Skip to content

Self-Hosted Applications

This section covers the self-hosted applications running in the home lab — file sharing, document management, media, monitoring, and asset tracking — along with Authentik, the identity provider tying most of them together under single sign-on.

Applications

  • Audiobookshelf

    Self-hosted audiobook and podcast server.

    Start here

  • Bookstack

    Documentation and wiki platform for organizing lab notes and guides.

    Start here

  • Nextcloud

    Private cloud storage, file sync, and collaboration suite.

    Start here

  • Pairdrop

    Local network file sharing — a self-hosted alternative to AirDrop.

    Start here

  • Paperless-NGX

    Document management with OCR and automated indexing.

    Start here

  • Snipe-IT

    IT asset management and inventory tracking.

    Start here

  • Zabbix

    Infrastructure and service monitoring across the lab.

    Start here

Identity: Authentik

  • Authentik

    Self-hosted identity provider (OIDC/SAML/LDAP) providing SSO and MFA across most services in this lab.

    Start here

Authentik Integrations

Once Authentik is running, each of these walks through connecting a specific app to it for SSO:

App Integration Guide
Audiobookshelf Audiobookshelf Integration
Bookstack Bookstack Integration
Cloudflare Access Cloudflare Integration
Nextcloud Nextcloud Integration
Paperless-NGX Paperless-NGX Integration

Why Authentik Ties This Section Together

Most of the apps above support external authentication, and rather than managing separate logins (and separate MFA setups) per service, this lab routes them all through Authentik as a single identity provider:

  • One account, one MFA setup — enrolled once in Authentik, applies everywhere it's connected
  • Centralized access control — enable, disable, or restrict access to a service from one place
  • Consistent audit trail — logins across every integrated app are visible from a single admin panel

If you're setting this section up from scratch, a sensible build order is: get the base application running and confirm it works standalone → deploy Authentik → then work through that app's specific integration guide above.

Section Notes

  • OpenVPN provides remote network access into the lab and is documented under Core Services rather than here, since it's infrastructure-level access rather than an individual application.
  • Most applications here run in their own LXC container on Proxmox — see Containers & Virtualization for the hosting layer these apps sit on top of.