Read-Only Docker Containers: What Breaks
Turn on read_only: true and watch nginx, Postgres, Redis, Python and Node fail in specific ways. Real errors, plus the minimum tmpfs and volume set for each.
Tag: docker
All the articles with the tag "docker".
LittleLink vs LinkStack: Ditch Linktree
Replace Linktree with a page you host. LittleLink, LittleLink-Server and LinkStack compared with real image sizes and idle RAM, plus working Docker Compose files.
PHP2Shell: Is Your Homelab Running PHP?
PHP2Shell is two unauthenticated PHP RCE flaws. Find every PHP container in your homelab, patch to the fixed release, and keep Cloudflare's WAF as a seatbelt.
Keycloak vs Authentik vs Authelia
Keycloak, Authentik and Authelia compared on realms, LDAP and AD federation, SAML, OIDC, clustering and RAM, with Compose files and a pick for each use case.
Outline: The Team Wiki That Needs SSO
Outline has no password login, so self-hosting it means pairing it with an OIDC provider. Here is a working Docker stack with Postgres, Redis, and Dex.
Jellyfin GPU Transcoding: Prove It Works
You ticked the hardware acceleration box and the CPU still sits at 100%. How to set up Intel QSV and NVIDIA NVENC in Docker, and how to prove the GPU works.
One PC, Many Players: Steam Headless
Run several Steam Headless v2 containers on one Linux box so a household can play at once, each seat streamed with Moonlight. Compose file, numbers, gotchas.
Database Connection Storms, Explained
Why apps fall over under load: pool size times replicas versus Postgres max_connections, restart herds, retry storms, timeouts, and the configs that fix them.
Uptime Kuma vs Gatus vs Cachet
Uptime Kuma, Gatus, and Cachet all make a status page, but only two of them check anything. Here is which one to run in a home lab, with Compose files for each.
Sizing 7 Days to Die and Other RAM Hogs
Size RAM for a 7 Days to Die server and other hogs (Palworld, Valheim, modded Minecraft). Measure real use, cap it in Docker, and restart on a schedule.
AppArmor Profiles for Docker, Step by Step
Docker puts every container under the docker-default AppArmor profile. See what it blocks, then build a tested nginx profile with audit deny and complain mode.
Catch Your Self-Hosted Apps Phoning Home
Self-hosted is not silent. Audit outbound calls with DNS query logs, watch live connections, block egress with Docker networks, then flip telemetry opt-outs.