$ ls ./guides/

Homelab Guides

Quick, actionable guides for every homelab operator. Each one pairs with a YouTube Short so you can watch or read — your call.

DNSBeginner

Stop Using Default DNS

Your ISP is watching every domain you resolve. Take it back with your own DNS server.

12 min readRead Guide →
SecurityBeginner

Lock Down SSH in 30 Seconds

If root can SSH into your box with a password, you're one brute-force away from owned.

12 min readRead Guide →
SecurityBeginner

Find Every Open Port on Your Network

You don't know what's exposed until you scan it. One command shows everything.

10 min readRead Guide →
NetworkingIntermediate

Your Homelab Needs a Reverse Proxy

Stop memorizing IP:port combos. Caddy gives you HTTPS and clean URLs in 3 lines.

14 min readRead Guide →
SecurityIntermediate

Run Your Own Password Manager

LastPass got breached. Again. Self-host Vaultwarden and own your vault.

14 min readRead Guide →
SecurityBeginner

Disable IPv6 If You're Not Using It

IPv6 is enabled by default and you're probably not firewalling it. One sysctl fixes that.

8 min readRead Guide →
InfrastructureBeginner

Set Up Automatic Updates the Right Way

Unpatched boxes get owned. Set it and forget it with unattended-upgrades.

10 min readRead Guide →
InfrastructureBeginner

Monitor Your Homelab for Free

You won't know it's down until you need it. Uptime Kuma fixes that in 10 seconds.

11 min readRead Guide →
SecurityIntermediate

Harden Every VM With sysctl

Three kernel tweaks that every homelab VM should have. Copy, paste, done.

10 min readRead Guide →
InfrastructureIntermediate

You're Not Backing Up Your Containers

docker compose down + dead disk = everything gone. A cron job fixes that tonight.

12 min readRead Guide →