Reverse Proxy
How to Audit Your Exposed Services
A practical exposure-audit guide for finding public ports, reverse proxies, tunnels, UPnP, IPv6 paths, vendor clouds, and forgotten services.
Trusted Proxies Are an Authentication Boundary: Stop X-Forwarded-For Spoofing
Define the intended reverse-proxy chain, reject untrusted forwarding headers and block unauthorized direct-origin access. Plan allowed and denied path tests while keeping client IP attribution separate from user authentication.
Homelab SSO: Authentik vs Authelia vs Pocket ID
A practical homelab SSO comparison covering Authentik, Authelia, Pocket ID, OIDC, SAML, proxy auth, passkeys, MFA, and recovery planning.
Securing a Self-Hosted AI Server
Keep Ollama's API private, control Open WebUI accounts and tools, protect documents and logs, and test denied access before sharing a self-hosted AI service.
Open WebUI Deep Dive: Users, Models, Documents, Prompts, and Safe Sharing
Configure Open WebUI accounts, model and document access, provider connections, backups, and updates, with controlled signup and restricted tools before sharing an instance over LAN or VPN.
Nginx Proxy Manager vs Caddy vs Traefik: A Reverse Proxy Decision Tree
A reverse proxy decision tree for homelabs: when to pick Nginx Proxy Manager, Caddy, Traefik, or raw NGINX.
Tailscale vs WireGuard vs Cloudflare Tunnel vs Reverse Proxy
A practical remote access comparison: Tailscale, raw WireGuard, Cloudflare Tunnel, and reverse proxies solve different homelab problems.
Tracearr Setup Guide for Plex, Jellyfin, and Emby Monitoring
Deploy Tracearr with Docker, connect Plex, Jellyfin, or Emby, validate live sessions and alert-only rules, and preserve a recoverable monitoring history.
What Is the Safest Way to Expose One Self-Hosted App Publicly?
Keep a self-hosted app private when possible. If public access is necessary, limit its permissions, preserve private administration and test unauthorized and direct-origin requests as well as the intended login.
Reverse Proxy Setup Without Security Mistakes: HTTPS for Homelab Apps
A security-first reverse proxy setup guide for homelab services, covering DNS, TLS, access controls, logging, updates, and what not to expose.