SubDepthTopic / Infrastructure / Field Notes
Homelab Field Notes
Hands-on infrastructure, networking, containers, and lessons from systems operated close to the metal.
Tmux + Ghostty: Build a Terminal Workflow You Actually Want to Use
A layered guide to tmux and Ghostty, from first install to floating popups, vim navigation, and a polished dark theme.
How to Run Claude Code, Codex, and Gemini as Containerized Homelab Services
Containerize AI CLI tools with Docker for remote SSH access and OpenAI-compatible APIs via Traefik. Vendor-independent, reproducible.
What Is Traefik and Why It's the Go-To Reverse Proxy for Homelabs
Traefik auto-discovers Docker services, handles TLS, and routes traffic without manual config rewrites. Here is why homelabbers pick it.
Hardening Traefik with CrowdSec forwardAuth in a Homelab Reverse-Proxy Stack
Practical homelab guide to wire Traefik forwardAuth with CrowdSec, validate it, and handle the security tradeoffs before production.
Secure Remote Docker Deployments with Proton Pass CLI, Docker Contexts, and SSH
Idempotent remote Docker deploys over SSH with Proton Pass CLI secrets, including the security tradeoffs and mitigations that actually matter.
Pi-hole + Unbound Behind Traefik with a Clean /admin Redirect
How this homelab publishes Pi-hole admin via Traefik while keeping DNS local, with practical hardening steps for the risky defaults.
Running Paperless-ngx Behind Traefik with Internal Network Segmentation (Redis + Postgres)
A homelab-backed Paperless-ngx + Traefik deployment with segmented Redis/Postgres networks, concrete checks, and security hardening lessons.
Setting Up a Docker Swarm AI Agent Cluster for Security Research
Build AI agent lab on Raspberry Pi with Docker Swarm: encrypted networks, HMAC auth, and security monitoring. Production-grade patterns on $600 hardware.