Single Sign-On for the Home Lab with Authentik
Putting every home lab service behind one login with Authentik — Traefik forward-auth for apps without native SSO, OIDC for the rest, and all of it declared in Git.
bstjohn.net
A blog about home labs, Kubernetes, DevOps, and related projects
Latest posts
3D Modelling with OpenSCAD
Replacing broken toy parts and household bits by describing them as parametric OpenSCAD code — plus the GitHub Actions pipeline, in-browser customiser, and coding-agent workflow built around it.
My Own Personal Claws
I replaced OpenClaw with a custom automation system that refines GitHub issues, implements features, fixes CI, investigates production bugs, and turns voice notes into shipped code — all tailored for a single developer.
How This Blog Works: Astro, AWS, and Bluesky Comments
A look at the infrastructure behind this blog — static site generation with Astro 5, CI/CD with GitHub Actions, PR preview deployments, and Bluesky-powered comments.
GitOps for Home Labs with Flux CD and k3s
Managing 30+ home lab services with GitOps.
Automated Wildcard HTTPS Behind NAT with Let's Encrypt
Setting up automated wildcard HTTPS certificates for 30+ home lab services behind NAT using cert-manager, DNS-01 challenges, and Let's Encrypt.