@jwildeboer @homelab I also have #PocketID running in my homelab also with my own CA (#stepca) but using a #caddy reverse proxy.If you also need/want SSH key provisioning (amongst other things) I can recommend #kanidmIt doesn't offer a fancy admin web interface like PocketID, though. There is a minimal one for users - for admins there is a powerful CLI. https://kanidm.github.io/