Secrets management in Docker Compose: .env, SOPS, Bitwarden, and the “good enough” threat model
A pragmatic ladder from “.env and permissions” to SOPS and a vault, plus a threat model that’s realistic for self-hosters...
A pragmatic ladder from “.env and permissions” to SOPS and a vault, plus a threat model that’s realistic for self-hosters...
A practical setup for SSH + web apps, modern nftables/systemd defaults, and a debugging checklist to prove bans actually work...
Make persistence explicit: where data lives, why permissions break, and how to fix it cleanly...
A step-by-step diagnosis playbook: measure IO wait, validate DNS latency, test MTU/path MTU, and confirm the real culprit...
A sizing and layout guide for self-hosters: where your photos actually live, how fast storage grows, and what to back up (and what not to)...
A self-hosted Bitwarden-compatible password manager, set up with safety rails...