Self-Hosted Applications
This section covers the self-hosted applications running in the home lab — file sharing, document management, media, monitoring, and asset tracking — along with Authentik, the identity provider tying most of them together under single sign-on.
Applications
-
Media Audiobookshelf Self-hosted audiobook and podcast server. →
-
Wiki Bookstack Documentation and wiki platform for organizing lab notes and guides. →
-
Vdi Kasm Workspaces Browser-based containerized desktops and apps, plus fixed RDP servers. →
-
Files Nextcloud Private cloud storage, file sync, and collaboration suite. →
-
Xfer Pairdrop Local network file sharing, a self-hosted alternative to AirDrop. →
-
Docs Paperless-NGX Document management with OCR and automated indexing. →
-
Asset Snipe-IT IT asset management and inventory tracking. →
Not documented yet
Zabbix runs in the lab for infrastructure and service monitoring, but the write-up is still in progress, so there is no page to link to yet.
Identity: Authentik
Authentik Integrations
Once Authentik is running, each of these walks through connecting a specific app to it for SSO:
| App | Integration Guide |
|---|---|
| Audiobookshelf | Audiobookshelf Integration |
| Bookstack | Bookstack Integration |
| Cloudflare Access | Cloudflare Integration |
| Kasm Workspaces | Kasm Workspaces Integration |
| Nextcloud | Nextcloud Integration |
| Paperless-NGX | Paperless-NGX Integration |
Why Authentik Ties This Section Together
Most of the apps above support external authentication, and rather than managing separate logins (and separate MFA setups) per service, this lab routes them all through Authentik as a single identity provider:
- One account, one MFA setup — enrolled once in Authentik, applies everywhere it's connected
- Centralized access control — enable, disable, or restrict access to a service from one place
- Consistent audit trail — logins across every integrated app are visible from a single admin panel
If you're setting this section up from scratch, a sensible build order is: get the base application running and confirm it works standalone → deploy Authentik → then work through that app's specific integration guide above.
Section Notes
- OpenVPN provides remote network access into the lab and is documented under Core Services rather than here, since it's infrastructure-level access rather than an individual application.
- Most applications here run in their own LXC container on Proxmox — see Containers & Virtualization for the hosting layer these apps sit on top of.