Guides
How to Set Up Pi-hole or AdGuard Home for Network-Wide Ad Blocking
Compare Pi-hole and AdGuard Home, then set up whichever fits your homelab. Full Docker Compose configs, DNS integration, and blocklist recommendations.
WireGuard VPN Server: Self-Hosted Remote Access
Set up a WireGuard VPN server on Docker using wg-easy for a clean web UI, then connect your devices for secure remote access to your homelab.
Cloudflare Tunnels for Your Homelab: Zero Port Forwarding, Free Tier
Expose homelab services to the internet without opening a single port using Cloudflare Tunnels. Free, easy to set up, and more secure than traditional port forwarding.
Tailscale Subnet Routing: Access Your Entire Home Network Remotely
Set up Tailscale subnet routing to expose your full home network to all your tailnet devices. No VPN server required, no port forwarding.
Wildcard SSL Certificates for Your Homelab (Let's Encrypt + Cloudflare)
Get a single wildcard SSL certificate that covers every subdomain in your homelab. No more per-service certificates, no more HTTPS warnings.
Pi-hole DNS Ad Blocking: Complete Setup Guide
Set up Pi-hole on Docker to block ads and tracking at the DNS level across your entire network. No browser extensions, no per-device setup.
Wazuh in Your Homelab: A Real SIEM Without the Enterprise Price Tag
Deploy Wazuh as a dedicated Proxmox VM to get centralized security monitoring, file integrity alerts, and vulnerability scanning across your entire homelab, with agents on every Linux host and Windows coverage via Tailscale.
Authelia on Docker: Add Two-Factor Auth to Every Service in Your Homelab
Set up Authelia as a forward-auth middleware in front of Nginx Proxy Manager to protect every homelab service with a single SSO portal and optional 2FA.
How to Set Up a Local DNS Server With Technitium (Ditch the Router DNS)
Run Technitium DNS in Docker to get internal hostnames, ad blocking, and split DNS for your homelab. No more IP addresses in your browser.
Tailscale for Your Homelab: Remote Access Without Port Forwarding
Set up Tailscale on your homelab server and access every service securely from anywhere. No port forwarding, no public IP required.
How to Set Up Nginx Proxy Manager With Docker (Complete Guide)
Install Nginx Proxy Manager with Docker Compose, add your first proxy host, and get HTTPS working for every service on your homelab.
Articles
WireGuard vs Tailscale: Which Remote Access Solution for Your Homelab?
A direct comparison of WireGuard and Tailscale for homelab remote access. Which one to run based on your setup, your patience for configuration, and how often you actually need to get in.
Nginx Proxy Manager vs Caddy vs Traefik: Which Reverse Proxy for Your Homelab?
A direct comparison of the three most common reverse proxies for self-hosting. Which one to pick based on how you actually run your homelab.
Homelab Security Basics: What You Need to Lock Down
The practical security checklist for homelabs: what actually matters, what's overkill, and what most guides skip entirely.
Why Your Homelab Needs a Reverse Proxy
A reverse proxy puts your services behind a single entry point with HTTPS and clean domain names. Here's why it matters and how to set one up with Nginx Proxy Manager or Caddy.
Home Network Setup for Homelabs: VLANs Without the Headache
Why VLANs matter for homelab security, the difference between managed and unmanaged switches, and how to set up basic network segmentation.
Setting Up a VPN Kill Switch for Your Homelab
A VPN kill switch blocks all traffic if the VPN connection drops. Here's how to implement one for specific containers or your whole server, and why it matters.
Don't Use .local for Your Homelab Domain
Using .local for your homelab DNS zone conflicts with mDNS (Bonjour/Avahi). Here's why resolution breaks intermittently and what to use instead.
Why I Don't Open Ports on My Router Anymore
Port forwarding used to be the standard way to access homelab services remotely. Here's why I stopped doing it and what I run instead.