GnTech Blog

Gitea Docker Deployment — Self-Hosted Git and CI/CD for Homelab

Complete guide to deploying Gitea with Docker Compose in your homelab — PostgreSQL backend, SSH passthrough, daily backups, and Gitea Actions CI/CD for automated Docker builds and deployments.

Traefik Middleware Security Hardening — Headers, Rate Limiting, and Auth

Complete guide to Traefik middleware security hardening with real-world configs — security headers, rate limiting, IP whitelisting, basic auth, redirect schemes, and chaining middlewares for an A+ security rating.

Docker Rootless Mode — Secure Container Runtime for Homelabs

Complete guide to running Docker in rootless mode — no root daemon, no privileged containers. Covers installation, networking workarounds, Docker Compose, Proxmox LXC compatibility, and production readiness.

Proxmox GPU Passthrough — Complete Setup Guide for VMs

Complete guide to GPU passthrough on Proxmox VE — from IOMMU enablement and VFIO binding through NVIDIA Error 43 fixes and the vendor-reset kernel module.

Docker Multi-Stage Builds — Practical Guide for Homelab

Master Docker multi-stage builds to shrink production images from 1.2GB to under 50MB. Covers Go, Python, and Node.js patterns with real Dockerfiles and build cache strategies.

Linux Kernel Performance Tuning — sysctl Optimizations for Homelab Servers

Tune your Linux server kernel for maximum throughput and low latency. Covers TCP BBR, network buffer tuning, I/O schedulers, memory management, and CPU governor configuration with real config files and benchmarks.

Homelab Monitoring Stack — Prometheus, Grafana, Loki with Docker Compose

Deploy a complete homelab observability stack with Prometheus, Grafana, Loki, Grafana Alloy, and Alertmanager using Docker Compose. Includes pre-configured dashboards, alert rules, and log aggregation for Docker hosts.

Docker in Proxmox LXC — Performance Tuning and Production Guide

Run Docker containers inside Proxmox LXC with full performance. Covers nesting, overlay2 on ZFS, privileged vs unprivileged tradeoffs, cgroup resource limits, and security hardening for production homelab workloads.

CrowdSec Docker Deployment — Collaborative IPS for Your Homelab

Deploy CrowdSec with Docker Compose and Traefik to protect your homelab services with collaborative threat intelligence. Covers the LAPI agent, bouncers, collections, custom scenarios, and remediation pipeline with real configs.

Vaultwarden Docker Deployment — Self-Hosted Password Manager Guide

Deploy Vaultwarden, a lightweight Bitwarden-compatible password server, with Docker Compose and Traefik in your homelab. Covers admin panel setup, automated backups, SMTP configuration, and security hardening.