Authelia
Trusted Proxies Are an Authentication Boundary: Stop X-Forwarded-For SpoofingNew!!
09/15/2026
A practical reverse-proxy security lab for X-Forwarded-For spoofing, exact trusted proxy ranges, direct-origin blocking, and negative tests.
Homelab SSO: Authentik vs Authelia vs Pocket ID
09/09/2026
A practical homelab SSO comparison covering Authentik, Authelia, Pocket ID, OIDC, SAML, proxy auth, passkeys, MFA, and recovery planning.
What Is the Safest Way to Expose One Self-Hosted App Publicly?
06/22/2026
The safest path is usually to avoid public exposure unless the app truly needs it. If it does, isolate the app, put it behind a maintained reverse proxy or tunnel, require strong.