Enterprise by Design is a blog series documenting the design and implementation of a fictional company's IT infrastructure. Every architectural decision is driven by business requirements and implemented using real-world technologies and best practices.
Keeping services available can be a difficult task. Here’s how I approach it in my homelab. Instead of chasing perfect uptime, I focus on detecting failures quickly and recovering fast. Why I'm Not Using High Availability On a single server, true HA isn’t possible since the server itself is the failure domain. If I were...
Today I want to share how I use Authentik as the central identity provider in my homelab. I originally set up Authentik very early in my homelab journey (it was probably my second or third service), mainly for two reasons: improved security and comfort. The Problem Without a centralized identity system, every service has its...
Today I implemented SSO for SSH using Vault and Authentik. In this post, I’ll explain the basic idea behind the setup, why it’s useful, and some of the trade-offs I encountered. The Problem with Traditional SSH Keys The Problem with Traditional SSH Keys Traditional SSH keys are static and rarely changed, which creates a significant...