MeshCentral with Cloudflare Tunnel — Deploy, Enroll, and Verify
A practical Linux deployment with a loopback-only origin, private administrator bootstrap, persistent data, and separate checks for the browser, agents, and remote sessions.
Posts
Intel AMT Serial over LAN on Proxmox: Setup, Login, and Disconnect
A practical Intel AMT SOL login setup for a Proxmox host, with device discovery, a systemd serial getty, troubleshooting, rollback, and a clear explanation of disconnecting.
ThinkPad T420 with Arch Linux and i3 — A Practical Admin Laptop
My T420 became a useful administration laptop after an SSD and 8 GB RAM upgrade. Here is a reproducible starting point for a small Arch/i3 desktop, plus the hardware issues worth checking.
PowerShell Modules Filled My OneDrive — How to Clean Up Safely
A practical cleanup workflow for PowerShell modules in a OneDrive-backed Documents folder, with verification, rollback, and explicit destinations for future downloads.
Homelab 10GbE Networking — Hardware, MikroTik Switch Setup, and Performance Tuning
Planning a 10GbE upgrade for your homelab? From MikroTik CRS switches and SFP+ cabling to Proxmox NIC tuning, this guide covers the hardware decisions, configs, and performance optimizations you need.
Docusaurus for Homelab Documentation — Setup and Docker Deployment
One guide to a Git-based homelab documentation site: project setup, useful runbooks, static builds, Docker hosting, and optional search and versioning.
Linux TCP BBR Congestion Control — Enable on Proxmox, Docker, and LXC
Enable TCP BBR congestion control on your Proxmox host, Docker containers, and LXC guests. Step-by-step sysctl config, kernel module loading, and iperf3 benchmarks showing real-world throughput gains for homelab and remote streaming.
Linux Cgroups v2 Guide — Docker Container Resource Management
Learn Linux cgroups v2 for Docker resource control: memory.max and memory.hard limits, CPU quotas, I/O throttling, PSI monitoring, and compose deploy.resources configs. Includes real container debugging and OOM prevention.
Cilium CNI for K3s — eBPF Networking in the Homelab
Replace K3s default Flannel with Cilium CNI for accelerated eBPF networking, remove kube-proxy, gain Hubble observability, and enforce identity-based network policies in a lightweight homelab cluster.
Proxmox Firewall Security Hardening — IPSets, Rules, Cluster Firewall
Harden Proxmox VE with datacenter firewalls, dynamic IPSets for trusted management networks, cluster-wide security, fail2ban for web UI brute-force protection, and firewall log auditing.