Initial commit: homelab infrastructure wiki

- Full Obsidian vault content
- Host configs (ice, grizzley, ubuntu, proxmox, truenas, panda, hyte)
- Media stack documentation
- Traefik HA setup
- Automation scripts
- Bachelor party planning

homelab/entities/authentik.md

@@ -0,0 +1,41 @@
+---
+title: authentik
+created: 2026-04-28
+updated: 2026-04-28
+type: entity
+tags: [services, sso, identity]
+sources: []
+---
+
+# authentik
+
+**Role:** SSO identity provider for homelab
+**URL:** https://authentik.tophermayor.com
+**Host:** [[ubuntu]] (Docker)
+
+## Overview
+
+Authentik provides single sign-on for homelab services. It's the central identity provider that other services (Traefik, Jellyfin, Gitea, etc.) delegate to.
+
+## Configuration
+
+- Runs as Docker container on ubuntu
+- Traefik routes `authentik.tophermayor.com` → authentik container
+- Users and applications configured via Authentik web UI
+
+## Services Integrated
+
+Known services using Authentik SSO:
+- [[traefik]] (forward auth)
+- [[gitea]]
+- [[jellyfin]]
+
+## Troubleshooting
+
+See [[sso-authentik]] skill for Authentik management.
+
+## Related
+
+- [[ubuntu]] — Host
+- [[traefik]] — Routes traffic to Authentik
+- [[gitea]] — Git hosting, SSO client