Linux

Pi-hole and Unbound — Recursive DNS with Ad Blocking for the Homelab

Deploy Pi-hole v6 with Unbound as a recursive DNS resolver using Docker Compose. Covers ad blocking, privacy-focused recursive resolution, local DNS records for homelab services, MikroTik router integration, and query monitoring.

Docker Logging — Log Drivers, Rotation, and Centralized Collection

Configure Docker logging drivers, set up log rotation limits, and deploy a centralized log pipeline with Loki and Grafana Alloy. Practical configurations to prevent disk-full disasters and enable real-time container observability in your homelab.

Self-Hosted AI — Deploy Ollama and Open WebUI in Your Homelab

Deploy Ollama and Open WebUI on your homelab hardware for private, self-hosted AI inference. Covers Docker Compose setup, GPU acceleration, model management, remote access, and production hardening tips.

Docker Volume Management — Persistent Data Strategies for the Homelab

Learn when to use Docker named volumes vs bind mounts for homelab containers. Covers volume drivers, NFS-backed storage, backup automation, and practical data persistence patterns for production-like Docker deployments.

Proxmox Cloud-Init VM Templates — Automated Virtual Machine Deployment

Create reusable Proxmox VM templates with cloud-init to deploy Ubuntu and Debian VMs in under 60 seconds. Covers image preparation, cloud-init user/SSH/package config, template creation, and CLI cloning.

Systemd Service Hardening — Lock Down Linux Services in Your Homelab

Hardening systemd service units in your homelab isn’t just for production servers — it’s how you prevent one compromised service from taking down your entire host. This guide covers sandboxing, capability drops, filesystem isolation, and resource limits with real unit files you can use today.

Proxmox Backup Server — Full Homelab Deployment Guide

Deploy Proxmox Backup Server in your homelab — bare-metal, LXC, or Docker-based setup with ZFS datastores, client config, verification schedules, and offsite sync for a complete 3-2-1 backup strategy.

Docker Compose Networking — Multi-Stack Bridge, DNS, and Cross-Story Communication

Learn how Docker Compose networking really works — bridge networks, DNS-based service discovery, cross-stack communication, and real-world network isolation patterns for homelab deployments.

Docker Container Security — Non-Root Users, Capabilities, and Runtime Hardening

Hardening Docker containers in your homelab isn’t optional — it’s how you prevent container escapes and privilege escalation. This guide covers non-root users, capability drops, read-only filesystems, and seccomp profiles with real Compose configs.

Grafana Alloy Log Collection — Docker Logs with Loki in 2026

Grafana Alloy is the official Promtail replacement with EOL in March 2026. This guide covers a complete Docker logging stack with Alloy, Loki, and Grafana — including Alloy config syntax, Docker auto-discovery, host log collection, and the migration path from Promtail.