Field Notes / Category

Infrastructure & Networking

Secure access, storage, backups, containers, networks, and reliable home-server operations.

Choose Docker Storage by Who Owns the Files

Compare bind mounts and named volumes by host access, container replacement, Compose lifecycle, and recovery—not by which syntax looks simpler.

A failed probe, a stopped process, and an unready dependency need different responses. Understand what Docker and Compose actually automate.

Cache Docker Hub pulls on one Linux host while keeping the registry private to that host and preserving a clear rollback path.

Build a repeatable Restic check cycle, restore into an isolated directory, and preview retention before any destructive maintenance.

Limit homelab SSH by group, tagged host, and local account, require periodic re-authentication, and prove both allowed and denied paths.

Diagnose Docker bind-mount permission errors, align container identity safely, and verify both required writes and protected read-only paths.

Set up Cloudflare Tunnel, identity checks, and a narrow email allowlist without exposing a homelab port.