Nginx

Passkey Single Sign-On for My Home Lab with Authentik

One passkey, one sign-in, thirteen admin interfaces. How I built single sign-on for my home lab with Authentik, which apps I left out on purpose, and why every app still has a break-glass way in.

The Homelab Console dashboard in dark mode, showing Publish and Certificates actions and a recent jobs table

A LAN-Only Web Console for My Home Lab

The scripts I used to run by hand from my desktop now live behind a small LAN-only web console. It uses passkey sign-in and a fixed list of audited actions. Claude drafts pages, and a security gate checks them before I approve anything.

The Matomo analytics dashboard showing visits over time and a visitor map of New Zealand

Self-Hosted Matomo Behind a Reverse Proxy

How I self-host Matomo analytics for a static Hugo site. Matomo stays on an internal server, and a DMZ reverse proxy carries the tracking traffic, with the real visitor IP and GeoLite2 geolocation preserved.

MagicMirror² Wall Dashboard, Now With Home Lab Pages

A MagicMirror² dashboard with weather, Home Assistant, Spotify, news, stocks and webcams, now rotating through two read-only Grafana pages for the home lab. Covers the hardware history, the kiosk setup and how Grafana is embedded safely.