GNTECH Infrastructure Part 09: Docker Compose and Traefik for Private Applications
Route one application through a socket-free Traefik gateway, verify TLS with a local trust anchor, and check that a container replacement keeps application data.
Route one application through a socket-free Traefik gateway, verify TLS with a local trust anchor, and check that a container replacement keeps application data.
Scope LAPS support access to one OU, keep read and rotation roles separate, and verify both successful decryption and denial outside the intended scope.
A practical Linux deployment with a loopback-only origin, private administrator bootstrap, persistent data, and separate checks for the browser, agents, and remote sessions.
A practical Intel AMT SOL login setup for a Proxmox host, with device discovery, a systemd serial getty, troubleshooting, rollback, and a clear explanation of disconnecting.
My T420 became a useful administration laptop after an SSD and 8 GB RAM upgrade. Here is a reproducible starting point for a small Arch/i3 desktop, plus the hardware issues worth checking.
Planning a 10GbE upgrade for your homelab? From MikroTik CRS switches and SFP+ cabling to Proxmox NIC tuning, this guide covers the hardware decisions, configs, and performance optimizations you need.
One guide to a Git-based homelab documentation site: project setup, useful runbooks, static builds, Docker hosting, and optional search and versioning.
Enable TCP BBR congestion control on your Proxmox host, Docker containers, and LXC guests. Step-by-step sysctl config, kernel module loading, and iperf3 benchmarks showing real-world throughput gains for homelab and remote streaming.
Learn Linux cgroups v2 for Docker resource control: memory.max and memory.hard limits, CPU quotas, I/O throttling, PSI monitoring, and compose deploy.resources configs. Includes real container debugging and OOM prevention.
Replace K3s default Flannel with Cilium CNI for accelerated eBPF networking, remove kube-proxy, gain Hubble observability, and enforce identity-based network policies in a lightweight homelab cluster.