Service List

This document provides a catalog and detailed descriptions of all end-user facing services currently configured in Authentik on drheck.dev.

Index

Detailed Service Descriptions

1. AudioMass

Launch URL: https://audiomass.drheck.dev
Authentik Slug: audiomass | Provider: audiomass

AudioMass is a full-featured, open-source web-based audio waveform editor and recorder. Running entirely inside the browser using Web Audio and WebAssembly, it provides users with a desktop-class digital audio editing workspace without requiring local software installation. Users can load audio files, record microphone input, view real-time visual spectrums, cut, copy, paste, trim, and mix audio tracks.

The tool includes an extensive suite of built-in DSP effects and processing tools, such as equalizers, gain adjusters, compressors, pitch shifters, delay, reverb, and noise gates. It allows quick audio editing, podcast clips creation, or sound snippet modifications with instant rendering and export in WAV or MP3 formats directly from the browser.

2. BookStack

Launch URL: https://wiki.drheck.dev/login
Authentik Slug: bookstack | Provider: BookStack

BookStack is a self-hosted, user-friendly documentation and wiki platform designed to make storing and organizing information simple and structured. BookStack breaks content down into an intuitive real-world book hierarchy: Shelves, Books, Chapters, and Pages. This visual structure ensures that technical documentation, standard operating procedures, personal notes, and knowledge bases remain easy to search, navigate, and maintain.

BookStack offers both WYSIWYG rich text and Markdown editors, built-in version control with page revisions, image management, cross-linking, and granular role-based access controls. Authentik Single Sign-On allows users to seamlessly authenticate into BookStack to create, collaborate on, and reference personal or team documentation.

3. Cockpit

Launch URL: https://cockpit.drheck.dev
Authentik Slug: cockpit | Provider: cockpit

Cockpit is a web-based server administration interface that provides real-time system resource monitoring and management directly through the browser. It gives administrators and power users a clean dashboard displaying CPU utilization, memory consumption, disk I/O, network traffic, and active system services without needing to rely exclusively on command-line SSH sessions.

Through Cockpit, users can inspect system journal logs, manage user accounts, view storage pool partition health, control systemd services, execute terminal commands, and inspect containerized workloads. Authentik reverse-proxy authentication safeguards the interface while granting authorized users full administrative visibility over host resources.

4. Console Games (Arcade Launcher)

Launch URL: https://arcade.drheck.dev/content/launcher.html
Authentik Slug: console | Provider: None (ForwardAuth)

Console Games is a web-based retro gaming launcher and front-end interface built on top of webЯcade. It provides end users with an interactive, TV- and controller-friendly library for browsing and launching classic console video games directly in modern web browsers using WebAssembly emulation cores.

Users can connect gamepad controllers via USB or Bluetooth, save game states, customize controller mappings, and stream classic retro titles across desktop computers, mobile devices, and smart TVs without installing native emulators or software dependencies.

5. Drawpile

Launch URL: https://drawpile.drheck.dev
Authentik Slug: drawpile | Provider: drawpile

Drawpile is a free, open-source collaborative drawing program that allows multiple artists to draw on the same canvas simultaneously over the internet. The server component hosted on host ul manages shared session state, brush strokes, layer ordering, and user permissions for real-time multiplayer digital art sessions.

Users can host private or public drawing rooms, sketch together in real time, record and playback drawing sessions, lock specific layers to prevent accidental edits, and chat with co-creators. Authentik integration ensures authenticated users can easily jump into ongoing canvas sessions or manage drawing servers.

6. Excalidraw

Launch URL: https://excalidraw.drheck.dev
Authentik Slug: excalidraw | Provider: excalidraw

Excalidraw is a virtual, hand-drawn style collaborative whiteboard application designed for quick sketching, architecture diagrams, wireframes, and visual brainstorming. Its distinctive hand-drawn aesthetic removes the pressure of high-fidelity graphics, encouraging rapid ideation and clear visual communication.

Featuring real-time end-to-end encryption, infinite canvas navigation, rich shape libraries, customizable arrows, text blocks, and exported PNG/SVG diagrams, Excalidraw allows end users to draft system architectures, mind maps, and workflow diagrams quickly within their browser.

7. Funkwhale

Launch URL: https://funkwhale.drheck.dev/
Authentik Slug: funkwhale | Provider: funkwhale

Funkwhale is a self-hosted, decentralized audio and music streaming platform built on open web protocols (ActivityPub). It allows end users to import, organize, stream, and share their personal music collections and podcasts across devices while connecting with audio libraries on other federated instances.

