geek Sharing bits and pieces of technology and life.
Tag

# security

4 posts
HashiCorp Vault: The Secrets Manager That Changed Its License and Spawned OpenBao — A Deep Dive Into the BSL Fork
Open Source

HashiCorp Vault: The Secrets Manager That Changed Its License and Spawned OpenBao — A Deep Dive Into the BSL Fork

Vault guarded the world's API keys under MPL 2.0 for years. In August 2023 HashiCorp flipped it to the Business Source License alongside Terraform, and IBM engineers forked the last open version into OpenBao. This deep dive covers the relicensing, the fork, the drop-in migration, Nvidia and GitLab adoption, real self-hosting costs, where your secrets actually live, and an honest verdict for a sovereignty-minded operator.
2026-10-06 95 views
Authelia: The Lightweight SSO and 2FA Gate for Your Entire Self-Hosted Stack
Open Source

Authelia: The Lightweight SSO and 2FA Gate for Your Entire Self-Hosted Stack

Authelia is a 28k-star, Apache-2.0 single-binary SSO and two-factor gateway that bolts login and 2FA onto any app behind a reverse proxy. A 5,000-word teardown of forward-auth architecture, identity backends, TOTP/WebAuthn/Duo, access-control policies, the OpenID Connect certification it earned in 2026, the hard scope limits (no SAML, no federation, no multi-tenancy), and exactly where your credentials and sessions go.
2026-09-21 84 views