Vaultwarden Docker Deployment — Self-Hosted Password Manager Guide
A staged Vaultwarden setup with explicit HTTPS, signup and recovery boundaries.
Docker
Docker Logging — Log Drivers, Rotation, and Centralized Collection
Configure Docker logging drivers, set up log rotation limits, and deploy a centralized log pipeline with Loki and Grafana Alloy. Practical configurations to prevent disk-full disasters and enable real-time container observability in your homelab.
Self-Hosted AI — Deploy Ollama and Open WebUI in Your Homelab
Deploy Ollama and Open WebUI on your homelab hardware for private, self-hosted AI inference. Covers Docker Compose setup, GPU acceleration, model management, remote access, and production hardening tips.
Docker Volume Management — Persistent Data Strategies for the Homelab
Learn when to use Docker named volumes vs bind mounts for homelab containers. Covers volume drivers, NFS-backed storage, backup automation, and practical data persistence patterns for production-like Docker deployments.
Docker Compose Networking — Multi-Stack Bridge, DNS, and Cross-Story Communication
Learn how Docker Compose networking really works — bridge networks, DNS-based service discovery, cross-stack communication, and real-world network isolation patterns for homelab deployments.
Docker Container Security — Non-Root Users, Capabilities, and Runtime Hardening
Hardening Docker containers in your homelab isn’t optional — it’s how you prevent container escapes and privilege escalation. This guide covers non-root users, capability drops, read-only filesystems, and seccomp profiles with real Compose configs.
Grafana Alloy Log Collection — Docker Logs with Loki in 2026
Verify one Docker log stream end to end before expanding collection or replacing Promtail.
Cloudflare Tunnel with Docker — Expose Homelab Services Securely
Run Cloudflare Tunnel in Docker to expose homelab services through Cloudflare’s edge. No open firewall ports, automatic HTTPS, and per-service ingress rules via a single cloudflared container.
Docker Compose Health Checks — Reliable Service Startup Orchestration
A small Redis lab explains startup gating, health transitions, and the limits of automatic recovery.
Docker Socket Proxy — Restrict API Access and Verify the Policy
Configure documented socket-proxy endpoint controls, keep the proxy private, and test permitted and denied requests.