I’ve heard of Kanidm but not of void auth. From what I’ve read in their websites, Kanidm has more features, and since it’s programmed in Rust, I’m biased to using it, so that I can contribute back to the repo later on. I’m not yet sure which one to migrate to so I’ll probably deploy a demo of each and see which one suits my case better. Thank you :)

maybe a dumb question but isn’t a hetzner instance directly connected to one’s identity? I remember when setting up mine, they asked for ID verification. If so then the outgoing IP which is public is linked to my ID and would be a bigger risk of itself. Correct me if I’m wrong.