Posts
Page 64 of 80
-
Reverse Proxy SSL: The Cert Chain Mistake Everyone Makes
Your proxy serves the leaf certificate and skips the intermediate, so half your clients fail. How to spot it, build the chain right, and keep renewals working.
· Updated:6 min read -
Nextcloud Advanced: Federation, Backups, and Making It Actually Performant
Nextcloud advanced configuration: Redis caching, federation setup, automated backups, occ command deep dive, LDAP, external storage, and PHP-FPM tuning.
· Updated:9 min read -
Linux Capabilities: Drop Root Without Breaking Everything
Learn Linux capabilities to drop root privileges without breaking your apps. Master cap_drop, cap_add in Docker, and setcap for fine-grained privilege control.
· Updated:8 min read -
Docker Security Hardening: 15 Things You're Doing Wrong Right Now
Stop running Docker containers like it's the Wild West. Learn 15 critical Docker security mistakes and practical fixes to harden your containers today.
· Updated:13 min read -
BookStack vs Wiki.js: Picking Your Self-Hosted Documentation Platform
BookStack uses a strict book/chapter hierarchy; Wiki.js is a linked web of pages. Both run in Docker with LDAP/SSO, pick the right one for your homelab.
· Updated:7 min read -
curl Flags Every Developer Should Know
Master the curl flags that'll save you hours debugging APIs, downloads, and web requests. From -X to --compressed, here's what actually matters.
· Updated:6 min read -
Paperless-ngx: Scan It, Forget It, Find It Instantly
That filing cabinet won't sort itself. Set up Paperless-ngx in Docker with Tesseract OCR, auto-tagging, IMAP email ingestion, and PostgreSQL for a searchable archive.
· Updated:8 min read -
Named Pipes (FIFOs) in Shell Scripts
Named pipes (FIFOs) let you buffer and synchronize between processes. They're underused but solve real problems: queuing, coordination, and complex data flows.
· Updated:6 min read -
MinIO vs SeaweedFS: Self-Hosted S3 Storage Without AWS Bills
MinIO vs SeaweedFS compared for self-hosted S3 storage: setup, performance, Docker Compose configs, S3 API compatibility, and which one fits your home lab or production workload.
· Updated:9 min read -
Whisper & Faster-Whisper: Self-Hosted Speech-to-Text That Actually Works
Run OpenAI Whisper or Faster-Whisper locally with Docker. Better privacy, zero API costs, and surprisingly good accuracy, even on a potato CPU.
· Updated:9 min read -
UFW Advanced: Rate Limiting, Logging, and Rules That Actually Make Sense
Go beyond ufw allow/deny: rate limiting with ufw limit, logging levels, before.rules for iptables, IPv6 handling, Docker bypass fixes, and fail2ban integration.
9 min read -
Bash Arrays: The Feature That Makes Scripts Readable
Declare, iterate, slice, and manipulate bash arrays safely. Indexed and associative arrays, the @ vs * trap, and patterns that make scripts readable.
6 min read
