Authelia
Trusted Proxies Are an Authentication Boundary: Stop X-Forwarded-For Spoofing
09/15/2026
Define the intended reverse-proxy chain, reject untrusted forwarding headers and block unauthorized direct-origin access. Plan allowed and denied path tests while keeping client IP attribution separate from user authentication.
Homelab SSO: Authentik vs Authelia vs Pocket ID
09/09/2026
A practical homelab SSO comparison covering Authentik, Authelia, Pocket ID, OIDC, SAML, proxy auth, passkeys, MFA, and recovery planning.
What Is the Safest Way to Expose One Self-Hosted App Publicly?
06/22/2026
Keep a self-hosted app private when possible. If public access is necessary, limit its permissions, preserve private administration and test unauthorized and direct-origin requests as well as the intended login.