Posts
Page 25 of 42
-
Auditd & Audit Logging: Know Exactly Who Touched What on Your Server
Master auditd for Linux audit logging: watch critical files, audit syscalls, use aureport and ausearch, and ship logs to Loki or Elasticsearch for compliance and security monitoring.
8 min read -
Time Sync on VMs: Why NTP Keeps Drifting
Your VM's clock is off by minutes. NTP is running but your system still drifts. Here's why.
4 min read -
HashiCorp Vault: Stop Hardcoding Secrets Like It's 2012
HashiCorp Vault tutorial: Docker Compose setup, KV v2 secrets, AppRole auth, dynamic database credentials, PKI engine for internal certs, and auto-unseal with cloud KMS.
8 min read -
Woodpecker CI vs Drone CI: Lightweight Pipelines for People Who Hate Waiting
Woodpecker CI vs Drone CI compared: container-native pipelines, YAML syntax, Gitea integration, and why the license drama matters for self-hosters.
7 min read -
Lazy Docker & Dive: CLI Tools That Make Docker Less Painful
Learn how lazydocker and dive make Docker manageable from your terminal. TUI dashboards, image layer analysis, CI integration, and optimization tips.
15 min read -
The MTU Problem Nobody Diagnoses Correctly
MTU mismatches silently break large file transfers, backups, and video calls. Here's how to find and fix the wrong frame size on your network.
4 min read -
Open WebUI vs LibreChat: Self-Hosted ChatGPT Alternatives Compared
Open WebUI vs LibreChat: two self-hosted ChatGPT alternatives compared. We cover setup, Ollama integration, multi-user support, RAG, plugins, and which one fits you.
17 min read -
VPN Kill Switch and DNS Leak Prevention: Paranoia, Justified
Set up a WireGuard VPN kill switch and prevent DNS leaks on Linux. Practical iptables rules, resolv.conf locking, and systemd-resolved config.
8 min read -
BGP in Your Home Lab: Dynamic Routing for People Who've Run Out of Static Routes
Run BGP in your home lab with FRRouting. Covers iBGP vs eBGP, FRR installation, basic BGP config, peering with OPNsense, route filtering, and when BGP is actually worth the complexity.
7 min read -
Suricata vs Snort: Intrusion Detection for the Paranoid Home Lab Owner
Suricata vs Snort for home lab IDS/IPS: compare performance, rules, and setup. Includes Suricata installation, suricata.yaml config, EVE JSON logging, and OPNsense integration.
7 min read -
Docker Compose Environment Variable Precedence
Three ways to set env vars in Docker Compose. Only one wins. Here's which and why it breaks your configs.
4 min read -
Plausible vs Umami: Privacy-Friendly Analytics That Won't Creep Out Your Users
Compare Plausible vs Umami for self-hosted, privacy-friendly web analytics. Ditch Google Analytics and keep your users' data off ad networks.
8 min read
