Hey y’all, looking to land my first DevOps Engineering role soon, and figured I should use enterprise software as much as possible for some resume building and personal practice. For reference, I’ve set up a NAS server once before but haven’t got too much experience outside of that. Basing this on some DevOps Engineers I’ve talked to IRL and some friends who hire engineers, but wanted extra community feedback.
Use case: parents are data hoarders, probably have at least 4tb saved composed of every type of media you can think of, so hopefully the whole family can use this when I’m done with it all. Otherwise, aiming to be able to claim experience with enterprise grade DevOps software.
Some of this is personal research, a lot of Reddit research, and some LLM comparisons used to choose between two software systems. Please let me know what you’d keep or change! I’m still kinda new to this :p
Hardware: (old gaming pc)
- Intel i5-9600K
- 32GB DDR4 RAM
- GTX 1070
- Gigabyte Z370XP SLI
- Seagate IronWolf 12TB 3.5" SATA
Hypervisor & OS:
- Proxmox VE (type-1 hypervisor)
- Ubuntu Server 24.04 LTS (VM operating system)
- cloud-init (VM provisioning automation)
Infrastructure as Code & Automation:
- Terraform (infrastructure provisioning)
- Proxmox Terraform Provider (VM automation)
- Ansible (configuration management)
- GitHub Actions (CI/CD pipelines)
Containerization & Orchestration:
- Docker (container runtime/builds)
- Kubernetes/k3s (container orchestration)
- Helm (Kubernetes package manager)
- ArgoCD (GitOps continuous deployment)
Networking & Ingress:
- Traefik (ingress controller/reverse proxy)
- MetalLB (bare-metal load balancer)
- cert-manager (TLS certificate automation)
- WireGuard (VPN software)
- Surfshark (VPN service)
Secrets & Security:
- HashiCorp Vault (secrets management)
- External Secrets Operator (Kubernetes secret syncing)
- SSH hardening (secure remote access)
Observability & Monitoring:
- Prometheus (metrics collection)
- Grafana (monitoring dashboards/visualization)
- Loki (centralized log aggregation)
- Promtail (log shipping agent)
- Alertmanager (alert routing/notifications)
Storage & Backups:
- ZFS (filesystem/storage management)
- NFS (network storage)
- Persistent Volumes/PVCs (Kubernetes storage)
- Restic (encrypted backups)
- Velero (Kubernetes backup/disaster recovery)
Container Registry & CI Infrastructure:
- GitHub Container Registry or Harbor (container registry)
- GitHub Runner (self-hosted CI runner)
AWS Emulation:
- LocalStack (AWS cloud emulation)
- Terraform AWS Provider (AWS IaC practice)
- MinIO (S3-compatible object storage)
Self-Hosted Applications:
- Prowlarr (indexer manager)
- Sonarr (TV show management automation)
- Radarr (movie management automation)
- LazyLibrarian (book management automation)
- Lidarr (music management automation)
- Homarr (application dashboard)
- Seerr/Overseerr (media request management)
- Jellyfin (media server)
- qBittorrent (torrent client)
- NZBGet (Usenet downloader)
- Immich (photo gallery & backup)
- Mealie (meal planner)
- Moonlight (low-latency remote gaming)
- Kavita (ebook/manga/audiobook reader)
- Funkwhale (music streaming)
- Grafana (monitoring dashboards)
I’ll probably go with KeyCloak since it seems to be the standard enterprise solution, and it’s a Red Hat developed tool so +1 for FOSS. Having SAML experience should also be a good resume boost for me
https://integrations.goauthentik.io/media/jellyfin/
The jellyfin sso plugin linked there is now archived and dead.
Authentik supports ldap keycloak does not.
Authentik also has proxy based authentication, to authwall any app that doesn’t support external sso. People use that with jellyfin a lot.
Also SAML sucks, oidc is way better and more popular nowadays.
“Log in with google/github/etc” is actually OIDC (I’ve had people think it was saml before so I am clarifying.
Most of the apps you mentioned will only support oidc and not saml.
No don’t use keycloak it sucks. Trust me authentik is way better (also FOSS + under the Cloud native computing foundation).
You can deploy keycloak as a test, but authentik has way more features, like it supports being ldap server.
Ahhh I get you. Seems like KeyCloak is great if you’re all in on Red Hat systems, but that Authentik would be a better choice for a wider suite of integrations.