total 13 posts
A patch policy for ten Debian machines: unattended-upgrades limited to Debian-Security on the containers, an Ansible playbook for the hosts that need a human, and Prometheus metrics that make a missed update visible.
A recurring "failed to apply retention" alert in Loki, the wrong explanation I believed for a month, the real cause in the boltdb-shipper index, and how I moved to TSDB with a self-healing timer covering the transition.
A failed container backup exposed unreadable sectors on the hypervisor SSD. SMART said PASSED. Here is how I found every affected file, repaired one inside a read-only template, why ext4 walked straight back onto the bad block, and the backup job that came out of it.
Running the Wazuh all-in-one stack in a Proxmox container, enrolling ten hosts, wiring it into Grafana and push notifications, and working out which of 3,700 vulnerability findings actually matter.
Building and running Headplane against a self-hosted Headscale control server — the requirements the docs get wrong, and the two permissions traps that keep it in a crash loop.
Centralising logs from ten machines into Loki with rsyslog and Alloy, adding metrics with Prometheus, and building the dashboards that answer security questions.
Passing a physical WiFi card into a Proxmox container to run hostapd, with dnsmasq for DHCP, network-level ad blocking, and per-client notifications.
How I turned a spare 4TB drive and a Proxmox LXC container into a family media server with Jellyfin, replacing multiple streaming subscriptions with a single self-hosted solution.
A beginner-friendly introduction to Proxmox VE — installation, initial configuration, and first container creation for homelab enthusiasts.
Practical security hardening steps for LXC containers in a Proxmox homelab — SSH, AppArmor, unprivileged containers, and resource isolation.
A walkthrough of my self-hosted Proxmox VE homelab — LXC containers, networking, and the services that run my digital infrastructure.
Setting up centralised logging, metrics dashboards, and intrusion detection for a Proxmox-based homelab with open-source tools.
A practical guide to running isc-dhcp-server in an LXC container for static and dynamic IP allocation across your Proxmox VE lab network.
