Security
Security fundamentals, hardening guides, account protection, safe remote access, endpoint recovery, and practical defensive operations.
Homelab SSO: Authentik vs Authelia vs Pocket IDNew!!
A practical homelab SSO comparison covering Authentik, Authelia, Pocket ID, OIDC, SAML, proxy auth, passkeys, MFA, and recovery planning.
Container Security for Normal HomelabsNew!!
A normal-person Docker security guide for exposed ports, privileged containers, Docker socket risk, secrets, rootless mode, user namespaces, and backups.
Securing a Self-Hosted AI Server
A noob-friendly security guide for local AI homelabs: keep Ollama private, use VPN or reverse proxy access, manage accounts and API keys, protect logs, and handle private docs and code carefully.
WordPress Core Under Active Exploitation: Verify the Fix and Rule Out Compromise
Updating WordPress core is only the first step. Use this checklist to verify versions, checksums, users, cron, uploads, logs, WAF data, and rebuild criteria.
Immich as the De-Google Gateway: Great App, Serious Backup Responsibility
Immich can be a fantastic Google Photos alternative, but photos raise the stakes: sync is not backup and restore tests are mandatory.
Private DNS for Homelabs Without Leaking Internal Services
A private DNS guide for homelabs: use home.arpa, split-horizon DNS, VPN DNS, and DNS-01 certificates without leaking internal service inventory.
It Is Always DNS: Pi-hole, AdGuard Home, Technitium, and the SPOF Problem
A practical DNS design guide for Pi-hole, AdGuard Home, and Technitium that avoids the single-point-of-failure trap.
Password Manager vs Browser Passwords
Browser password storage is convenient. A dedicated password manager gives better cross-platform control, sharing, and recovery planning.
Tailscale vs WireGuard vs Cloudflare Tunnel vs Reverse Proxy
A practical remote access comparison: Tailscale, raw WireGuard, Cloudflare Tunnel, and reverse proxies solve different homelab problems.
One UPS, Many Devices: NUT Shutdown for Proxmox, NAS, Router, and Docker Hosts
A practical NUT architecture for coordinating clean shutdown across Proxmox, NAS, Docker hosts, and network gear from one UPS.