OutlineWiki Authentik OIDC PKCE & Workspace RBAC Runbook
Authentik replaces per-user SaaS SSO tax with a 512 MB self-hosted container.
This SSO & Storage hub on OutlineWiki eliminates $18/seat/mo enterprise identity surcharges by pairing Authentik or Keycloak OIDC with self-hosted MinIO S3 buckets.
Our sizing formula on OutlineWiki budgets 512 MB RAM for MinIO and enforces s3_disk_gb = docs_media_gb * 1.25 so growing PDF and screen-recording libraries never exhaust root OS partitions.
Authentik replaces per-user SaaS SSO tax with a 512 MB self-hosted container.
Keycloak Quarkus requires 768 MB RAM headroom but satisfies strict enterprise MFA audits.
Presigned S3 PUT requests keep large PDFs and videos out of Outline Node RAM.
Compute NVMe is expensive for cold PDFs; split storage once docs exceed 85 GB.
We recommend Authentik (512 MB) for fast single-node VPS stacks and Keycloak Quarkus (768 MB) when compliance teams mandate strict PKCE S256 and WebAuthn realm policies.
Whenever attachments surpass 85 GB, OutlineWiki advises offloading MinIO to an InterServer 1 TB Storage VPS ($6.00/mo Price-Lock, 2026-11-12 snapshot) while keeping Node and Postgres on NVMe.