Devops

Paperless-ngx Docker Deployment — AI-Powered Document Management

Deploy Paperless-ngx with Docker Compose in your homelab. Covers OCR processing, ML-based document classification, consumption templates, automated ingestion, and Traefik reverse proxy integration.

Docker Supply Chain Security — SBOM, Image Signing, and Verification

Practical guide to securing your container supply chain in the homelab: generate SBOMs with Syft, sign images with Cosign, scan for vulnerabilities with Grype, and enforce Docker Content Trust.

Docker Container Graceful Shutdown — Signals, Stop Grace Period, and Trap Handlers

Configure proper graceful shutdown for Docker containers in your homelab. Covers stop signals, stop_grace_period, init process management with tini/dumb-init, and SIGTERM trap handlers to prevent data corruption during restarts.

Docker Container Storage Quotas — Limit Disk Usage with XFS

Set up XFS project quotas and Docker overlay2 size limits to prevent any single container from filling your homelab storage. Covers daemon.json config, XFS prjquota, per-container size caps, and volume quota strategies.

acme.sh Let's Encrypt Certificates for Homelab Docker Services

Automate Let’s Encrypt SSL/TLS certificates in your homelab using acme.sh and Docker. Includes DNS-01 wildcard certs, auto-renewal, and integration with Traefik, Nginx Proxy Manager, and Caddy.

Docker Compose Startup Dependencies and Init Container Patterns

A practical guide to Docker Compose startup ordering — covering depends_on conditions, healthcheck-based readiness, init container patterns with wait-for-it, and real-world compose examples for multi-service homelab stacks.

Linux OOM Management and System Stability for Docker Homelab Hosts

Prevent OOM killer crashes on your Docker homelab host. Configure systemd OOMD, set proper oom_score_adj values, enable earlyoom, and apply cgroups v2 memory limits for reliable container operation.

Multi-Arch Docker Images with Buildx for Homelab

Run Docker Buildx on a single Linux host to produce amd64 plus arm64 images. Configure QEMU binfmt emulation, build with buildx bake, and push multi-manifest images to any registry.

Docker Hardened Images — Migrate Your Homelab Stack to Near-Zero CVEs

Swap your standard Docker Hub images for Docker Hardened Images (DHI) to cut CVEs by up to 95%. Step-by-step Compose migration for Postgres, Redis, Nginx, and your full homelab stack.

Docker Image Security Hardening — Multi-Stage Builds and Distroless

Harden your Docker images with multi-stage builds, distroless base images, and runtime security options. A practical guide to reducing image size and CVEs in your homelab.