Create a Server

Build an MSP on Open Source Part 2: Netbird VPN with

Build an MSP on Open Source Part 2: Netbird VPN with Authentik as the IdP. Access and Security.

#Build #MSP #Open #Source #Part #Netbird #VPN

“Awesome Open Source”

This is a longer episode than normal, even for me, but I think the content here will give us a huge kickstart in the right direction for this venture. I wanted to provide something that you could start utilizing for anything, not just a business, so here is a full install of Docker, Docker Compose, NGinX Proxy Manager, Authentik, and Netbird. The next videos should be shorter now that we’ve laid our groundwork.

=== Links ===
Show Notes
Authentik (original show notes)

Netbird (original show notes)

This Episode (changes / additions)

Get the AwesomeOpenSource Merchandise

Support my Channel and ongoing efforts through Patreon:

Buy Me a Coffee or Beer

=== Timestamps ===
00:00 Beginning
00:08 Introduction
05:02 Thank You to my Patrons at…

source

 

To see the full content, share this page by clicking one of the buttons below

Related Articles

16 Comments

  1. Thank you so much for this tutorial! You have no idea how much I have been looking forward to this! Thank you, you really a great at giving instructions, these videos are valuable ressources!

  2. As always, awesome stuff. Quick question though, why set up multiple VPS’s on DO? At that point wouldn’t it just be cheaper to rent a server from Hetzner and throw Proxmox on it?

  3. Dear AOS, this is really at the moment (trust me, been following bunch of well known and quite wholesome homelab enthusiasts) one of the most effective list of resources and tools for IT power-users who want to start something like a business on a budget, very small budget, but are not sure they want to leave everyday job. Also for unemployed (what ever the reason might be) to maybe earn some income. Even for those who aren't in a pinch for money (hard to find, but who knows…) to keep up with the ever changing and evolving tech. I mean, lately, every few months something crazy good comes out. Netbird with free 5/100 tier is amazing for practice as well as small home bizz. Anyways, I am packing 3 laptops and a Pi and right afer installing Netbird time to figure out Authentik – and here comes … your video. Thx a bunch

  4. Very well done, Brian. Thank you a lot, this is good to reproduce, but I miss in general the IPv6 consideration a little bit in parallel to IPv4. I would assume Digital Ocean also provides IPv6 addresses in parallel, don't they? I think, it should not be skipped as many parts in the internet go IPv6 today and also to be future prepared, I would appreciate if you consider IPv6 in parallel within your setups as some things might be slightly different. So please move on as you are doing and thank you!

  5. Great video and explanation as always! Just a little tip about the authentik setup: you dont need to specify the version of image to pull in both .env and compose file, you just need to match the variable name which is different in this case. When the variable is the same docker will matches the version specified in .env file and use the other one in compose as fallback.

  6. Hey Brian, Great series. Can you add the notes when you have a minute? I have been wrestling with this exact install. Question: I didn't see the Netbird FQDN being routed via the NPM Proxy. Is that correct? I have all these on the same network, so I was going to route my FQDN via my proxy to the Netbird IP Address internally and then use Authentik to secure it.

  7. Great content Brian! Thanks. For better security, you should enable 2FA for Authentik and then add a provider (proxy provider) and application for nginx proxy manager itself, so that the access is protected with 2FA of Authentik, too 🙂

  8. Love your contents. I tried this install with netbird+keycloak, netbird+zitadel and netbird+authentik. They all do NOT seem to work for me. With authentik, I am getting this: Error: failed reading provided config file: /etc/netbird/management.json: failed fetching OIDC configuration from endpoint https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration Get "https://auth.MYDOMAIN.TLD/application/o/netbird/.well-known/openid-configuration": EOF. Loading the file from Firefox doesn't show any problem. jq validates both management.json as well as the file contents that I get at the logged URL.

  9. Not sure if anyone's picked this up before, but:

    ATHENTIK_TAG=2023.8.3 — Shouldn't that be AUTHENTIK_TAG=?

    Pretty sure it just installed the default 2023.8.3 that was in your docker-compose :).

Leave a Reply