throwing this one online!

No Ansible, No LDAP: How to use single sign-on for app/server access across multiple servers: https://d1.hackers.moe/notes/no-ansible-no-ldap/

i've been looking into how small-scale community hosters might benefit from using single sign-on systems not only for web logins but also for server access management

please pipe all your unconstructive opsec rants to /dev/null ๐Ÿ™

No Ansible, No LDAP: How to use single sign-on for app/server access across multiple servers

@d1

> the core of the problem for community hosters is that you need people with specialist skills to do this work and you donโ€™t have a lot of those.

Yep. I have minimal sysadmin skills. I would love to run some services off a PC under a desk for a community space I'm part of, but I just dont have the skills. Do you know of any groups that support would-be community-infra creator-maintainers?

@semitones great! and yes, extremely valid question. i'm not sure.

did you manage to find any local groups doing self-hosting?

we are like a pretty diverse crowd running @coopcloud and people who never touched a terminal are getting stuff deployed: https://coopcloud.tech/blog/march-2026-equinox/

we (@varia) wrote some guides which might help: https://homebrewserver.club

there's a lot of stuff online but i know it's way nicer to meet people locally and do stuff together...

i can only wish you good luck with the search!

March 2026 community update

March 2026 community update

The Co-op Cloud
@d1 @varia @coopcloud I don't know of anyone doing it locally, but I might be in a position to help start something. I just have a lot of questions.
@semitones @varia @coopcloud share your questions when they come up and we can try to help โ˜บ๏ธ
@d1 @varia @coopcloud My first question is: if I want to setup Yunohost for a community to use, can it be done safely over the internet, or should I require everyone to login via tailscale to use it? (Yunohost or any hosted service)

@semitones my 2c would be: prioritise your own learning trajectory. setting up a vpn is harder to do and you're just getting started

set up your yunohost and put "simple" stuff on it like an etherpad for typing stuff together or a file sharing thing. you can also put all services behind the yunohost login

let people know you're learning and that they can read this https://homebrewserver.club/#embrace-the-feminist-server-manifesto ๐Ÿ˜›

The homebrewserver.club principles

homebrewserver.club
@d1 I already use tailscale and yunohost myself, I just dont know if it is realistic to ask other users to also make an account on tailscale (and grant them access to my network) or if yunohost is safe enough exposed directly to the internet. I'm leaning towards option two.
@semitones ah ok, yeh, it should be totally fine! ofc there are all sorts of bots and scrapers etc. etc. but yunohost manages fail2ban for you and blocks weird stuff like e.g. someone trying to brute force an ssh login