Linux and Homelab
OPNsense 26.7 Migration: Source NAT, Legacy Rules, And Rollback
Rehearse OPNsense upgrades and source NAT conversion on an isolated clone. Compare effective rules and client traffic, including WireGuard and multi-WAN behavior, before relying on prior-release recovery.
RouterOS Stable Still Needs A Canary: A 7.23 Upgrade Runbook
Choose a RouterOS upgrade canary by hardware, packages and active features. Preserve off-device backups and local recovery, then validate representative services before expanding across unlike routers.
pfSense 26.03 System Patches: Auto-Apply Does Not Update The Package
Keep pfSense System Patches package maintenance separate from automatic patch application. Review package currency, applicable patches, required reboots and resulting behavior before treating an applied status as completion.
Recyclarr 8.7 Security Response: Treat Template Sources as a Write Boundary
A Recyclarr security-response guide for template-provider path traversal: upgrade, inventory providers, protect secrets, compare generated files, and test safely.
Keycloak 26.7.1 Security Response: Map the Fixes to the Features You Actually Use
Keycloak 26.7.1 includes many security fixes. This guide maps them to OIDC, SAML, FGAP, DCR, LDAP, metrics, and upgrade validation.
Bazarr 1.6.1 Security Response: Patch or Isolate, Rotate Keys, and Check for RCE
For affected Bazarr builds, isolate untrusted access, preserve evidence and verify a current fixed release. Review exposed secrets and logs before reopening access, distinguishing reasons to investigate from evidence that warrants rebuilding.
Portainer 2.44 Security and Bootstrap Tokens: Secure First Run and Existing Installs
A Portainer security runbook for first-run exposure, setup tokens, agent trust, endpoint permissions, backups, and management-plane isolation.
WordPress Core Under Active Exploitation: Verify the Fix and Investigate Possible Compromise
Updating WordPress core is only the first step. Use this checklist to verify versions, checksums, users, cron, uploads, logs, WAF data, and rebuild criteria.
Home Assistant Local Voice Control: Build a Private Voice Assistant That Actually Works
Home Assistant can run voice control locally, but the best setup depends on whether you want easy commands, full speech recognition, DIY satellites, or a hybrid cloud fallback.
Orange Pi 6 vs Raspberry Pi 5 for Homelab: Powerful Hardware, Real Tradeoffs
Compare Orange Pi 6's vendor-listed networking and storage with Raspberry Pi 5's software and accessory ecosystem. Check exact images, drivers, architecture, power and recovery before treating specifications as usable performance.