Muse Code in beta, powered by its Muse Spark 1.2 model, which uses a primary orchestrator agent that delegates tasks to parallel sub-agents handling code parsing, test generation, and security analysis simultaneously. AWS has added an Agentic Workspace feature to its Kiro tool, allowing developers to offload complex coding tasks to a background agent that works asynchronously without blocking their active development session. New academic research has also emerged exploring how AI coding agents use structured planning frameworks to manage full software development lifecycles. Together, these developments signal a broader industry move away from single-turn AI interactions toward parallelized, autonomous engineering workflows.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Python library hysteresis-state prevents false state changes in noisy classifiers

A developer has released hysteresis-state, a pure Python library with no dependencies, designed to eliminate rapid false transitions in discrete state classifiers. The library works by requiring a configurable number of consecutive observations before confirming a state change, resetting the count if the signal reverts before reaching the threshold. It also supports asymmetric confirmation thresholds, allowing systems to fall into a failure state quickly while recovering more cautiously — mirroring the behavior of an electrical circuit breaker. The tool originated from a trading bot whose market-regime classifier flickered near decision boundaries, causing unwanted operational freezes. The library is available via pip and its source code and mutation-tested test suite are published on GitHub.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds interactive Nigerian egusi soup scene using only CSS and no JavaScript

A frontend developer created a detailed CSS art piece depicting egusi soup with pounded yam as part of the DEV Community Frontend Challenge - Comfort Food Edition. The entire interactive scene, including an animation where a morsel of pounded yam dips into the soup, runs purely on a CSS checkbox and sibling selector with zero JavaScript. The 3D table scene uses CSS perspective, transform-style: preserve-3d, and container query units to scale seamlessly across devices without media queries. Visual details like the bowl's depth, palm oil sheen, egusi curds, and raffia mat were achieved through layered gradients, masking, and box-shadow cloning techniques. The project is MIT licensed and serves as a companion piece to the developer's earlier jollof rice CSS artwork.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How One Developer Built a Race-Condition-Safe Comment Reply System in Node.js

A developer building the Vlox platform engineered a nested comment reply system using Node.js and MongoDB that prioritizes simplicity and security over complex tree structures. The system reuses a single Mongoose schema for both comments and replies, distinguishing replies by adding a rootId field and omitting a repliesCount field. Input sanitization is enforced by converting all incoming text to trimmed strings and rejecting replies that are empty or exceed 200 characters. MongoDB transactions handle concurrency by atomically checking and incrementing reply counts, capping each comment thread at a maximum of 10 replies. Race conditions are managed by detecting unmatched write operations and returning a clear error response to the client.

0 comments Read more at DEV Community