account-center: Self-hosted, OIDC-authenticated portal for internal services and knowledge base articles

Summary

#Account Center Self-hosted, OIDC-authenticated portal for internal services and knowledge base articles. Account Center is a self-hosted account portal for organizations that already use OpenID Connect and want a clean place to send users after login. It combines a role-aware services catalog with an optional knowledge base, so users land on one page that shows what they can access and how to use it. It is intentionally small and operator-friendly: configuration lives in environment variables, a YAML catalog file, and an optional directory of Markdown articles. The application validates that input on startup, reloads catalog and knowledge base changes automatically, and can keep sessions in memory or Redis. Login Services catalog Knowledge base listing Knowledge base article ⚠️ Warning This repository is hosted on git.sr.ht and mirrored to GitHub. You should always refer to git.sr.ht version as the primary instance. #Why it exists Most self-hosted environments already have: an identity provider, several internal tools, different user groups, and scattered documentation. Account Center started from a practical gap: I wanted something with the convenience of an Okta-style application dashboard for a self-hosted stack, but couldn't find a good fit. The result is a portal that puts those pieces behind one consistent entry point: OIDC sign-in with refresh-token support. Role-aware catalog based on groups from the groups claim. Optional knowledge base rendered from Markdown with front matter and referenced assets. Live reload for catalog and knowledge base content. Session storage choice between in-memory and Redis-backed persistence. Reverse-proxy aware deployment with explicit trusted-proxy handling. Small operational surface: one binary, one container image, one catalog file, one optional KB directory. #How it is structured cmd/account-center/ Main application entrypoint internal/auth/ OIDC flow, session handling, trusted proxy logic internal/catalog/ Catalog loading,...