End users can create custom playlists, follow public audio channels, listen to high-quality audio streams in the web application or via Subsonic-compatible mobile apps, and share music tracks with friends without depending on centralized commercial streaming services.

8. GIMP Web

Launch URL: https://gimp.drheck.dev
Authentik Slug: gimp | Provider: gimp

GIMP (GNU Image Manipulation Program) Web delivers the desktop raster graphics editor through containerized browser streaming (via Kasm Workspaces). This setup enables end users to run full desktop GIMP on any browser-capable device, including Chromebooks, tablets, and low-spec laptops, without local installation.

Users can perform advanced photo retouching, image composition, logo creation, layer manipulation, and file format conversions using GIMP's full desktop toolset, saving output files directly to hosted cloud storage or downloading them locally.

9. Gitea

Launch URL: https://git.drheck.dev/
Authentik Slug: gitea | Provider: Gitea

Gitea is a painless, lightweight self-hosted Git service that provides complete software development workflows similar to GitHub. It offers source code hosting, Git repository management, pull requests, code reviews, issue tracking, wikis, and organization management in a fast, low-footprint application.

Integrated with Authentik via Single Sign-On (OIDC), users can log into Gitea with their unified credentials to push and pull Git repositories, manage SSH keys, configure webhook integrations, run automated CI/CD pipelines, and collaborate on software projects.

10. Immich

Launch URL: https://photos.drheck.dev
Authentik Slug: immich | Provider: Immich

Immich is a high-performance, self-hosted photo and video management solution designed as a privacy-respecting alternative to Google Photos or Apple Photos. It provides seamless background photo backup from mobile devices (iOS and Android) as well as an intuitive web interface for browsing, searching, and sharing media libraries.

Immich includes machine-learning features such as face recognition, object detection, spatial map views based on EXIF GPS data, album sharing, and multi-user support with quota management. SSO authentication via Authentik allows smooth, secure onboarding across all web and mobile client applications.

11. Jellyfin

Launch URL: https://jellyfin.drheck.dev/
Authentik Slug: jellyfin | Provider: ldap

Jellyfin is a free, open-source media system that puts users in control of managing and streaming their personal movies, TV shows, music, and live TV broadcasts. Unlike commercial alternatives, Jellyfin contains no tracking, premium paywalls, or central server dependencies, running entirely self-hosted.

Jellyfin automatically fetches metadata, artwork, and subtitle tracks for media libraries, transcoding video streams on-the-fly for smooth playback across web browsers, smart TVs, Roku, Fire TV, and mobile devices. Authentik LDAP integration allows unified credentials for all household members.

12. Kanji Practice

Launch URL: https://kanji.drheck.dev/
Authentik Slug: kanji-practice | Provider: kanji

Kanji Practice is a specialized web application built for Japanese language learners to practice stroke order, writing recognition, and character retention for Japanese Kanji. It provides interactive canvas drawing areas where users can draw Kanji characters by hand and receive stroke-by-stroke validation.

The app organizes characters by JLPT (Japanese Language Proficiency Test) levels and grade school levels, helping users build flashcard decks, track study streaks, and reinforce character recognition through active recall writing exercises.

13. Kasm Workspaces

Launch URL: https://kasm.drheck.dev
Authentik Slug: kasm | Provider: Kasm-OIDC

Kasm Workspaces is a web-native container streaming platform that delivers isolated, on-demand desktop environments and web browser instances directly to end-user browsers. Using Container Infrastructure Virtualization (CIV), Kasm creates disposable or persistent desktop sessions in seconds.

Users can launch disposable web browsers for secure sandbox browsing, open remote Linux desktop sessions, or run specialized GUI desktop applications (like image editors or terminals) from any web browser without leaving data on local client machines.

14. Kavita

Launch URL: (Internal proxy)
Authentik Slug: kavita | Provider: Kavita

Kavita is a blazing-fast, feature-rich self-hosted digital library server designed specifically for reading and managing digital comics, manga, light novels, and traditional e-books. It automatically organizes files (EPUB, CBZ, CBR, PDF) into series, volumes, and chapters with full cover art and metadata tagging.

Kavita includes built-in responsive web readers tailored for mobile devices, tablets, and desktop screens, offering custom reading modes (continuous scroll, dual page, manga right-to-left mode), bookmark sync, reading progress tracking, and user library permissions.

