Posts

Nginx Docker Deployment — Reverse Proxy and Static Caching for Homelabs

Complete guide to deploying Nginx with Docker Compose as a reverse proxy and caching layer. Covers multi-service proxying, static file caching, gzip compression, SSL termination, and performance tuning for homelab environments.

Proxmox VE Security Hardening — Firewall, 2FA, and Fail2ban

A comprehensive Proxmox VE hardening guide covering firewall rules, TOTP 2FA, Fail2ban, SSH lockdown, AppArmor, and unattended upgrades — secure your hypervisor beyond default settings.

WireGuard Performance Tuning — Kernel sysctl and MTU Optimization

A practical guide to maximizing WireGuard throughput on Linux — covering kernel sysctl tuning, BBR congestion control, UDP buffer sizes, MTU/MSS clamping, NAPI polling optimization, and proper benchmarking with iperf3.

MikroTik RouterOS 7 DNS Over HTTPS and Adlist — Block Ads Without Pi-Hole

Configure DNS over HTTPS and the built-in DNS Adlist feature on MikroTik RouterOS 7 to block ads, trackers, and malware network-wide — no Pi-hole, no extra hardware, no containers needed.

Valkey 9.1 Docker Deployment — High-Performance Cache for Your Homelab

Complete guide to deploying Valkey 9.1 with Docker Compose — the high-performance Redis fork with new security, observability, and performance features. Covers config, ACL hardening, and connecting your homelab services.

Docker Compose Secrets Management — .env, SOPS, and Vaultwarden for Homelabs

Practical guide to managing Docker secrets in homelab environments — from basic .env patterns to Docker Secrets, SOPS/age encryption, and programmatic vault integration. Includes real compose examples and secret rotation workflows.

Headscale — Self-Hosted Tailscale Mesh VPN Server with Docker Compose

Deploy Headscale with Docker Compose to run your own WireGuard mesh VPN control plane. Complete guide from setup to client registration, ACL configuration, subnet routing, and production hardening.

Proxmox SDN — Centralized Virtual Networking for Homelab Clusters

Complete guide to Proxmox SDN — configure centralized virtual networks with VXLAN overlays, VNets, subnets, and integrated DHCP across your multi-node cluster.

Restic Automated Backups — Encrypted Offsite Docker Backup for Homelab

Complete guide to automating encrypted Docker volume backups with restic — local snapshots with deduplication, S3-compatible offsite storage, cron scheduling, retention policies, and disaster recovery for homelab containers.

Authentik SSO With Traefik — Self-Hosted Identity Provider for Homelab

Complete guide to deploying Authentik with Docker Compose and integrating it with Traefik as a forward-auth SSO provider for centralized authentication, MFA, and access policies across all homelab services.