It’s definitely a bit of a behemoth, and the dated php codebase doesn’t really help either. I set up OpenCloud last week and aside from the struggle getting it working with a single compose and Authentik for OIDC, it’s been exactly what I’ve been looking for. Simpler, faster, and only does the things I need it to do.
His replacement’s not much better. Lots of mixed sentiment from past employees, and even though he did acknowledge it with a joke, the “overdelivery” thing is such a red flag to carry.
I quit the game this past fall after literally 12k hours on steam. Huge number of growing reasons, but the top reason has always been the way bungie c-suite treats their devs and their players. One of the most toxic in the industry by a mile.
Pangolin with an Authentik login required. Jellyfin’s set up with OIDC too but that’s more for convenience than security (especially since password auth doesn’t seem possible to disable, so it’s just hidden with CSS which does jack shit for security).
I’m paranoid so I only expose 3 services total without Pangolin/Authentik in front of them: Authentik itself, headscale, and navidrome’s rest endpoint (the last one skeeves me a bit but it’s mandatory for it to work remotely in the situations I want it, like a web player on work machines). Anything else I personally need remote access to, I can get through tailscale - Pangolin for me covers friends and family usage and a few niche situations.
Oh this is the first I’m hearing of this one. I’m liking OpenCloud so far but the setup process and bizarre OIDC implementation don’t leave me too confident in it. I’ll keep an eye on this one.