Tag: devops

A Software Bill of Materials tells you exactly what's in your software. Syft generates one, Grype scans it for CVEs. Together they're your supply chain paper trail.

Authelia is a bouncer. Authentik is the whole security desk. Pick the right self-hosted SSO for your home lab, with working configs, gotchas, and a migration path.

Pulling unscanned images onto your server is a gamble. Trivy finds the CVEs. Cosign proves the image hasn't been swapped out. Here's how to add both to your workflow.

ELK does everything and wants all your memory. Loki does logging the Prometheus way, label indexes, not content, and runs on a fraction of the resources. Here's the honest comparison.

Cockpit is the modern systemd-native Linux admin panel. Webmin is the veteran that configures everything. Here's which one should be on your servers, and which shouldn't.

You're pulling container images from strangers on the internet. Trivy scans them for CVEs. Cosign proves they haven't been tampered with. Use both.

Prometheus scrapes metrics. Grafana makes them pretty. Alertmanager wakes you up at 2 AM. Here's how to wire all three together into a monitoring stack that actually works.

GitLab CE does everything and wants all your RAM. Gitea and Forgejo run on a Raspberry Pi. Here's which self-hosted git platform actually fits your setup.

Docker networking confuses everyone at first. Here's the practical breakdown of bridge, host, overlay, and macvlan, with real Compose examples.

Cloudflare rebuilt WordPress from scratch in TypeScript using AI agents. Sandboxed plugins, Astro themes, self-hostable. It's called EmDash and it's actually interesting.

JSON mode forces models to output valid JSON. When it's a lifesaver vs. when it's overkill and makes the model worse.

You committed .env.production once. Your database credentials are in git forever. Here's how to use dotenv without shooting yourself.