# tobab

> tobab is a self-hosted, open-source identity-aware proxy using passkeys for authentication, designed as a forward auth target for Caddy, nginx, or Traefik in homelabs.

- **Category:** Authentication
- **Licence:** MIT
- **Latest version:** v0.2.5
- **Open source:** oss
- **Languages:** Go, JavaScript, HTML
- **Platforms:** Docker, Kubernetes, Linux
- **Tags:** Proxy, SSO, Homelab, Beyondcorp, Identity, Hacktoberfest, Golang, Passkey, Letsencrypt, Webauthn, Forward auth, Identity Aware Proxy

## Description

tobab is a lightweight identity-aware proxy that enables passkey-based authentication for self-hosted services. It acts as a forward authentication target for reverse proxies like Caddy, nginx, or Traefik, providing single sign-on across subdomains. The project is written in Go and uses an embedded BoltDB database via the storm library for persistence. It runs as a single Docker container with configuration via a TOML file. The first user to register becomes the admin and can manage access through a web UI. It is designed for homelab use with simple setup and no external dependencies beyond the container itself.

## Links

- [Homepage](https://github.com/gnur/tobab)
- [Docker](ghcr.io/gnur/tobab)
- [GitHub Repository](https://github.com/gnur/tobab)

---
Source: https://selfhost.directory/project/tobab