- Full Obsidian vault content - Host configs (ice, grizzley, ubuntu, proxmox, truenas, panda, hyte) - Media stack documentation - Traefik HA setup - Automation scripts - Bachelor party planning
42 lines
919 B
Markdown
42 lines
919 B
Markdown
---
|
|
title: authentik
|
|
created: 2026-04-28
|
|
updated: 2026-04-28
|
|
type: entity
|
|
tags: [services, sso, identity]
|
|
sources: []
|
|
---
|
|
|
|
# authentik
|
|
|
|
**Role:** SSO identity provider for homelab
|
|
**URL:** https://authentik.tophermayor.com
|
|
**Host:** [[ubuntu]] (Docker)
|
|
|
|
## Overview
|
|
|
|
Authentik provides single sign-on for homelab services. It's the central identity provider that other services (Traefik, Jellyfin, Gitea, etc.) delegate to.
|
|
|
|
## Configuration
|
|
|
|
- Runs as Docker container on ubuntu
|
|
- Traefik routes `authentik.tophermayor.com` → authentik container
|
|
- Users and applications configured via Authentik web UI
|
|
|
|
## Services Integrated
|
|
|
|
Known services using Authentik SSO:
|
|
- [[traefik]] (forward auth)
|
|
- [[gitea]]
|
|
- [[jellyfin]]
|
|
|
|
## Troubleshooting
|
|
|
|
See [[sso-authentik]] skill for Authentik management.
|
|
|
|
## Related
|
|
|
|
- [[ubuntu]] — Host
|
|
- [[traefik]] — Routes traffic to Authentik
|
|
- [[gitea]] — Git hosting, SSO client
|