Tag: docker

Outline: The Team Wiki That Needs SSO

Outline has no password login, so self-hosting it means pairing it with an OIDC provider. Here is a working Docker stack with Postgres, Redis, and Dex.

Jellyfin GPU Transcoding: Prove It Works

You ticked the hardware acceleration box and the CPU still sits at 100%. How to set up Intel QSV and NVIDIA NVENC in Docker, and how to prove the GPU works.

One PC, Many Players: Steam Headless

Run several Steam Headless v2 containers on one Linux box so a household can play at once, each seat streamed with Moonlight. Compose file, numbers, gotchas.

Database Connection Storms, Explained

Why apps fall over under load: pool size times replicas versus Postgres max_connections, restart herds, retry storms, timeouts, and the configs that fix them.

Uptime Kuma vs Gatus vs Cachet

Uptime Kuma, Gatus, and Cachet all make a status page, but only two of them check anything. Here is which one to run in a home lab, with Compose files for each.

Sizing 7 Days to Die and Other RAM Hogs

Size RAM for a 7 Days to Die server and other hogs (Palworld, Valheim, modded Minecraft). Measure real use, cap it in Docker, and restart on a schedule.

AppArmor Profiles for Docker, Step by Step

Docker puts every container under the docker-default AppArmor profile. See what it blocks, then build a tested nginx profile with audit deny and complain mode.

Catch Your Self-Hosted Apps Phoning Home

Self-hosted is not silent. Audit outbound calls with DNS query logs, watch live connections, block egress with Docker networks, then flip telemetry opt-outs.

Docker Build Cache in CI: Make It Hit

Docker layer cache works on your laptop but CI starts cold. Fix it with registry cache or type=gha, set scope and mode=max, and debug why hits still miss.

Devcontainers for a Whole Team

Turn a devcontainer into a team standard: Compose with Postgres, pinned Features, lifecycle hooks, one prebuilt image for laptops and CI, and the UID gotcha.

gVisor vs Firecracker vs Kata for Agents

Letting a coding agent run npm install and arbitrary shell? Compare gVisor, Firecracker, and Kata on startup, KVM needs, Docker fit, and network egress.

Network Namespaces by Hand, No Docker

Rebuild Docker's bridge network with ip netns, veth pairs, a Linux bridge and nftables NAT. Six iproute2 commands, three nft rules, and a 2 AM debugging edge.