with the demise of ESXi, I am looking for alternatives. Currently I have PfSense virtualized on four physical NICs, a bunch of virtual ones, and it works great. Does Proxmox do this with anything like the ease of ESXi? Any other ideas?

  • TCB13@lemmy.worldEnglish
    2·
    10 months ago

    You aren’t wrong, the WebUI is stateless, it doesn’t know of any users nor it stores any other context information.

    The certificates are required for the UI client to authenticate with the underlying LXD server itself. Much like the SSH authentication is boils down to creating a public/private key pair and the PK is added to your browser(s) and the public key to the server. I believe this is a good walkthrough of the process for anyone starting out.

    At work we use Authelia and HAProxy to get around the need to distribute a certificate for each client / mange our logins with SSO and 2FA. At home I simply use Nginx as a reverse proxy to the WebUI with the proxy_ssl_certificate passing a certificate down to it. Here another configuration example of how to use Nginx to pass the certificate, you can then use Basic HTTP Auth to add a simple username/password to it.

    • tofubl@discuss.tchncs.deEnglish
      2·
      10 months ago

      Thanks for your patience. I appreciate it and I’m learning a lot. 🙏

      There’s a chance yet!

      edit: That actually seems simple enough and should integrate nicely with the rest of my network. Cool!