Tag: homelab

Using :latest in production is a ticking time bomb. Pin your Docker image versions or watch a surprise update break everything at 2 AM.

Alpine gives you a shell and apk; Distroless gives you nothing but the app. Compare attack surface, image size, and multi-stage build complexity.

Distroless images contain only your app and its runtime, no shell, no package manager, no attack surface. Here's how to build them.

LiteLLM proxies every LLM, local or cloud, behind one OpenAI-compatible endpoint. Pair it with vLLM for GPU-backed serving and ditch the SDK sprawl.

Backups and disaster recovery are not the same thing. Learn RTO and RPO, the 3-2-1 rule, Proxmox and Restic backups, and a runbook that survives a real outage.

Learn VLAN basics for your home lab: 802.1Q tagging, trunk vs access ports, managed switch setup, and pfSense VLAN configuration to isolate IoT, guests, and your NAS.

Uptime Kuma goes past HTTP checks: TCP, DNS, and Docker monitors, push monitors for cron jobs, public status pages, and the scripting API that actually exists.

Tired of manually updating containers? Watchtower handles it. But if you set it wrong, you'll wake up to broken apps. Here's how to do it right.

You've got backups. Great. But do you know if they actually work? RTO and RPO mean nothing if you've never actually restored.

IPv6 isn't just for the future, it's broken on your network right now. Here's why you should care and how to actually set it up.

Run BGP in your home lab with FRRouting. Covers iBGP vs eBGP, FRR installation, basic BGP config, peering with OPNsense, route filtering, and when BGP is actually worth the complexity.

nmap isn't just for pen testers. Learn what's actually worth scanning on your home network and what those open ports really mean.