Rootless Docker for Self-Hosting: Less Blast Radius, Same Apps
Run Docker without giving every container root-shaped teeth. A practical rootless Docker setup for self-hosters who want safer VPS and homelab apps.
18 articles
Run Docker without giving every container root-shaped teeth. A practical rootless Docker setup for self-hosters who want safer VPS and homelab apps.
Watchtower is convenient until it updates the wrong thing at the wrong time. Here's how I use Renovate to get pull requests for Docker Compose updates instead.
Stop copying SSH public keys to every VPS and homelab box. SSH certificates give you short-lived access, cleaner revocation, and one sane trust model for your servers.
I got tired of search pages full of ads, tracking, and AI boxes. Here's how I run SearXNG at home with Docker, sane settings, and a few security guardrails.
Password prompts are fine. VPNs are better. But for a few private web apps, Caddy mutual TLS is the tiny security layer I wish I had set up earlier.
Fail2ban was good. CrowdSec is better. Here's why I switched my entire homelab to this collaborative intrusion prevention system — and how to set it up in 15 minutes.
I tested Synapse, Revolt, and Mattermost to replace Discord and Slack on my homelab. Here's what I learned about running your own chat infrastructure — and which one I actually use.
Stop opening ports and messing with complex VPN configs. Tailscale gives you secure, zero-config access to every self-hosted service from anywhere. Here's how I set it up and why I won't go back.
J'ai quitté LastPass après leur fuite de données. Voici pourquoi Vaultwarden (Bitwarden RS) est le meilleur gestionnaire de mots de passe self-hosté — et comment l'installer.
Stop scattering API keys in .env files. Set up HashiCorp Vault in Docker to centralize, rotate, and audit every secret your self-hosted apps need.
Set up your own WireGuard VPN server in Docker. Connect to your homelab securely from your phone, laptop, or anywhere — no paid VPN needed.
Stop managing 12 separate logins. Set up Authentik to get single sign-on across all your self-hosted apps — Nextcloud, Grafana, Gitea, and more.
Learn how to properly backup your self-hosted applications with Docker volumes, databases, and off-site strategies. Protect your data from loss.
Learn how to configure Traefik reverse proxy for Docker containers with automatic SSL certificates, dashboard access, and production-ready security settings.
Complete guide to self-hosting Vaultwarden, a lightweight Bitwarden server. Set up your own password manager with Docker in under 30 minutes.
SSH keys, UFW firewall, Fail2ban, auto-updates — the exact steps I run on every new VPS before deploying anything. Copy-paste ready.