Sekalum – a different approach to managing credentials in self-hosted environments

Hi everyone,

I would like to share an approach to a problem that often appears in larger self-hosted setups:

Credentials become distributed across many different applications.

Home Assistant, Node-RED, AI tools and other services may each store their own API keys, tokens or OAuth connections. Over time, managing access, renewals and shared credentials can become difficult.

Sekalum explores a simple idea:

Keep credential lifecycle management separate from the applications that use the credentials.

Applications request the access they need, while Sekalum manages the credential lifecycle and controlled delivery.

The concept is shown in the overview below:

This is not intended to replace Home Assistant’s existing credential handling. It is an approach for environments where many applications and services need to work together.

I would be interested in your feedback:

How do you currently manage credentials across your self-hosted ecosystem?

Technical details and architecture:
GitHub: GitHub - luiscyphre404-cmd/credential-hub · GitHub

Regards
Luis