Adminer Adminer

[SSO] Full-featured database management tool

Adminer is a full-featured database management tool written in PHP that consists of a single file ready to deploy to the target server. It supports MySQL, MariaDB, PostgreSQL, CockroachDB, SQLite, MS SQL, Oracle, and through plugins: Elasticsearch, SimpleDB, MongoDB, Firebird, ClickHouse, and IMAP systems.

Links:

TODO: Enable custom plugins via ADMINER_PLUGINS environment variable TODO: Consider mounting custom CSS themes for UI customization TODO: Create dedicated database network for secure database connections

Authentik ForwardAuth

Authentik ForwardAuth limits the Adminer browser UI to the developers group. It is only an outer access gate: database-native credentials remain required.

Setup

scripts/authentik-apps.py --application adminer --apply
scripts/labctl.py service recreate database/adminer

Keep the router middleware set to localaccess-authentik@file and do not publish Adminer’s HTTP port outside Traefik.

Verify

Confirm a developers member reaches the Adminer database login screen, a non-member is denied, database credentials are still required, and group removal is applied after proxy-session refresh.

name: adminer
services:
  adminer:
    image: adminer:6.1.1-standalone
    container_name: adminer
    restart: unless-stopped
    environment:
      TZ: ${TIMEZONE}
      ADMINER_DEFAULT_SERVER: ${ADMINER_DEFAULT_SERVER:-}
      ADMINER_DESIGN: ${ADMINER_DESIGN:-}
      ADMINER_PLUGINS: ${ADMINER_PLUGINS:-}
    networks:
      - proxy
    labels:
      traefik.enable: true
      traefik.http.routers.adminer.middlewares: localaccess-authentik@file
      traefik.http.services.adminer.loadbalancer.server.port: 8080
      homepage.group: Storage
      homepage.name: Adminer
      homepage.icon: adminer.png
      homepage.href: https://adminer.${MYDOMAIN}/
      homepage.description: "[SSO] Full-featured database management tool"

networks:
  proxy:
    external: true