15. Moebius

Launch URL: https://moebius.drheck.dev/
Authentik Slug: moebius | Provider: moebius

Moebius is an open-source web-based ANSI and ASCII art editor designed for creating retro text-mode graphics, BBS art, and teletext visual assets. It recreates the classic DOS text-mode environment directly within modern browsers.

Artists can draw using MS-DOS character sets (CP437), half-block brushes, custom color palettes, and layer controls. Moebius supports loading and exporting files in standard .ANS, .ASC, and .BIN formats for retro computing and digital art enthusiasts.

16. Navidrome

Launch URL: https://navidrome.drheck.dev/
Authentik Slug: navidrome | Provider: navidrome

Navidrome is a modern, lightweight, open-source music server and streamer that gives users complete freedom to listen to their personal music collection from anywhere. Built with high performance in mind, Navidrome indexes large music libraries effortlessly with low CPU and memory overhead.

Navidrome features a responsive web UI and full compatibility with Subsonic/Airsonic mobile clients (such as DSub, amposer, and Symfonium). Users can stream music in original quality or on-the-fly transcoded formats, create playlists, mark favorites, and share music with family members.

17. Nextcloud

Launch URL: (Configured OIDC app)
Authentik Slug: nextcloud | Provider: Nextcloud

Nextcloud is an enterprise-grade, self-hosted productivity and cloud storage platform that provides end users with complete control over their files, documents, calendars, contacts, and communication tools. It serves as a privacy-focused alternative to proprietary cloud services like Google Drive and Microsoft 365.

End users can sync files across desktop and mobile clients, edit office documents collaboratively in real time (via Collabora integration), schedule events, manage task lists, and share files securely via public password-protected web links. Authentik OIDC Single Sign-On grants secure access across all Nextcloud modules.

18. Nextsound

Launch URL: https://nextsound.drheck.dev/
Authentik Slug: nextsound | Provider: nextsound

Nextsound is a custom, web-based audio streaming interface engineered for fast browsing, playing, and queue management of personal audio files and music server libraries.

Tailored for lightweight web playback, it provides clean track searching, album art visualization, continuous queue playback, and media key support across desktop and mobile web browsers.

19. Penpot

Launch URL: https://penpot.drheck.dev
Authentik Slug: penpot | Provider: penpot-oidc

Penpot is the first open-source, web-based design and prototyping tool built natively on open web standards (SVG). Created as an alternative to proprietary platforms like Figma, Penpot allows design and development teams to craft UI/UX wireframes, interactive component prototypes, and vector illustrations.

Because Penpot uses SVG as its native domain model, vector designs render with absolute fidelity for web Developers. It supports real-time multiplayer collaboration, shared design systems, component libraries, layout grids, and CSS code generation. Single Sign-On via Authentik enables instant user authentication.

20. Pixelorama

Launch URL: https://pixelorama.drheck.dev
Authentik Slug: pixelorama | Provider: pixelorama

Pixelorama is a free, open-source pixel art editor built with the Godot engine and deployed to the web for creating 2D sprites, tilesets, pixel animations, and retro game art directly in the browser.

It features a rich toolkit tailored specifically for pixel artists, including custom pencil and eraser brushes, color palettes, onion skinning for frame-by-frame animation, layer management, pixel-perfect lines, tile mode previewing, and export options to sprite sheets or animated GIFs.

21. Plex

Launch URL: (Internal service)
Authentik Slug: plex | Provider: Plex Provider

Plex is a comprehensive media streaming application that organizes personal video, audio, and photo collections into a clean, beautifully formatted media streaming service. Plex automatically matches files against online databases to attach movie posters, plot summaries, cast lists, trailers, and themes.

End users can stream content seamlessly across a vast ecosystem of devices, including smart TVs, streaming sticks, mobile phones, game consoles, and web browsers, with intelligent server-side video transcoding to match client device capabilities and network bandwidth.

22. RomM (ROM Manager)

Launch URL: https://romm.drheck.dev
Authentik Slug: romm | Provider: None (ForwardAuth)

RomM (ROM Manager) is a modern web application designed for organizing, scanning, and managing retro video game ROM libraries. RomM connects with online databases (such as IGDB and SteamGridDB) to automatically enrich game titles with high-resolution box art, screenshots, release dates, genre tags, and game descriptions.

End users can browse their game collection by console platform, search titles, manage save states and ROM variants, and launch games directly in the browser using integrated web emulators or send game files to local emulation devices.

