Services
All services are exposed via Traefik IngressRoutes under *.akze.net with Let's Encrypt TLS.
| Service | URL | Description | Stack |
|---|---|---|---|
| ArgoCD | argocd.akze.net |
GitOps continuous deployment | ArgoCD |
| Grafana | grafana.akze.net |
Monitoring dashboards | Grafana + Prometheus |
| Gitea | gitea.akze.net |
Self-hosted Git hosting | Gitea + PostgreSQL |
| Authentik | auth.akze.net |
SSO / Identity provider | Authentik + PostgreSQL + Redis |
| Traefik | traefik.akze.net |
Reverse proxy dashboard | Traefik |
| Nextcloud | nextcloud.akze.net |
File storage & sync | Nextcloud + PostgreSQL + Redis |
| Jellyfin | jellyfin.akze.net |
Media streaming server | Jellyfin |
| Vaultwarden | vault.akze.net |
Password manager (Bitwarden-compatible) | Vaultwarden + SQLite |
| n8n | n8n.akze.net |
Workflow automation | n8n + PostgreSQL |
| Homepage | home.akze.net |
Service dashboard | Homepage |
| Hubble | hubble.akze.net |
Cilium network observability UI | Hubble UI |
| Docs | docs.akze.net |
Homelab documentation (MkDocs) | MkDocs Material |
| Prometheus | — (internal) | Metrics collection & alerting | kube-prometheus-stack |
| Loki | — (internal) | Log aggregation | Loki |
Note
Prometheus and Loki are internal-only services accessed through Grafana datasources. All other services have public IngressRoutes protected by CrowdSec and (where applicable) Authentik SSO.