./topics

NetBird, WireGuard, UniFi and Docker networks: reaching things safely, and finding out why traffic disappears.

• ├── Outbound IPv6 for Docker containers without restarting them
• ├── My NetBird proxy relayed everything because of a Docker hairpin
• ├── I'm fairly sure UniFi threat prevention was eating my traffic
• ├── Upgrading a self-hosted NetBird server without dropping peers
• ├── Splitting one Docker host into network tiers
• ├── Reaching LAN-only services through NetBird
• ├── My NetBird homelab: zero open ports
• └── Your mesh ACL check returned nothing because you asked the wrong firewall

Self-hosted apps behind reverse proxies, and services that look healthy but aren't.

• ├── I edited a Portainer stack's compose file on disk and it stuck
• ├── Monitoring every box with Checkmk over NetBird
• ├── Nexterm logged my reverse proxy instead of the client
• ├── 'npm is not available' except npm is right there on PATH
• ├── Why Traefik 502s your service right after you recreate its container
• └── Your CrowdSec is running, connected and completely blind while running NetBird

Authentik in front of everything, OIDC quirks, and keeping a way in when SSO breaks.

• ├── Logging into Proxmox with Authentik
• ├── Break glass access when your SSO lives behind your VPN
• ├── Authentik as the front door to every app in my homelab
• ├── Two of three group mappings worked which is what made the third so hard to find
• └── Your Authentik login dies on 'not all parts available' and two different bugs produce it

Ansible, Semaphore, systemd and sshd: automation that fails quietly.

• ├── 'Failed to connect to bus' and four other things that break when a service moves to a user unit
• ├── Stop Ansible hanging forever on a host that is "up"
• ├── sshd -t fails with 'Missing privilege separation directory: /run/sshd' and quietly undoes your hardening
• └── Semaphore's per task host limit does nothing and takes the whole fleet with it

Solar, Home Assistant and what the lab actually costs to run.

• ├── My solar gateway went offline every night at 3 AM, and it was a Wi-Fi channel
• ├── A solar gateway firmware update booked 11 MWh of phantom solar
• ├── What the NAS costs to keep spinning
• └── Pricing an always-on homelab load at the rate it actually pays

Proxmox clusters, ZFS layouts and what the backups really cover.

• ├── Getting a single node Proxmox cluster ready for a second site
• ├── How I laid out ZFS pools on a Proxmox host
• └── My Proxmox backups covered less than I thought