https://znamouchi-lab.com/tags/homelab/Recent content in Homelab on znamouchi-labHugoenFri, 03 Apr 2026 00:00:00 +0000https://znamouchi-lab.com/posts/netbird-guide-authentik/Fri, 03 Apr 2026 00:00:00 +0000https://znamouchi-lab.com/posts/netbird-guide-authentik/<p>A complete guide to deploying your own <strong>Zero Trust network</strong> using NetBird and Authentik as identity provider. No port forwarding, no VPN concentrator, no exposed attack surface — just encrypted WireGuard tunnels between your machines, anywhere in the world.</p> <h2 id="how-it-works">How NetBird works</h2> <p>NetBird separates <strong>control plane</strong> from <strong>data plane</strong>. The VPS runs the control plane — it never sees your decrypted traffic. Data travels directly between peers via encrypted WireGuard, or relayed through coturn when direct connection is impossible (symmetric NAT). In both cases, traffic remains end-to-end encrypted.</p>