Grafana Alloy is the official Promtail replacement with EOL in March 2026. This guide covers a complete Docker logging stack with Alloy, Loki, and Grafana — including Alloy config syntax, Docker auto-discovery, host log collection, and the migration path from Promtail.

Run Cloudflare Tunnel in Docker to expose homelab services through Cloudflare’s edge. No open firewall ports, automatic HTTPS, and per-service ingress rules via a single cloudflared container.

Deploy Windows Hello for Business in hybrid key trust mode: enterprise PKI setup, DC certificates, GPO policy, user enrollment, PIN configuration, and verification.

Configure Microsoft Entra hybrid join for on-premises domain-joined devices: SCP via GPO or Entra Connect, automatic registration startup via Scheduled Task, verification with dsregcmd, and troubleshooting registration failures.

Enable password writeback (SSPR), device writeback (Hybrid Entra Join), and group writeback (Microsoft 365 groups) from cloud to on-premises Active Directory using Entra Connect.

Stop using sleep and wait-for-it scripts. Use Docker Compose health checks with proper conditions to orchestrate service startup in your homelab reliably.

Step-by-step Microsoft Entra Connect v2 installation on Windows Server 2025: prerequisites, express install, custom configuration with OU filtering and writeback, verification, and mandatory upgrade before September 30, 2026.

Set deterministic ZFS ARC limits, add L2ARC without wasting RAM on metadata, and tune recordsize and compression for your Proxmox homelab VMs.

Step-by-step Group Policy management on Windows Server 2025: GPMC install, GPO creation/linking, security and WMI filtering, ADMX templates, backup/restore, and Windows Update for Business deployment rings.

Secure your Docker socket with a proxy that grants granular API permissions to Portainer, Watchtower, Traefik, and Dozzle — without exposing root-level access.