Securing Webapp with OpenID (Keycloak)

[eingemaischt]

I want to use the app backuppc from TrueCharts Incubator. I use it with the traefik ingress controller. backuppc itself can be secured with ".htaccess", but also with all other authentication mechanisms by nginx or apache2 - or any (trusted) reverse proxy.

I want to do the authentication against a keycloak with OIDC (OpenID Connect).

Does anyone did this before? Shall Traefik do the auth by oidc? Or the nginx within the backuppc pod?

 

[truecharts]

For clearity:
"incubator" means "might not work well, or even at all". It's ALPHA, BETA or RC grade apps.
We would advice not to use them, unless you know what you're doing.

Our Traefik App/Chart, theoretically, does support forward auth with Keycloak.
---
If you need any help with TrueCharts, please reach out to out support staff on discord directly be filing a support ticket there.
We, sadly enough, do not have the capacity to also provide support on this forum as well.