Tag: self-hosting

Ran 9 real headless tools against an echo server. Sec-Fetch alone catches almost none of them. Here's what actually leaks, WAF rules that work, and where Anubis fits in.

Pipe ZFS incremental snapshots through WireGuard to a friend's NAS or a remote VPS. Encrypted in transit and at rest, no rsync.net bill or vendor lock-in.

Restic forget, prune, and check: right order, real retention flags, cron automation, and why --read-data on a large repo will ruin your whole weekend.

Disqus is a tracker farm wearing a comment box costume. Here's every real alternative, self-hosted and SaaS, and which one actually fits your blog.

Skip the paid Unraid license. mergerfs + SnapRAID give you flexible JBOD pooling with parity protection on mismatched drives you already own, for free.

Headscale gives you all the magic of Tailscale's zero-config WireGuard mesh, without trusting a SaaS control plane. Deploy it end-to-end with Docker Compose, ACLs, MagicDNS, and exit nodes.

Run a real S3-compatible object storage cluster on Raspberry Pi 4s with SeaweedFS, low RAM overhead, fast filer, no Ceph drama or surprise cloud bills.

Bind mounts are fast and simple; NFS is shared and flexible for containers. Pick wrong and your database corrupts at 2 AM. Here is how to choose wisely.

Bcachefs got booted from the Linux mainline kernel and now ships as a DKMS module. Stability verdict, tiering, and a straight answer for home lab use in 2026.

Frigate NVR + a $60 Google Coral TPU gives you real-time AI object detection on your own cameras, integrates with Home Assistant, and costs nothing per month. Here's how to set it up.

GPU passthrough on Proxmox is the best way to isolate LLM workloads, but it's a minefield of IOMMU groups, vfio-pci binding, and Code 43 errors. This post walks through the whole thing end-to-end.

Per-container control over Docker image updates with labels. Auto-update or notify via Discord, Slack, ntfy, no sidecar needed.