Same identity everywhere
Authentik is the IdP. Forward-auth on staging, OIDC in the app. The people who already have access keep it.
Element Studio
A host for software that has to last.
Naquad is the modular Laravel platform behind Element Studio products. Identity, admin shell, and installable apps — one install, same users.
Packages, not a monolith
Core lives in elementstudio/naquad. Apps are separate naquad-* repos, composed into a thin host.
Two surfaces
naquad.com is this site. platform.naquad.com is the running product. Staging is stg.platform.naquad.com.
How it is run
- Git on Gitea
elementstudio, branchesstg→prod→main - Images built on hl, streamed to s2 — the edge host does not compile
- Traefik + Let’s Encrypt; Authentik forward-auth on staging
- SQLite volume per environment until you need Postgres