Dex

Pocket ID is a self-hosted OpenID Connect and OAuth 2.0 identity provider that authenticates users with passkeys instead of passwords. It provides group-based access control, LDAP integration, SCIM provisioning, audit logs, a REST API for administration, and resource-specific OAuth tokens with configurable scopes. Applications and APIs can use Pocket ID for passwordless sign-in, while compatible AI applications and remote MCP servers can use it as an OAuth provider.

NetBird Self-Hosted is an open-source deployment of NetBird, a zero-trust networking platform for creating private networks that connect directly to servers and other peers through WireGuard. Its self-hosting setup uses an installation script and can deploy Traefik with automatic TLS, built-in local-user authentication through an embedded Dex server, and an optional reverse-proxy service for exposing resources on the NetBird network. A NetBird client can also operate as a routing peer for services on a Docker subnet, while access policies, remote DNS, NetBird SSH, identity authentication, and service exposure are managed through the platform.

Nodyx is an AGPL-3.0 self-hosted community platform that combines forums, real-time chat, voice rooms, a collaborative canvas, a public homepage builder, and streamer-oriented features in one server. It provides searchable posts, moderation tools, widgets, and community-owned hosting. Its real-time layer uses WebRTC peer-to-peer voice and a Socket.IO fallback. The project includes a Rust STUN/TURN voice relay and a Rust TCP tunneling relay for publishing home servers without inbound ports. The documented stack includes a TypeScript and Fastify backend, a SvelteKit frontend with the TipTap editor, PostgreSQL for data and full-text search, and Redis for sessions and presence.

NetBird is an open-source, WireGuard-based overlay networking and Zero Trust Network Access platform for connecting remote users, cloud and on-premises resources, edge devices, containers, and agents through peer-to-peer encrypted tunnels. Its agents manage WireGuard connections, obtain peer candidates through ICE and STUN, exchange connection information through a signaling service, and use a relay when direct connections fail. A centralized management service maintains network state, peer addresses, access policies, and configuration updates, while the admin interface supports identity-based access control, network segmentation, SSO, MFA, device posture checks, private DNS, routes, exit nodes, SSH, reverse proxying, activity logging, and integrations such as Terraform and Ansible. NetBird can run as a hosted cloud service or be self-hosted; its repository includes the client, management, signal, and relay components, with most code licensed under BSD-3-Clause and the management, signal, and relay directories under AGPLv3.