23. tldraw

Launch URL: https://tldraw.drheck.dev
Authentik Slug: tldraw | Provider: tldraw

tldraw is a collaborative, infinite-canvas drawing tool and visual whiteboarding app designed for instant sketching, diagramming, and visual note-taking. Built around speed and simplicity, tldraw provides a minimal canvas interface with immediate tool accessibility.

End users can create vector shapes, freehand ink lines, sticky notes, connective arrows, and text labels. Supporting multiplayer real-time collaboration and SVG/PNG exports, tldraw is ideal for quick technical diagrams, architecture brainstorming, and informal remote collaboration.

24. Transmission

Launch URL: https://bt.drheck.dev
Authentik Slug: transmission | Provider: transmission

Transmission is a fast, lightweight BitTorrent client equipped with a clean web interface for managing peer-to-peer file transfers remotely. The web UI allows users to monitor active downloads and uploads, add new torrent files or magnet links, adjust bandwidth rate limits, and organize downloads into destination folders.

Protected behind Authentik ForwardAuth reverse-proxy authentication, users can safely monitor long-running torrent transfers and manage media downloads on host ul from any web browser without exposing unauthenticated torrent control endpoints to the public internet.

25. Vaultwarden

Launch URL: https://pw.drheck.dev
Authentik Slug: vaultwarden | Provider: Vaultwarden

Vaultwarden is a lightweight, self-hosted implementation of the Bitwarden secrets and password management server API written in Rust. It provides full compatibility with official Bitwarden desktop applications, browser extensions, mobile apps, and CLI tools while consuming minimal memory resources.

End users can securely store end-to-end encrypted login credentials, credit cards, secure notes, personal identities, and two-factor authentication (TOTP) seed keys. Enforced with Authentik OIDC Single Sign-On and strict password policies, Vaultwarden ensures seamless, secure password management across all user devices.

26. Wavacity

Launch URL: https://wavacity.drheck.dev
Authentik Slug: wavacity | Provider: wavacity

Wavacity is an open-source web browser port of the popular Audacity audio editing application. Compiled to WebAssembly, it brings Audacity's iconic multi-track audio editing workspace directly into modern web browsers without requiring local software installation or native binaries.

Users can import multi-track audio files, perform non-destructive editing, apply audio filters, cut and align tracks, inspect frequency spectrums, and export finished master tracks in standard audio formats, carrying the familiar Audacity interface into a cloud-hosted web environment.

27. webЯcade Setup

Launch URL: https://arcade.drheck.dev
Authentik Slug: arcade | Provider: webrcade

webЯcade is a cloud-based retro gaming ecosystem that allows users to play classic console and arcade games directly inside modern web browsers across desktop computers, mobile phones, tablets, and smart TVs.

The webЯcade setup application allows users and administrators to configure game feeds, set up cloud save game synchronization, map custom controller inputs, and manage retro emulator settings for seamless web-based retro gaming.

28. Webshell

Launch URL: https://webshell.drheck.dev/
Authentik Slug: webshell | Provider: webshell

Webshell is a web-based terminal interface (powered by ttyd) that provides authenticated users with direct, browser-based command-line shell access to host environment tools.

Protected behind Authentik Single Sign-On, Webshell enables administrators and authorized users to safely perform terminal administration tasks, check system diagnostics, run scripts, and manage files from mobile devices or workstations without needing native SSH client software.

29. Wick Editor

Launch URL: https://wick.drheck.dev
Authentik Slug: wick | Provider: wick

Wick Editor is an open-source, web-based tool for creating animations, games, and interactive code projects. Combining the accessibility of classic Flash software with modern web standards (HTML5/JavaScript), Wick Editor makes interactive media creation approachable directly in the browser.

Users can draw vector artwork, build timeline-based frame animations, program interactivity with beginner-friendly JavaScript code snippets, attach sound effects, and export projects as interactive HTML5 games, standalone web apps, animated GIFs, or video files.

30. WIPStudio

Launch URL: https://wipstudio.drheck.dev/
Authentik Slug: wipstudio / wipstudio-oidc-app | Provider: wipstudio-oidc

WIPStudio (Work-In-Progress Studio) is a self-hosted creative media and web development studio platform designed for managing ongoing multimedia projects, interactive web prototypes, and creative assets.

Integrated with Authentik via OpenID Connect (OIDC), WIPStudio provides authenticated creators with a unified workspace to draft visual concepts, organize project files, review media builds, and collaborate on experimental digital projects.