Boosting Navidrome Security: SSO Auth with Traefik and Authentik

postmaster@mlazzarotto.it (Marco Lazzarotto) — Sun, 11 May 2025 00:00:00 +0000

Introduction

Music streaming services like Navidrome provide a fantastic way to access your personal music collection from anywhere. However, exposing such services to the internet comes with security concerns.

This guide demonstrates how to secure your Navidrome instance using Authentik’s Single Sign-On (SSO) capabilities behind a Traefik reverse proxy.

By implementing this setup, you’ll add an additional security layer to your music server while maintaining convenient access for legitimate users.

Exposing Seafile 12 Behind Traefik: The Complete Configuration Guide

postmaster@mlazzarotto.it (Marco Lazzarotto) — Thu, 01 May 2025 00:00:00 +0000

Introduction

Seafile is a powerful, open-source file syncing and sharing platform that provides an alternative to commercial cloud storage services. When deploying Seafile in a production environment, you’ll typically want to place it behind a reverse proxy like Traefik to handle SSL termination, routing, and additional security features.

In this guide, I’ll walk you through the exact Traefik configuration needed to properly expose Seafile 12 to the internet. This setup handles all three essential components of Seafile: the web interface, the file transfer service (seafhttp), and WebDAV access (seafdav).

Traefik on Marco Lazzarotto

Boosting Navidrome Security: SSO Auth with Traefik and Authentik

Introduction

Exposing Seafile 12 Behind Traefik: The Complete Configuration Guide

Introduction