A while ago I made my first attempt at setting up a SSO for some of the things I host. I figured out things that have built in support, like Immich, but struggled with getting it done through Proxy for things that don’t have baked in OAuth or OIDC support.
I revisited it yesterday and figured everything out so I’m happy about that. Navidrome was one of the more difficult ones to figure out because I need SSO authentication for the web-ui, but username/password for the API. That was actually pretty easy once I wrapped my head around it.
I picked Authentik based on general positive things I’ve heard about it, and I use Nginx Proxy Manager for reverse proxy.
I imagine there’d be even more bribery if search was run by a government.