Self-Hosting

How to run your own servers, Docker stacks, and self-hosted services without losing weekends to config files.

Tailscale mesh VPN with WireGuard: 100 devices, zero config

Build a private WireGuard mesh VPN with Tailscale. Install, authenticate, and connect devices with zero-config networking across NAT and firewalls.

Linux file recovery: extundelete, PhotoRec, Btrfs snapshots

Recover deleted files on Linux: extundelete and debugfs for ext4, btrfs restore and snapshots for Btrfs, and PhotoRec as a filesystem-agnostic tool.

Migrate to Wayland without reinstalling Linux

Migrate from X11 to Wayland on an existing Linux install without reinstalling. Covers GPU drivers, compositors, Xwayland, session setup, and tool swaps.

Docker image hardening: minimal bases, non-root, and Trivy scans

A practical Docker image security checklist: minimal bases, non-root users, read-only filesystems, capability dropping, pinning, and scanning.

tmux 3.6a: scripted sessions, plugins, and persistence

Master scripted tmux sessions with plugins and persistence. Automate layouts, survive reboots, and recreate complex terminal environments instantly.

Production Docker with Traefik v3.6: auto TLS, 30K RPS

Run Traefik v3 as a reverse proxy with Docker Compose. Automatic Let's Encrypt certificates, label-based routing, and security middleware on one VPS.