Discussion · bonfire.cafe

Michael Dexter

@dexter@bsd.network · 4 weeks ago

How are you integrating #WireGuard with an identity provider like OpenID, MS, or Goog for MFA?

mmarcott 🐡

@mmarcott@bsd.network replied · 3 weeks ago

@dexter not doing it yet but looking into using pocket-id with #headscale

https://pocket-id.org/docs/client-examples/headscale

albert

@albert@mastodon.bsd.cafe replied · 4 weeks ago

@dexter a relativly simple (but not that userfriendly...) option i have implemented was to combine wireguard with a captive portal as additional authentication (in this case based on opnsense)...not extremly nice from the user perspective but it works.

Toasterson

@Toasterson@chaos.social replied · 4 weeks ago

@dexter Netbird. Either Self-hosted or SaaS

Michael Dexter

@dexter@bsd.network replied · 3 weeks ago

@Toasterson Nice site but “Pricing” suggests a future rug-pull.

I’ll take a look either way.

Toasterson

@Toasterson@chaos.social replied · 3 weeks ago

@dexter It's the same model as Tailscale, except that the whole server software is OSS and Free if you self-host. So if it's a Rug-Pull it's at least an OSS Rug Pull. The most complicated thing to self host will be the STUN and TURN servers.

Patrick

@pu@ieji.de replied · 4 weeks ago

@dexter You cannot do that with native wireguard, which is minimalist by design. However, you can do that with Tailscale for example, which adds a lot of functionality on top of wireguard.

Michael Dexter

@dexter@bsd.network replied · 4 weeks ago

@pu Are the HeadScale limitations as bad as they say?

I need something self-hosted.

Patrick

@pu@ieji.de replied · 4 weeks ago

@dexter I didn’t try Headscale, and use Tailscale only where I don’t have a native wireguard client available. But I did the whole OIDC integration thing with Tailscale for fun (it wasn’t).
There are other products that build on wireguard, and other overlay networks, but native wireguard fits my needs.
What is your usecase?