Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

is it advisable to host a single host for both kratos and hydra  - split behind a load balancer of course  or should I be thinking about two hosts ie  <http://accounts.example.com|accounts.example.com> and <http://oauth.example.com|oauth.example.com>

kratos
  /self-hosted/
  /.well-known/ory/webauthn.js

hydra
• `/.well-known/jwks.json`
• `/.well-known/openid-configuration`
• `/oauth2/auth`
• `/oauth2/token`
• `/oauth2/revoke`
• `/oauth2/fallbacks/consent`
• `/oauth2/fallbacks/error`
• `/oauth2/sessions/logout`
• `/userinfo`


my company runs kratos and hydra under a single host, but it's probably up to your preference as I don't think the hydra and kratos cookies need to match domains

I know there are some (non critical) sql migration conflicts if you use the same db I think at this point it’s just the networks table 