Single Sign-On for the Home Lab with Authentik
Putting every home lab service behind one login with Authentik — Traefik forward-auth for apps without native SSO, OIDC for the rest, all declared in Git.
Blog
-
-
3D Modelling with OpenSCAD
Replacing broken toy parts and household bits with parametric OpenSCAD code, plus the CI pipeline, in-browser customiser and agent workflow around it.
-
My Own Personal Claws
I replaced OpenClaw with my own automation system that refines issues, implements features, fixes CI and turns voice notes into code for a single developer.
-
How This Blog Works: Astro, AWS, and Bluesky Comments
How this blog is built and hosted: static site generation with Astro, CI/CD pipelines, PR preview deployments to S3, and Bluesky-powered comments.
-
GitOps for Home Labs with Flux CD and k3s
How I run 30+ home lab services on k3s with Flux CD GitOps: layered reconciliation, dependency ordering, and rebuilding everything from Git.
-
Automated Wildcard HTTPS Behind NAT with Let's Encrypt
Setting up automated wildcard HTTPS certificates for 30+ home lab services behind NAT using cert-manager, DNS-01 challenges, and Let's Encrypt.