security
The password rotation that quietly broke my deploys
I rotated a leaked credential fast and verified it properly. Two pipelines were still using it — including the one that publishes this site — and neither said a word for days.
Wazuh: bringing a SOC home
How an open-source SIEM gives a homelab the same threat-detection muscle that enterprise security teams rely on.
Authentik: one login for the entire homelab
How a self-hosted identity provider replaces a dozen separate passwords and brings enterprise-grade SSO to your rack.
HashiCorp Vault: where my secrets actually live
A plain-language guide to running HashiCorp Vault in a homelab — what it does, why it matters, and whether you actually need it.
Cloudflare Tunnel: exposing a service without opening a port
How to publish a homelab service to the internet without touching your router or exposing your IP address.
OPNsense: turning a PC into a serious firewall
OPNsense brings enterprise-grade routing, firewalling, and VLAN segmentation to commodity hardware — here's why it belongs in a homelab.