Skip to content

Tag: docker

All the articles with the tag "docker".

AppFlowy vs Notion: Self-Host Your Notes

AppFlowy vs Notion: Self-Host Your Notes

AppFlowy vs Notion in 2026: the self-host server is now proprietary and the free tier is one browser seat. Licensing, Docker Compose setup, and real prices.

Prompt Injection vs Your Coding Agent

Prompt Injection vs Your Coding Agent

Prompt-level defenses against injection are probabilistic and lose to a patient attacker. Here's the capability-level design that holds, with working configs.

Stop Handing CI Jobs Root on Your Box

Stop Handing CI Jobs Root on Your Box

Self-hosted GitHub Actions, Forgejo, and GitLab runners can hand a forked pull request root on your box. Here is the isolation ladder that actually stops it.

RabbitMQ vs NATS: Pick a Message Bus

RabbitMQ vs NATS: Pick a Message Bus

RabbitMQ vs NATS for a self-hosted app: routing, delivery guarantees, Docker Compose setups, Python code, and which broker to run for background jobs.

Docker MCP Toolkit: Trust the Sandbox?

Docker MCP Toolkit: Trust the Sandbox?

Docker MCP Toolkit sandboxes AI agent tools in containers. Here's exactly what that isolation stops, where it silently breaks, and how to configure it safely.

Komodo MCP vs the Docker Socket

Komodo MCP vs the Docker Socket

Komodo's community MCP server beats mounting the Docker socket or handing an AI agent SSH: scoped auth, per-tool RBAC, and confirmation before deletes.

Tinyauth vs Pocket ID vs Authelia

Tinyauth vs Pocket ID vs Authelia

Tinyauth vs Pocket ID vs Authelia compared for home labs: setup cost, forward-auth support, real OIDC, passkeys, 2FA, and when to move up to Authentik.

Pterodactyl vs Pelican vs Crafty

Pterodactyl vs Pelican vs Crafty

Pterodactyl, Pelican, and Crafty Controller compared on container isolation, install steps, and RAM footprint, with verified versions and a real pick.

20 Unix Users, 20 Rootless Dockers

20 Unix Users, 20 Rootless Dockers

One host, 20 Unix users, 20 rootless Docker daemons. The isolation model that beats a single shared daemon, plus the trade-offs nobody tells you about.

Self-Hosted OSRM in Docker

Self-Hosted OSRM in Docker

Run OSRM in Docker with a regional OSM extract, compile a routing profile, and get your own /route endpoint live. Profile compilation gotchas included.

Nominatim: Self-Hosted Geocoding

Nominatim: Self-Hosted Geocoding

Stop paying the geocoding tax. Self-host Nominatim on Docker with an OpenStreetMap regional extract and own your address lookups end to end.