TODO List
Self Hosted Chat Options
1. Team & Workspace Chat (Slack / Discord Alternatives)
- Zulip
- Description: Threaded stream-and-topic messaging designed for asynchronous communication.
- Authentik Integration: Native Generic OpenID Connect (OIDC) support included in the free/open-source tier.
- Mattermost
- Description: Slack-style team chat, channels, boards, and playbooks.
- Authentik Integration: Authentik OIDC provider (via GitLab/Generic OAuth2 compatibility) or Authentik ForwardAuth.
- Rocket.Chat
- Description: Channel-based team communication, live chat widgets, and omnichannel integrations.
- Authentik Integration: Native Custom OAuth2 / OIDC provider in the Community edition.
2. Federated & Open-Standard Messaging
- Matrix Ecosystem (Synapse or Dendrite / Conduit + Element Web or Cinny)
- Description: Decentralized, end-to-end encrypted messaging network with bridges to Discord, Telegram, Signal, WhatsApp, and Slack.
- Authentik Integration: Matrix Synapse supports native OpenID Connect (OIDC) for user registration and SSO.
- XMPP (Prosody + Converse.js)
- Description: Lightweight, extensible XML-based protocol for instant messaging and presence.
- Authentik Integration: Authentik LDAP outpost via
mod_auth_ldap, or token authentication viamod_auth_oauth2.
- Modern Web IRC (Ergo + The Lounge)
- Description: IRCv3 daemon paired with a persistent, modern web client and push notifications.
- Authentik Integration: The Lounge supports reverse proxy header authentication via Authentik ForwardAuth.
3. Voice, Video & Conferencing (Chat-Adjacent)
- Jitsi Meet
- Description: Fully encrypted video conferencing and screen sharing.
- Authentik Integration: Authentik OIDC / JWT authentication via Prosody backend.
- Mumble (Murmur Server)
- Description: Low-latency, high-quality voice communication.
- Authentik Integration: Authentik LDAP outpost.
- LiveKit / Element Call
- Description: WebRTC infrastructure and client for group audio/video calls, integrating directly into Matrix rooms.
- Authentik Integration: Inherits Synapse OIDC authentication.
4. AI Chat & LLM Interfaces (Chat-Adjacent)
- Open WebUI
- Description: Feature-rich web interface for local LLMs, Ollama, API endpoints, RAG, and document chat.
- Authentik Integration: Native OpenID Connect (OIDC) support with automatic user provisioning and role syncing.
- LibreChat
- Description: Multi-provider AI chat interface supporting OpenAI, Anthropic, Gemini, local models, and plugin tools.
- Authentik Integration: Native OpenID Connect (OIDC) / OAuth2 support.
5. Push Notifications, Webhooks & Alerting Gateways
- Ntfy
- Description: HTTP-based pub-sub push notification service to send alerts to desktop/mobile devices.
- Authentik Integration: Authentik ForwardAuth or upstream header auth.
- Gotify
- Description: Simple server for sending and receiving push notifications via WebSockets.
- Authentik Integration: Authentik ForwardAuth.
- Apprise API
- Description: Gateway router to relay notifications to 80+ chat endpoints (Matrix, Discord, Telegram, Slack, etc.).
- Authentik Integration: Authentik ForwardAuth.
6. Asynchronous Community / Forum Platforms
- Discourse
- Description: Modern discussion platform, community forums, and long-form topic threads.
- Authentik Integration: Native OpenID Connect (OIDC) plugin (
discourse-openid-connect).
- NodeBB
- Description: Real-time, socket-driven forum software with built-in instant messaging and notifications.
- Authentik Integration:
nodebb-plugin-oauth2-oidcwith Authentik.
Summary Comparison Table
| Service | OIDC / SSO Support | Mobile Apps (iOS & Android) | Site-Wide Custom Emojis | Server-Side Custom CSS | Global Branding / Theme Config |
|---|---|---|---|---|---|
| Zulip | Yes (Native OIDC) | Yes (Official iOS & Android) | Yes (Built-in) | Yes (Admin UI) | High (Logos, default themes) |
| Mattermost | Yes (OIDC / OAuth2 / ForwardAuth) | Yes (Official iOS & Android) | Yes (Built-in) | Limited (Plugins) | Medium (Colors, brand images) |
| Rocket.Chat | Yes (Native OAuth2 / OIDC) | Yes (Official iOS & Android) | Yes (Built-in) | Yes (Admin UI) | High (Live CSS, assets, colors) |
| Matrix / Element | Yes (Native OIDC via Synapse) | Yes (Official Element iOS & Android, FluffyChat, etc.) | Yes (MSC2545 packs) | Yes (config.json) |
Medium (JSON palette, branding) |
| XMPP (Prosody) | Indirect (LDAP Outpost / mod_auth_oauth2) |
Yes (Monomyth, Conversations [Android], Siskin/Monal [iOS]) | Client-dependent | No | N/A (Client-dependent) |
| The Lounge (IRC) | Indirect (ForwardAuth) | PWA (Progressive Web App on iOS & Android) | Limited | Yes (CSS files) | Medium (Theme packages) |
| Jitsi Meet | Yes (OIDC / JWT via Prosody) | Yes (Official iOS & Android) | No | Yes (CSS / Config) | High (Watermarks, templates) |
| Mumble | Indirect (LDAP Outpost) | Yes (Plumble [Android], Mumble [iOS]) | No | No | Low |
| Open WebUI | Yes (Native OIDC) | PWA (Official mobile web/PWA) | Model Avatars / Unicode | Yes (Admin UI) | High (Logos, banners, CSS) |
| LibreChat | Yes (Native OIDC / OAuth2) | PWA (Mobile web / PWA) | Unicode | Config file | Medium (librechat.yaml) |
| Ntfy | Indirect (ForwardAuth / Header Auth) | Yes (Official iOS & Android) | No | No | Low |
| Gotify | Indirect (ForwardAuth) | Yes (Official Android, third-party iOS) | No | No | Low |
| Discourse | Yes (Native OIDC plugin) | Yes (Official Discourse Hub app) | Yes (Built-in) | Yes (SCSS/Themes) | Very High (Full theme engine) |
| NodeBB | Yes (nodebb-plugin-oauth2-oidc) |
PWA / Third-party apps | Yes (Plugin/ACP) | Yes (ACP) | High (Skins, custom CSS) |
Random TODO
- burn backups
- ensure large local data sources for jellyfin and plex are on the zfs array
- consolidate logs with a parser
- music hosting
- radio stations
- comms
- irc server
- matrix server
- jabber server
- backups
- create backup user
- new GPG key
- move rclone configs to backup user
- chown backups to backup
- automate to weekly
- games