Tag: docker

Pulling unscanned images onto your server is a gamble. Trivy finds the CVEs. Cosign proves the image hasn't been swapped out. Here's how to add both to your workflow.

Falco watches every syscall your containers make and screams when something sketchy happens. Like someone exec'ing a shell inside your nginx container at 3am.

ELK does everything and wants all your memory. Loki does logging the Prometheus way, label indexes, not content, and runs on a fraction of the resources. Here's the honest comparison.

Real cloudflared config: many services on one tunnel, Access policies, origin TLS, what quick tunnels are for, and what Cloudflare can see in your traffic.

Immich vs PhotoPrism compared side-by-side: mobile app, ML face detection, Docker setup, and the real gotchas before you ditch Google Photos for good.

You're pulling container images from strangers on the internet. Trivy scans them for CVEs. Cosign proves they haven't been tampered with. Use both.

Prometheus scrapes metrics. Grafana makes them pretty. Alertmanager wakes you up at 2 AM. Here's how to wire all three together into a monitoring stack that actually works.

Wazuh gives you SIEM, HIDS, FIM, and threat detection in one stack. Here's how to deploy it in your home lab with Docker and actually use it.

Run Docker containers without root privileges, here's the security difference, the install steps, and the gotchas nobody tells you about.

Docker networking confuses everyone at first. Here's the practical breakdown of bridge, host, overlay, and macvlan, with real Compose examples.

Cloudflare rebuilt WordPress from scratch in TypeScript using AI agents. Sandboxed plugins, Astro themes, self-hostable. It's called EmDash and it's actually interesting.

Google Drive, Gmail, Photos, Calendar, Maps, Analytics, all replaceable with self-hosted alternatives that don't report your life back to Mountain View.