Skip to content

Tag: docker

All the articles with the tag "docker".

step-ca: Let's Encrypt for Your LAN

step-ca: Let's Encrypt for Your LAN

Run step-ca as a private ACME server so Caddy and Traefik auto-issue and renew TLS certs for grafana.home.arpa, with no internet exposure and no CT log leaks.

Container Restart Storms at 2 AM

Container Restart Storms at 2 AM

A triage runbook for a Docker or Kubernetes container stuck in a restart loop: read the signals, stop the loop, get a shell, and find the real cause fast.

Rootless Podman Quadlets vs Docker

Rootless Podman Quadlets vs Docker

Rootless Podman Quadlets or rootless Docker for a home lab host? Networking, cgroups, auto-updates, bind mounts and boot behavior compared, with a clear pick.

Read-Only Docker Containers: What Breaks

Read-Only Docker Containers: What Breaks

Turn on read_only: true and watch nginx, Postgres, Redis, Python and Node fail in specific ways. Real errors, plus the minimum tmpfs and volume set for each.

LittleLink vs LinkStack: Ditch Linktree

LittleLink vs LinkStack: Ditch Linktree

Replace Linktree with a page you host. LittleLink, LittleLink-Server and LinkStack compared with real image sizes and idle RAM, plus working Docker Compose files.

PHP2Shell: Is Your Homelab Running PHP?

PHP2Shell: Is Your Homelab Running PHP?

PHP2Shell is two unauthenticated PHP RCE flaws. Find every PHP container in your homelab, patch to the fixed release, and keep Cloudflare's WAF as a seatbelt.

Keycloak vs Authentik vs Authelia

Keycloak vs Authentik vs Authelia

Keycloak, Authentik and Authelia compared on realms, LDAP and AD federation, SAML, OIDC, clustering and RAM, with Compose files and a pick for each use case.

Outline: The Team Wiki That Needs SSO

Outline: The Team Wiki That Needs SSO

Outline has no password login, so self-hosting it means pairing it with an OIDC provider. Here is a working Docker stack with Postgres, Redis, and Dex.

Jellyfin GPU Transcoding: Prove It Works

Jellyfin GPU Transcoding: Prove It Works

You ticked the hardware acceleration box and the CPU still sits at 100%. How to set up Intel QSV and NVIDIA NVENC in Docker, and how to prove the GPU works.

One PC, Many Players: Steam Headless

One PC, Many Players: Steam Headless

Run several Steam Headless v2 containers on one Linux box so a household can play at once, each seat streamed with Moonlight. Compose file, numbers, gotchas.

Database Connection Storms, Explained

Database Connection Storms, Explained

Why apps fall over under load: pool size times replicas versus Postgres max_connections, restart herds, retry storms, timeouts, and the configs that fix them.