Configuring Apache for OIDC with an Authentik backend

Summary For the past year and half I’ve been running my own mailserver using Postfix and Dovecot. This setup works quite well, and I’ve also installed Roundcube to have a convenient web frontend. It’s nice to have, though most of the time I interact with the mailserver via apps like Thunderbird or FairEmail. While Roundcube is quite nice, I don’t necessarily trust the authentication mechanism to be exposed directly to the internet. Since I set this up, I put Apache basic authentication in front of it as a deterrent. However, the issue with basic auth is that it requires you to log in again every single time you restart your browser. ...

February 26, 2025 · 2 min