Security
Browser Password Managers vs Dedicated Vaults: How to Choose
Choose Chrome, Edge, Firefox, Apple Passwords, Bitwarden, or 1Password based on devices, sharing, recovery, and threat model.
How Do You Document a Homelab So Someone Else Can Recover It?
Document the minimum facts needed to keep the house working: what runs where, how to log in, what must be paid, what can be turned off, and who to call. The goal.
RAID, ZFS Snapshots, Sync, and Backup: What Each One Does Not Protect
Use all four for different jobs. RAID keeps storage online after some disk failures, snapshots recover recent local changes, sync moves current files between places, and backup restores data after loss, corruption.
How to Build Cheap Offsite Backup at a Friend or Family Member's House
Use a small NAS, mini PC with storage, or external-drive host at the remote house, connect it with WireGuard or Tailscale, encrypt the backups before they leave your home, and rate-limit.
How Do You Recover From Losing TOTP, Passkeys, or Password Vault Access?
You recover by preparing before the loss: two enrolled authenticators or keys, printed or offline recovery codes, a documented break-glass account, encrypted vault exports, and tested emergency access. Once everything is lost.
IoT Isolation for Homelabs: VLANs, Firewall Rules, and mDNS
A practical IoT isolation guide that keeps smart-home devices usable while protecting trusted clients, servers, and management networks.
Homelab Reverse Proxy Guide: HTTPS Without Unsafe Exposure
A security-first reverse proxy guide for homelabs, covering DNS, TLS, app exposure, internal-only services, authentication, logging, and validation.
Designing Networks With DoD IL5 in Mind: Campus, Data Center, IT, and OT Security
A network is not "Department of Defense (DoD) Impact Level 5 (IL5) compliant" by itself. A network can, however, be designed to support a mission system categorized at IL5 or pursuing a DoD IL5 authorization. That distinction matters. IL5 is about the mission system, the authorization boundary, the data being protected, the controls that are […]
WireGuard Home VPN: Secure Remote Access for Your Homelab
A practical WireGuard home VPN guide for secure homelab access, including routing design, firewall rules, DNS, validation, and gear recommendations.