I love authentik

Now it needs no middleware. Just authentik and postgres

The ui is great, features are great, great api. Super easy to self host and manage

Open source, small dedicated team. Can’t ask for more

Developer of VoidAuth here; if you decide to give it a try let me know if you run into any issues during setup, or have any feedback!

Aegis

The one built in to Caddy for anything that doesn’t really have authentication. Everything else uses its own and i only have a couple services accessible outside the home.

Most everything is only accessible within my home and my guest wifi is on its own vLAN. Even then I’m the only person who actually uses most things that I setup.

Authentik

Authentik is great, super versatile, if not a bit of effort to get it set up initially

The best is pretty subjective and partially relies on what you need.

Keycloak is one of the most feature complete ones I think.

I’ve used authelia before and liked it, but it had a very bare UI and everything was done through config files which forced redeploys on changes. It wasn’t ideal for me.

I’m currently trying out voidauth. It’s got some more Ui features compared to authelia and can apparently also simulate some Active Directory queries to forward your users to third party tools for provisioning ( unless I saw that wrong, I haven’t tested any yet ).

Authentik looked nice, but I haven’t gotten around to checking that one out yet.

I ended up at PocketID. Authentik (and I think authelia too) is good but way more complicated than what I needed for a homelab. A lot of people like VoidAuth, but i didn’t care for the visual style. Don’t think I ever tried keycloak.