Using Codeberg, Gitea, or Forgejo as OIDC provider for Tailscale

Requirements

Webfinger

In the web root of your web server, create the .well-known/webfinger file. For example, on mine, I have the following:

{
"subject": "acct:hyperreal@moonshadow.dev",
"links": [
{
"rel": "http://openid.net/specs/connect/1.0/issuer",
"href": "https://codeberg.org"
}
]
}

You can use the Webfinger lookup tool to make sure it is setup correctly.

The…

Read more →
Page 1