Authentik vs Authelia: SSO for Your Self-Hosted Stack
Updated:
Authelia is a bouncer. Authentik is the whole security desk. Pick the right self-hosted SSO for your home lab — with working configs, gotchas, and a migration path.
Tag: docker
All the articles with the tag "docker".
Blog Comments: Self-Host or SaaS?
Disqus is a tracker farm wearing a comment box costume. Here's every real alternative — self-hosted and SaaS — and which one actually fits your blog.
Hoist: Label-Driven Docker Updates
Per-container control over Docker image updates with labels. Auto-update or notify via Discord, Slack, ntfy—no sidecar needed.
Immich Hardware Acceleration: Stop Cooking Your CPU
Your Immich server is at 100% CPU again. Here's how to wire up QSV, VAAPI, NVENC, and the ML container to a GPU so thumbnails and face recognition finish before next Tuesday.
Distroless Images: When Minimal Goes Too Far
Distroless containers are tiny, secure, and loved by security teams — until you need to debug one at 2 AM. Here's when Google distroless actually pays off vs when it's just container hipster points.
OpenCanary: Honeypots for Your Home Lab
A honeypot sits quietly on your network pretending to be something valuable. When someone touches it, you know you have an intruder. OpenCanary makes this dead simple.
Colima vs OrbStack vs Docker Desktop on Mac
Docker Desktop got expensive and RAM-hungry. Colima is the lean alternative. OrbStack is the one everyone's actually using now. Here's the honest breakdown for Mac developers.
Container Security: Scan and Sign Your Images Like You Mean It
Pulling unscanned images onto your server is a gamble. Trivy finds the CVEs. Cosign proves the image hasn't been swapped out. Here's how to add both to your workflow.
Falco: Catch Container Attacks at Runtime
Falco watches every syscall your containers make and screams when something sketchy happens. Like someone exec'ing a shell inside your nginx container at 3am.
Loki vs ELK: Centralized Logging Without the RAM Tax
ELK does everything and wants all your memory. Loki does logging the Prometheus way — label indexes, not content — and runs on a fraction of the resources. Here's the honest comparison.
Cloudflare Tunnels: The Zero-Port-Forward Guide to Exposing Your Services
No port forwarding, no DDNS drama. Cloudflare Tunnels advanced config: multiple services, Access policies, origin TLS, and what Cloudflare can actually see.
Immich vs PhotoPrism: Escape Google Photos Without Losing Your Mind
Immich vs PhotoPrism in 2026: which self-hosted photo library beats Google Photos without making you regret the migration. Mobile app, ML, and gotchas.