Mailcow Dockerized — Self-Hosted Email Server in Your Homelab
Full guide to deploying Mailcow Dockerized in your homelab — from Docker Compose setup and DNS records to Traefik reverse proxy, DKIM signing, and email deliverability tuning.
Security
Proxmox VE Security Hardening — Firewall, 2FA, and Fail2ban
A comprehensive Proxmox VE hardening guide covering firewall rules, TOTP 2FA, Fail2ban, SSH lockdown, AppArmor, and unattended upgrades — secure your hypervisor beyond default settings.
MikroTik RouterOS 7 DNS Over HTTPS and Adlist — Block Ads Without Pi-Hole
Configure DNS over HTTPS and the built-in DNS Adlist feature on MikroTik RouterOS 7 to block ads, trackers, and malware network-wide — no Pi-hole, no extra hardware, no containers needed.
Valkey 9.1 Docker Deployment — High-Performance Cache for Your Homelab
Complete guide to deploying Valkey 9.1 with Docker Compose — the high-performance Redis fork with new security, observability, and performance features. Covers config, ACL hardening, and connecting your homelab services.
Docker Compose Secrets Management — .env, SOPS, and Vaultwarden for Homelabs
Practical guide to managing Docker secrets in homelab environments — from basic .env patterns to Docker Secrets, SOPS/age encryption, and programmatic vault integration. Includes real compose examples and secret rotation workflows.
Authentik SSO With Traefik — Self-Hosted Identity Provider for Homelab
Complete guide to deploying Authentik with Docker Compose and integrating it with Traefik as a forward-auth SSO provider for centralized authentication, MFA, and access policies across all homelab services.
Gitea Docker Deployment — Self-Hosted Git and CI/CD for Homelab
Complete guide to deploying Gitea with Docker Compose in your homelab — PostgreSQL backend, SSH passthrough, daily backups, and Gitea Actions CI/CD for automated Docker builds and deployments.
Traefik Middleware Security Hardening — Headers, Rate Limiting, and Auth
Complete guide to Traefik middleware security hardening with real-world configs — security headers, rate limiting, IP whitelisting, basic auth, redirect schemes, and chaining middlewares for an A+ security rating.
Docker Rootless Mode — Secure Container Runtime for Homelabs
Complete guide to running Docker in rootless mode — no root daemon, no privileged containers. Covers installation, networking workarounds, Docker Compose, Proxmox LXC compatibility, and production readiness.
Proxmox GPU Passthrough — Complete Setup Guide for VMs
Complete guide to GPU passthrough on Proxmox VE — from IOMMU enablement and VFIO binding through NVIDIA Error 43 fixes and the vendor-reset kernel module.