Proxmox Backup Strategies — Vzdump, PBS, and 3-2-1 for Homelabs
Design a bulletproof backup strategy for your Proxmox homelab — vzdump scheduling, Proxmox Backup Server deployment, 3-2-1 rule with off-site replication, and automated restore testing.
Security
Step CA + ACME — Internal TLS Certificates for Your Homelab
Run your own internal Certificate Authority with step-ca in Docker, issue TLS certificates via ACME, integrate with Traefik for automatic renewal, and distribute the root CA to all your devices — no more self-signed certificate warnings.
nginx-poolslip Zero-Day — NGINX RCE Vulnerability Guide for Homelabs
The nginx-poolslip zero-day RCE affects NGINX 1.31.0 with ASLR bypass. This guide covers version detection, risk assessment, practical mitigations for homelab setups, and a patch readiness plan.
Mailcow Dockerized — Self-Hosted Email Server in Your Homelab
Full guide to deploying Mailcow Dockerized in your homelab — from Docker Compose setup and DNS records to Traefik reverse proxy, DKIM signing, and email deliverability tuning.
Proxmox VE Security Hardening — Firewall, 2FA, and Fail2ban
A comprehensive Proxmox VE hardening guide covering firewall rules, TOTP 2FA, Fail2ban, SSH lockdown, AppArmor, and unattended upgrades — secure your hypervisor beyond default settings.
MikroTik RouterOS 7 DNS Over HTTPS and Adlist — Block Ads Without Pi-Hole
Configure DNS over HTTPS and the built-in DNS Adlist feature on MikroTik RouterOS 7 to block ads, trackers, and malware network-wide — no Pi-hole, no extra hardware, no containers needed.
Valkey 9.1 Docker Deployment — High-Performance Cache for Your Homelab
Complete guide to deploying Valkey 9.1 with Docker Compose — the high-performance Redis fork with new security, observability, and performance features. Covers config, ACL hardening, and connecting your homelab services.
Docker Compose Secrets Management — .env, SOPS, and Vaultwarden for Homelabs
Practical guide to managing Docker secrets in homelab environments — from basic .env patterns to Docker Secrets, SOPS/age encryption, and programmatic vault integration. Includes real compose examples and secret rotation workflows.
Authentik SSO With Traefik — Self-Hosted Identity Provider for Homelab
Complete guide to deploying Authentik with Docker Compose and integrating it with Traefik as a forward-auth SSO provider for centralized authentication, MFA, and access policies across all homelab services.
Gitea Docker Deployment — Self-Hosted Git and CI/CD for Homelab
Complete guide to deploying Gitea with Docker Compose in your homelab — PostgreSQL backend, SSH passthrough, daily backups, and Gitea Actions CI/CD for automated Docker builds and deployments.