Docker

Authentik SSO With Traefik — Self-Hosted Identity Provider for Homelab

Complete guide to deploying Authentik with Docker Compose and integrating it with Traefik as a forward-auth SSO provider for centralized authentication, MFA, and access policies across all homelab services.

Gitea Docker Deployment — Self-Hosted Git and CI/CD for Homelab

Complete guide to deploying Gitea with Docker Compose in your homelab — PostgreSQL backend, SSH passthrough, daily backups, and Gitea Actions CI/CD for automated Docker builds and deployments.

Traefik Middleware Security Hardening — Headers, Rate Limiting, and Auth

Complete guide to Traefik middleware security hardening with real-world configs — security headers, rate limiting, IP whitelisting, basic auth, redirect schemes, and chaining middlewares for an A+ security rating.

Docker Rootless Mode — Secure Container Runtime for Homelabs

Complete guide to running Docker in rootless mode — no root daemon, no privileged containers. Covers installation, networking workarounds, Docker Compose, Proxmox LXC compatibility, and production readiness.

Docker Multi-Stage Builds — Practical Guide for Homelab

Master Docker multi-stage builds to shrink production images from 1.2GB to under 50MB. Covers Go, Python, and Node.js patterns with real Dockerfiles and build cache strategies.

Homelab Monitoring Stack — Prometheus, Grafana, Loki with Docker Compose

Deploy a complete homelab observability stack with Prometheus, Grafana, Loki, Grafana Alloy, and Alertmanager using Docker Compose. Includes pre-configured dashboards, alert rules, and log aggregation for Docker hosts.

Docker in Proxmox LXC — Performance Tuning and Production Guide

Run Docker containers inside Proxmox LXC with full performance. Covers nesting, overlay2 on ZFS, privileged vs unprivileged tradeoffs, cgroup resource limits, and security hardening for production homelab workloads.

CrowdSec Docker Deployment — Collaborative IPS for Your Homelab

Deploy CrowdSec with Docker Compose and Traefik to protect your homelab services with collaborative threat intelligence. Covers the LAPI agent, bouncers, collections, custom scenarios, and remediation pipeline with real configs.

Vaultwarden Docker Deployment — Self-Hosted Password Manager Guide

Deploy Vaultwarden, a lightweight Bitwarden-compatible password server, with Docker Compose and Traefik in your homelab. Covers admin panel setup, automated backups, SMTP configuration, and security hardening.

Pi-hole and Unbound — Recursive DNS with Ad Blocking for the Homelab

Deploy Pi-hole v6 with Unbound as a recursive DNS resolver using Docker Compose. Covers ad blocking, privacy-focused recursive resolution, local DNS records for homelab services, MikroTik router integration, and query monitoring.