Uptime Kuma vs Gatus vs Cachet
Uptime Kuma, Gatus, and Cachet all make a status page, but only two of them check anything. Here is which one to run in a home lab, with Compose files for each.
Tag: docker
All the articles with the tag "docker".
Sizing 7 Days to Die and Other RAM Hogs
Size RAM for a 7 Days to Die server and other hogs (Palworld, Valheim, modded Minecraft). Measure real use, cap it in Docker, and restart on a schedule.
AppArmor Profiles for Docker, Step by Step
Docker puts every container under the docker-default AppArmor profile. See what it blocks, then build a tested nginx profile with audit deny and complain mode.
Catch Your Self-Hosted Apps Phoning Home
Self-hosted is not silent. Audit outbound calls with DNS query logs, watch live connections, block egress with Docker networks, then flip telemetry opt-outs.
Docker Build Cache in CI: Make It Hit
Docker layer cache works on your laptop but CI starts cold. Fix it with registry cache or type=gha, set scope and mode=max, and debug why hits still miss.
Devcontainers for a Whole Team
Turn a devcontainer into a team standard: Compose with Postgres, pinned Features, lifecycle hooks, one prebuilt image for laptops and CI, and the UID gotcha.
gVisor vs Firecracker vs Kata for Agents
Letting a coding agent run npm install and arbitrary shell? Compare gVisor, Firecracker, and Kata on startup, KVM needs, Docker fit, and network egress.
Network Namespaces by Hand, No Docker
Rebuild Docker's bridge network with ip netns, veth pairs, a Linux bridge and nftables NAT. Six iproute2 commands, three nft rules, and a 2 AM debugging edge.
Radicale vs Baikal: CalDAV That Syncs
Radicale or Baikal for a shared family calendar? Compose files, a rights file that shares one calendar, Caddy redirects, and the DAVx5 and iOS sync gotchas.
AppFlowy vs Notion: Self-Host Your Notes
AppFlowy vs Notion in 2026: the self-host server is now proprietary and the free tier is one browser seat. Licensing, Docker Compose setup, and real prices.
Prompt Injection vs Your Coding Agent
Prompt-level defenses against injection are probabilistic and lose to a patient attacker. Here's the capability-level design that holds, with working configs.
Stop Handing CI Jobs Root on Your Box
Self-hosted GitHub Actions, Forgejo, and GitLab runners can hand a forked pull request root on your box. Here is the isolation ladder that actually stops it.