Want to replace Okta (Identity, SSO & user directory) with software you run and own? These 5 Nomad Packs give you a batteries-included, host-networked deployment on HashiCorp Nomad — one command to add the registry, one to run.
nomad-pack registry add nomploy github.com/Nomploy/nomad-packs nomad-pack run keycloak --registry nomploy
Keycloak — open-source identity and access management (SSO, OIDC, SAML, social login, user federation). Deployed all-in-one with its PostgreSQL database in a single host-networked Nomad job; Keycloak runs DB migrations automatically on start.
authentik — an open-source Identity Provider and SSO: OAuth2/OIDC, SAML, LDAP, forward-auth, MFA, and flows. Deployed all-in-one with its PostgreSQL and Redis plus the server and worker in a single host-networked Nomad job.
Tinyauth — a tiny authentication middleware that adds a login screen (and optional OAuth/LDAP) in front of any app behind your reverse proxy via forward-auth. Deployed as a single host-networked Nomad service.
LLDAP — a light, opinionated LDAP server with a friendly web UI for managing users and groups. A simple authentication backend for apps that speak LDAP (Nextcloud, Gitea, Grafana, Authelia, and many more) without the pain of OpenLDAP. Deployed as a host-networked Nomad service using SQLite with a persistent data volume.
ZITADEL — a modern identity and access management platform (OIDC, OAuth2, SAML, SCIM) with multi-tenancy, passwordless/MFA, and a management console (a Keycloak / Auth0 alternative). Deployed as an all-in-one host-networked Nomad job (PostgreSQL + app).