Expose Share Links on Private Homelab Apps With Caddy
How to use Caddy forward auth to enforce zero-trust security on self-hosted apps while allowing public share links for Nextcloud and Immich.
Oct 23, 20265 min read0 reactions0 comments
Back to articles Oct 23, 2026 
Sep 24, 2026
Sep 6, 2026
Tag archive
#authelia
Authelia passkeys with TOTP as break-glass: why the config diff was empty
Authelia's two_factor policy doesn't name a method. Passkey normally, TOTP only for break-glass, is something you enrol — not something you configure.
Sep 24, 20263 min read1 reactions0 comments
Authelia SSO for a whole homelab: what worked, what didn't, and the lesson that nearly undid it
Putting Authelia single sign-on and 2FA in front of every self-hosted service: the setup, what went wrong, and the lesson that nearly undid it.
Sep 6, 20268 min read0 reactions0 comments