• 40 Posts
  • 810 Comments
Joined 3 years ago
cake
Cake day: August 10th, 2023

help-circle







  • The most common alternative I have seen is a massive underground labyrinth. But that’s really just one big, linked (sometimes alive) dungeon.

    For something actually unique… hmmm.

    What about subworlds? A “main world” can invade weaker planes of various sizes. The big thing about subworlds, is that they are entire worlds, with living sapient inhabitants. Dungeons and towers sometimes don’t have any sapient inhabitents but boss monsters and the “players”.

    Some tower fantasy manhwa have each floor with sapient inhabitants, but I would argue that subworlds are different, because subworlds can’t interact with eachother the way tower floors can. There is no “higher floor power puppets powers on lower floors” because subworlds can’t talk to eachother, other than the most powerful worlds which wield dimensional transportation magic/technology.

    The other interesting thing about subworlds, is that you could have them have unique magic systems per subworld, forcing adaptation from the main character. Characters could also bring some of this special magic back to their main world.







    1. Use an Identity Provider (IDP)*. Other people have mentioned LDAP, which can play this role.

    2. Use groups within the IDP to declare who has what privileges.

    3. Apps using the IDP for auth can read the groups and allow/deny permissions based on groups.

    *Or Identity and Access Management if you are in the cloud ig.

    For open source solutions, I would recommend:

    • Authentik (what I use)
    • Kanidm (doesn’t have web ui)
    • Nubus by Univention

    These three solutions all have invites, ldap, and can act as oauth providers. (Oauth is single sign on), which are the features I want. There are also integrated, including it all in the one app.

    There is also LLDAP, which is a web ui for ldap, and then you could use a service that connects to that, like authelia or keycloak, to add oauth on top.


  • No, Socks5 does not work for this usecase. You don’t get permissions to run it locally via crostini (or use crostini in general) and the relevant proxy settings are locked in the chromebook settings. In addition to this, it is too easy to fingerprint, and some of the more aggressive setups will catch it and block it. For example, my high school would autodetect wireguard and then kick you off of the network for 10 minutes if you attempted to connect.




  • This requires manually enabling every additional provider.

    No, it doesn’t. The docs are confusing on this, but forgejo has two methods to enable oauth/oidc. One is to manually enable them, but there is a second, where people bring their own openid link.

    The docs contain 3 things related to oauth:

    • Oauth provider forgejo acts as oauth for someone else
    • Ouath client — This is the one where you manually enable providers
    • But then there is a third config. Openid. This one lets users bring their own openid/oauth link and sign in with that. No manual configuration required on the side of the forgejo server per oauth provider being used.