I added Warpgate as a single SSH gateway for my homelab: one place for identity, target permissions, approval, Vault-signed credentials, and session recording. Here is how it reuses my existing SSH CA, what it costs to concentrate that trust, and how automation now uses the same front door.
Fifty VMs on one host used to share one flat bridge with my LAN. Now every VM lives in its own VLAN behind a VyOS router VM — denied by default, published through the proxy, declared as code.
How Terraform, cloud-init, Ansible, and Docker Compose turned recurring homelab work into a supervised, reviewable workflow.
How I turned routing, authentication, DNS and public exposure into a repeatable workflow for every self-hosted service.
Enterprise by Design is a blog series documenting the design and implementation of a fictional company's IT infrastructure. Every architectural decision is driven by business requirements and implemented using real-world technologies and best practices.
Keeping services available can be a difficult task. Here’s how I approach it in my homelab.
I use Authentik as the central identity provider in my homelab.
Implementing SSO for SSH using Vault and Authentik. Why I do not use Traditional SSH Keys