total 22 posts
How switching CrowdSec from the Debian package to the upstream repository left every parser and scenario as a dangling symlink, why nothing complained, and how to check that your agent is detecting rather than just running.
A patch policy for ten Debian machines: unattended-upgrades limited to Debian-Security on the containers, an Ansible playbook for the hosts that need a human, and Prometheus metrics that make a missed update visible.
A recurring "failed to apply retention" alert in Loki, the wrong explanation I believed for a month, the real cause in the boltdb-shipper index, and how I moved to TSDB with a self-healing timer covering the transition.
A failed container backup exposed unreadable sectors on the hypervisor SSD. SMART said PASSED. Here is how I found every affected file, repaired one inside a read-only template, why ext4 walked straight back onto the bad block, and the backup job that came out of it.
Running the Wazuh all-in-one stack in a Proxmox container, enrolling ten hosts, wiring it into Grafana and push notifications, and working out which of 3,700 vulnerability findings actually matter.
A post-mortem: how an intrusion-prevention system banned my homelab IP and removed all access at once, how I got back in, and the two-layer whitelist that stops it happening again.
Building and running Headplane against a self-hosted Headscale control server — the requirements the docs get wrong, and the two permissions traps that keep it in a crash loop.
Centralising logs from ten machines into Loki with rsyslog and Alloy, adding metrics with Prometheus, and building the dashboards that answer security questions.
Hosting your own email in 2026: the full stack, the DNS records that decide whether you land in an inbox, and the mistakes that get you blacklisted.
Replacing a cloud push service with ntfy: the access model that keeps topics private, wiring it into Grafana and Wazuh alerts, and the limits worth knowing.
Passing a physical WiFi card into a Proxmox container to run hostapd, with dnsmasq for DHCP, network-level ad blocking, and per-client notifications.
How I turned a spare 4TB drive and a Proxmox LXC container into a family media server with Jellyfin, replacing multiple streaming subscriptions with a single self-hosted solution.
A comprehensive platform for gym goers to find training partners, log workouts, follow training programs, and build a fitness community.
Setting up an HTML email report of CrowdSec security alerts delivered to your inbox every morning with Postfix and Gmail SMTP relay.
How to automate DNS record management for your domains using the IONOS REST API — listing zones, adding and deleting records with curl and Python.
A beginner-friendly introduction to Proxmox VE — installation, initial configuration, and first container creation for homelab enthusiasts.
Practical security hardening steps for LXC containers in a Proxmox homelab — SSH, AppArmor, unprivileged containers, and resource isolation.
Setting up a self-hosted Tailscale control server with Headscale to securely access your homelab from anywhere.
A walkthrough of my self-hosted Proxmox VE homelab — LXC containers, networking, and the services that run my digital infrastructure.
Setting up centralised logging, metrics dashboards, and intrusion detection for a Proxmox-based homelab with open-source tools.
How to use NGINX as a reverse proxy with automatic TLS certificates to expose multiple self-hosted services through a single entry point.
A practical guide to running isc-dhcp-server in an LXC container for static and dynamic IP allocation across your Proxmox VE lab network.
