Single Sign-On for the Home Lab with Authentik
Putting every home lab service behind one login with Authentik — Traefik forward-auth for apps without native SSO, OIDC for the rest, and all of it declared in Git.
Putting every home lab service behind one login with Authentik — Traefik forward-auth for apps without native SSO, OIDC for the rest, and all of it declared in Git.

Replacing broken toy parts and household bits by describing them as parametric OpenSCAD code — plus the GitHub Actions pipeline, in-browser customiser, and coding-agent workflow built around it.
I replaced OpenClaw with a custom automation system that refines GitHub issues, implements features, fixes CI, investigates production bugs, and turns voice notes into shipped code — all tailored for a single developer.
A look at the infrastructure behind this blog — static site generation with Astro 5, CI/CD with GitHub Actions, PR preview deployments, and Bluesky-powered comments.
Managing 30+ home lab services with GitOps.
Setting up automated wildcard HTTPS certificates for 30+ home lab services behind NAT using cert-manager, DNS-01 challenges, and Let's Encrypt.