Field Notes / Category

AI & Automation

Practical agents, MCP tools, routines, monitoring, and safe automation for self-hosted systems.

Archive

2 articles
Diagram showing a protected host secret file mounted into database and application services but denied to an unrelated worker.SECURITY
AI & Automation

Move Docker Passwords Out of Environment Variables with Compose Secrets

Move one Docker Compose password into a file-backed secret, limit service access, test allowed and denied paths, and keep a safe rollback.

Read article
A private AI server accepts a violet local route while an external route stops at a glowing network boundary.SECURITY
AI & Automation

Run a Private Ollama API with Docker and Prove It Is Not Public

Deploy a pinned Ollama container with host-only and container-only access, then prove that LAN and internet paths stay closed.

Read article Docker