Self-hosted infrastructure and security projects from my homelab.
Authentik SSO
Before implementing Authentik, I was running Adguard Home, the Arr stack (5-6 apps), Jellyfin. Each with its own local account, all sharing one simple password to keep access frictionless on a network I treated as trusted. Absolutely horrible security across the board, honestly. The only meaningful control I had in place was that it’s all on my internal network. Changing the password meant updating it across every service manually. If my network was ever compromised, it wouldn’t take long for an attacker to gain full access across the board. ...