25
submitted 2 years ago* (last edited 2 years ago) by kristoff@infosec.pub to c/selfhosted@lemmy.world

Hi all,

Short question. Does somebody here run authentik as single sign-on provider? (dockerised?)

I'm looking for information on how to best backup a authentik server? Just do a backup of the postgres database and the docker-compose file? Something else? How crucial is the dump.rdb file of the redis container?

Kr.

top 3 comments
sorted by: hot top new old
[-] ferngully@lemmy.world 5 points 2 years ago

You should only have to backup the Postgres database. But it won’t hurt to have a copy of your compose file as well.

This GitHub issue has the steps you should use. And answers all your other questions too.

[-] kristoff@infosec.pub 1 points 2 years ago

Great thanks! (also thanks to Mike .. you have some valid points)

[-] kristoff@infosec.pub 2 points 2 years ago

First of all, thanks to all who replied! I didn't think there would have been that many people who self-host a SSO-server, so I am happy to see these replies.

As a side-note, I have also been looking into making the setup more robust, i.e. add redundancy. For a "light redundant" senario (not fully automatic, but -say- where I have a 2nd instance ready to run, so I just need to adapt the DNS-record if it is needed), can I conclude from the "makeing a backup" question, that I just need to run a 2nd instance of postgres and do streaming-replication from the main instance to the backup-instance ?

Or are there other caviats I haven't thought about?

this post was submitted on 06 Jan 2024
25 points (100.0% liked)

Selfhosted

62227 readers
1816 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS