Security
Auth, SSH, firewalls, and the bits that keep strangers out
Guides for locking things down - firewalls, SSH keys, reverse-proxy auth, and the identity stack in front of the apps.
Firewall
UFW, iptables, nmap, and checking what is actually exposed.
SSH keys
Key-based access without leaving password logins lying around.
Authelia
Classic SSO / 2FA middleware for Traefik-fronted apps.
CrowdSec
Collaborative intrusion detection in front of the proxy.
Local CA
Homelab TLS with mkcert - issue certs and trust the root on your devices.
Pocket ID
Self-hosted OIDC provider for modern login flows.
OIDC middleware
Wiring OIDC into Traefik with Pocket ID.
TinyAuth
Lightweight forward-auth option when you want something smaller.
Last updated on