Docker
Docker Updates Sandbox Trust Stores After eMudhra CA Compromise
Docker rebuilt Sandbox templates after the eMudhra CA compromise. Refresh images or trust stores, restart applications, validate, and retain evidence.
Container Security for Normal Homelabs
A normal-person Docker security guide for exposed ports, privileged containers, Docker socket risk, secrets, rootless mode, user namespaces, and backups.
Self-Hosted App Lifecycle: Updates, Rollbacks, and Release Notes
A self-hosted operations guide for updating containers safely, reading release notes, backing up state, automating carefully, and rolling back.
LXC vs VM vs Docker VM in Proxmox
A practical Proxmox placement guide for deciding when to use LXC containers, full VMs, or a dedicated Docker VM for home-lab workloads.
Recyclarr 8.7 Security Response: Treat Template Sources as a Write Boundary
A Recyclarr security-response guide for template-provider path traversal: upgrade, inventory providers, protect secrets, compare generated files, and test safely.
Bazarr 1.6.1 Security Response: Patch or Isolate, Rotate Keys, and Check for RCE
For affected Bazarr builds, isolate untrusted access, preserve evidence and verify a current fixed release. Review exposed secrets and logs before reopening access, distinguishing reasons to investigate from evidence that warrants rebuilding.
Portainer 2.44 Security and Bootstrap Tokens: Secure First Run and Existing Installs
A Portainer security runbook for first-run exposure, setup tokens, agent trust, endpoint permissions, backups, and management-plane isolation.
Run Google Gemma Locally with Ollama, Open WebUI, and Codex CLI
Connect Gemma, Ollama, Open WebUI, and Codex CLI on a private Linux host, with loopback access and configuration checks; local weights alone do not establish an offline workflow.
Nginx Proxy Manager vs Caddy vs Traefik: A Reverse Proxy Decision Tree
A reverse proxy decision tree for homelabs: when to pick Nginx Proxy Manager, Caddy, Traefik, or raw NGINX.
Orange Pi 6 vs Raspberry Pi 5 for Homelab: Powerful Hardware, Real Tradeoffs
Compare Orange Pi 6's vendor-listed networking and storage with Raspberry Pi 5's software and accessory ecosystem. Check exact images, drivers, architecture, power and recovery before treating specifications as usable performance.