SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-06-11 18:02:48 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

possibly a stupid issue. #2341

New Issue
Open
opened 2025-11-20 07:08:13 -05:00 by saavagebueno · 1 comment
saavagebueno commented 2025-11-20 07:08:13 -05:00
Owner
Copy Link

Originally created by @mazdatribute on GitHub (Oct 3, 2025).

there's a lot to say here, please bear with me.

i've been tinkering with netbird and headscale since about 2022. in this time i've tried many different places and ways to host them. i'm, for lack of a wetter bird, a cheap bastard and don't like spending money on a VPS when i've already got hardware and an internet connection at home. i'm also of the opinion that the cloud isn't "self-hosting".

for about a year, i successfully used headscale in a probably-not-secure fashion on it's own subnet and behind the OPT port of a virtualized pfSense router. they updated headscale and removed manual auth, leaving only IdP login as an option. and then the forbidden router died. oof. my friends and i figured, if we have to set up the whole thing from scratch AND an IdP, we're just going to use the full FOSS netbird over the not-entirely-FOSS tailscale.

with all that out of the way;

me and a friend have spent a headache inducing year trying to get netbird to work, with a nginx proxy and some IdP (we found them all infuriating to use and stopped caring, lol) on a home LAN with no routing or subnet separation. is it even possible? or do i have to get a PHD in network proxies/identity providers and go back to using a forbidden virtualized router for subnet separation? i completely own the possibility that i have a skill issue.

the aforementioned friend has had basically no luck getting the netbird dashboard to communicate with authentik and open. i don't know how it works. we've been stuck on that long enough that i'm looking for external help.

any guidance would be appreciated, even just a pointer to a more appropriate place to paste this rant. TIA.

Originally created by @mazdatribute on GitHub (Oct 3, 2025). there's a lot to say here, please bear with me. i've been tinkering with netbird and headscale since about 2022. in this time i've tried many different places and ways to host them. i'm, for lack of a wetter bird, a cheap bastard and don't like spending money on a VPS when i've already got hardware and an internet connection at home. i'm also of the opinion that the cloud isn't "self-hosting". for about a year, i successfully used headscale in a probably-not-secure fashion on it's own subnet and behind the OPT port of a virtualized pfSense router. they updated headscale and removed manual auth, leaving only IdP login as an option. and then the forbidden router died. oof. my friends and i figured, if we have to set up the whole thing from scratch AND an IdP, we're just going to use the full FOSS netbird over the not-entirely-FOSS tailscale. with all that out of the way; me and a friend have spent a headache inducing year trying to get netbird to work, with a nginx proxy and *some* IdP (we found them all infuriating to use and stopped caring, lol) on a home LAN with no routing or subnet separation. is it even possible? or do i have to get a PHD in network proxies/identity providers and go back to using a forbidden virtualized router for subnet separation? i completely own the possibility that i have a skill issue. the aforementioned friend has had basically no luck getting the netbird dashboard to communicate with authentik and open. i don't know how it works. we've been stuck on that long enough that i'm looking for external help. any guidance would be appreciated, even just a pointer to a more appropriate place to paste this rant. TIA.
saavagebueno commented 2025-11-20 07:08:13 -05:00
Author
Owner
Copy Link

@saule1508 commented on GitHub (Oct 4, 2025):

The slack channel is probably a better place to get help. I guess it is not easy to host yourself the Idp, the document is about hosted Idp's. I guess with Keycloak you might get a good documentation on how to self-host it. If you can use a third party Idp, like zitadel, then you just follow the doc carefully and it will work. But in this case I guess you need to have netbird exposed on internet.. which is maybe not what you want.

@saule1508 commented on GitHub (Oct 4, 2025): The slack channel is probably a better place to get help. I guess it is not easy to host yourself the Idp, the document is about hosted Idp's. I guess with Keycloak you might get a good documentation on how to self-host it. If you can use a third party Idp, like zitadel, then you just follow the doc carefully and it will work. But in this case I guess you need to have netbird exposed on internet.. which is maybe not what you want.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2341
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?