u/ArgentSeven

Hi,

I am new to self hosting and I have so far hosted netbird server in a vps, authentik on my vps, netbird clients (in the vps and my home proxmox) and vaultwaden in my home proxmox. I also followed a guide to add SSO using authentik to both my netbird and vaultwarden.

So, when I try to access vaultwarden.example.com, I have to go through netbird policy and SSO and then vaultwarden SSO. This works very well on the browsers (both on PC and android) but it doesn't work on android app at all.

The app moves me to a browser where I just get the error

{"error":{"code":404,"description":"The requested resource could not be found.","reason":"Not Found"}}

I tried debugging this using chatgpt, and it suggests that this is because in my current setup, I have 2 layers of auth (Mobile app → NetBird SSO → Vaultwarden SSO → Authentik) and suggests that I disable the SSO on netbird so that we can use just the home assistant OIDC.

However, I am not sure if its the best idea of exposing vaultwarden (even with authentik) to the internet. Ideally, I want to maintain a strict control on who can access my HA instance - family is okay but not friends.

Has anyone done something like this?

Hi,

I am new to self hosting and I have so far hosted netbird server in a vps, authentik on my vps, netbird clients (in the vps and my home proxmox) and home assistant in my home proxmox. I also followed a guide to add SSO using authentik to both my netbird and the home assistant.

So, when I try to access ha.example.com, I have to go through netbird policy and SSO and then HA SSO. This works very well on the browsers (both on PC and android) but it doesn't work on android app at all.

The app moves me to a browser where I need to login using authentik and then instead of sending me back to the app, it opens an instance of HA on the browser. I tried debugging this using chatgpt, and it suggests that this is because in my current setup, I have 2 layers of auth (Mobile app → NetBird SSO → Home Assistant OIDC → Authentik) and suggests that I disable the SSO on netbird so that we can use just the home assistant OIDC.

However, I am not sure if its the best idea of exposing the home assistant (even the OIDC) to the internet. Ideally, I want to maintain a strict control on who can access my HA instance - family is okay but not friends.

Has anyone done something like this?