Posts
Page 63 of 80
-
VPN Kill Switch and DNS Leak Prevention: Paranoia, Justified
Set up a WireGuard VPN kill switch and prevent DNS leaks on Linux. Practical iptables rules, resolv.conf locking, and systemd-resolved config.
8 min read -
BGP in Your Home Lab: Dynamic Routing for People Who've Run Out of Static Routes
Run BGP in your home lab with FRRouting. Covers iBGP vs eBGP, FRR installation, basic BGP config, peering with OPNsense, route filtering, and when BGP is actually worth the complexity.
· Updated:7 min read -
Suricata vs Snort: Intrusion Detection for the Paranoid Home Lab Owner
Suricata beats Snort on multi-threading and EVE JSON logging. Side-by-side IDS/IPS breakdown with Suricata install, suricata.yaml config, and OPNsense setup for home labs.
· Updated:8 min read -
Docker Compose Environment Variable Precedence
Docker Compose reads env vars from three places and only one wins. The precedence order, the .env gotcha, when your shell wins, and how to debug it.
· Updated:5 min read -
Plausible vs Umami: Privacy-Friendly Analytics That Won't Creep Out Your Users
Compare Plausible vs Umami for self-hosted, privacy-friendly web analytics. Ditch Google Analytics and keep your users' data off ad networks.
· Updated:10 min read -
DNS Troubleshooting from the Command Line
DNS broke again. The command sequence that finds it: verify the resolver, reach a server, dig the record, trace the query path, check reverse lookups.
· Updated:6 min read -
Tailscale Deep Dive: Mesh VPN That Just Works (and Why That's Suspicious)
Go beyond tailscale up with ACL policies, exit nodes, subnet routers, MagicDNS, and Taildrop. Plus: self-host your own control plane with Headscale.
· Updated:11 min read -
Podman Quadlets: Running Containers Without the Docker Daemon (or Your Sanity)
Podman skips the root daemon Docker needs. Quadlets let systemd manage containers natively, with auto-updates and health checks, for self-hosting without Compose.
· Updated:14 min read -
nmap for Your Own Network: What You Should Be Scanning
nmap isn't just for pen testers. Learn what's actually worth scanning on your home network and what those open ports really mean.
5 min read -
Vaultwarden Organization Sharing: Password Management for Your Whole Household (or Team)
Stop texting passwords. Set up Vaultwarden organizations to share credentials with family or your team: collections, member roles, the bw CLI, and backups.
· Updated:8 min read -
LLM Fine-Tuning for Mortals: LoRA, QLoRA, and Your Gaming GPU
Fine-tune an LLM on your gaming GPU with LoRA and QLoRA: dataset prep, Hugging Face, Unsloth, VRAM math, a full walkthrough, and mistakes that waste your afternoon.
· Updated:12 min read -
Ollama Beyond the Basics: Model Management, Custom Models, and Optimization
Master Ollama with Modelfiles, GPU tuning, API usage, and performance tricks. Stop running 70B models on 8GB VRAM and wondering why everything is slow.
· Updated:11 min read