SoftwareNetworks
Reconya: Network Discovery, Inventory and Native Setup
Use Reconya to understand your homelab inventory, with current native setup, discovery limits, privacy options and practical verification.
Topic Tag78 Articles
#Network Security
Firewalls, intrusion detection, WPA3, encrypted DNS, reverse proxies, and defending your home network.
SecuritySoftware
Secure Your Connection To Your Homelab with WireGuard
Understand WireGuard peer keys and routing for homelab access, then plan LAN forwarding, DNS, full tunnels and the trade-off between self-hosting and Tailscale.
SoftwareHomelab
BillionMail in the Homelab: Mail Servers, Campaigns and SMTP Relays
Explore BillionMail mailboxes and campaigns, residential delivery limits, sender authentication, SMTP relays and the real maintenance costs of self-hosted email.
SecuritySoftware
ZenArmor in the Homelab: Is This Paid NGFW Worth It for Enthusiasts?
Is Zenarmor worth paying for in a homelab? Compare its Free Edition and subscriptions with firewall packages, and check reporting, TLS inspection, NIC compatibility and maintenance.
SecuritySoftware
Secure Your Homelab with Fail2ban
Use Fail2ban to reduce repeated login attempts in your homelab, with a small SSH jail, log and firewall checks, recovery steps and container/proxy considerations.
SoftwareNetworks
pfSense: The Open-Source Guardian of Your Homelab Network
Explore pfSense CE and Plus, firewall and VPN capabilities, and the hardware, virtualization and recovery checks that matter for a homelab gateway.
SecuritySoftware
Bolster Your Homelab Defenses: An Introduction to CrowdSec
Learn how CrowdSec combines local log behavior analysis with a global crowd-sourced threat intelligence blocklist to protect your Proxmox and Docker homelab from attacks.
SecuritySoftware
Taming the Homelab Hydra: Secure Your Self-Hosted Services with Authentik
Understand Authentik SSO, MFA and proxy integration, choose the right application provider, and plan deployment, access tests and recovery for a self-hosted homelab.
SecurityNetworks
Your Internet Secrets: Why Encrypted DNS Matters (and Why You Should Care)
Understand what DoH, DoT and DoQ protect, which resolver receives your queries, and how to preserve local DNS and verify the encrypted connection.
HomelabSoftware
Build Your Homelab: 42 - Configure Your Turnkey Nextcloud
Now that we have successfully installed a VM with Turnkey Linux's Nextcloud , we can get it set up. While the helper scripts simplified the process, the installation itself presented...
HomelabSoftware
Build Your Homelab: 40 - Configure Your Self-Hosted Immich
Now that Immich is running in a separate LXC with a load of space, let's start using it by setting up a reverse proxy and access rules.
HomelabSoftware
Build Your Homelab: 38 – Access Plant-it From The Web
Let's add a reverse proxy so that we can access Plant-it when we are not connected to our home network and secure it with SSL
SoftwareNetworks
Is OPNsense Really That Good in Our Homelabs?
Does a homelab with Tailscale/Headscale still need OPNsense? Compare gateway and overlay roles, segmentation, virtualisation, wireless management and recovery work.
SoftwareSecurity
Host Your Own Password Manager With Vaultwarden
Vaultwarden hosting, current Bitwarden cost context, a private first-account setup and practical client, HTTPS, backup and recovery checks.
HomelabNetworks
Build Your Homelab: 34 - Access Local Network Devices via Tailscale
The last part of our Headscale installation - getting exit nodes set up and routes activated to be able to access network resources
HomelabNetworks
Build Your Homelab: 33 – Connect To Headscale From Android
Follow the Android Headscale registration screenshots using the techdecode example, with separate compatibility notes and peer, subnet and exit-node checks.
HomelabNetworks
Build Your Homelab: 32 – Configuring Headscale
Once Headscale is installed, there is quite a bit of intricate setup and config to complete before we will be able to connect to our VPN. Let's get it sorted and set up so we can start using our VPN.
HomelabNetworks
Build Your Homelab: 31 - Host Your Own Tailscale VPN In Proxmox With Headscale
Install Headscale in Proxmox using the demonstrated helper workflow, with separate explanations of coordination, reachability, policy and recovery.
HomelabNetworks
Build Your Homelab: 30 - Custom Domain Usage and Setup
Having a domain name for our homelab will enable us to give a unique subdomain address for each of our services that we want to expose to the world wide web. We can also secure this with SSL certificates.
HomelabNetworks
Build Your Homelab: 29 - Access Local-only services via VPN
We need to take a step back to explain how to access our local-only services via the secure channel provided by a VPN. This is quick, easy and one of the most secure ways to access our home network services.
HomelabSecurity
Build Your Homelab: 26 – Adding SSL for ntfy
Follow the ntfy HTTPS screenshots, update browser and phone subscriptions, and optionally configure Web Push, iOS delivery and renewal checks.
HomelabSecurity
Build Your Homelab: 25 – Securing ntfy
Seeing as our ntfy is open to all guest users to send and receive, we need to lock it down behind a username and password. Let's get the default changed and some credentials set up.
HomelabSoftware
Build Your Homelab: 24 – ntfy From Outside Your Home Network
Follow the demonstrated NGINX and HTTP notification test, then continue to authentication and HTTPS, with optional proxy tuning and troubleshooting.
HomelabSecurity
Build Your Homelab: 12 – SSL Certificates with Let's Encrypt
We can finally start securing our sites with the help of Let's Encrypt free certificates. In this article we will generate a certificate for our WordPress site after getting our NGINX VM ready to install certificates
HomelabNetworks
Build Your Homelab: 11 - NGINX On Our VM
Now that we have a dedicated VM up and running, it is time for us to install and set up NGINX on the newly created VM. This adds extra isolation and increases security.
SecurityHomelab
Securing Your Home Lab: How Free SSL Certificates from Let's Encrypt Keep Your Self-Hosted Services Safe
Plan trusted HTTPS for self-hosted services with Let’s Encrypt, suitable validation, protected DNS credentials, certificate renewal and deployment checks.
HomelabNetworks
Build Your Homelab: 9 – NGINX From Outside The Home Network
Now that we can access our network from the outside, we configure an NGINX reverse proxy to safely route external traffic to our internal WordPress server, laying the foundation for a secure, accessible online presence.
HomelabNetworks
Build Your Homelab: 8 – Access When Not At Home
Connect a homelab service to a domain with Dynamic DNS, understand port forwarding, and plan safe access when your public IP address changes.
NetworksHomelab
How IPv6 Can Impact Your Home Network: The Pros and Cons
Diagnose local DNS on a dual-stack home network: resolver advertisements, private names, IPv6 records and practical configuration trade-offs.
NetworksSecurity
Why Your .local Domain Might Not Work, Even with a Personal DNS Server
Troubleshoot .local and mDNS conflicts, choose an internal DNS namespace, and understand the separate scope of Windows LLMNR policy and registry steps.
HomelabNetworks
Build Your Homelab: 6 - Reverse Proxy with NGINX
Now that we have a DNS server, what about accessing our Proxmox server? Currently we still have to to 192.168.1.2:8006 to access Proxmox (your IP address may be different). How about we change that to something easier to remember, like proxmox.local?
HomelabNetworks
Build Your Homelab: 5 – Your Own Personal DNS
One of the first (if not the first) apps you can self host (run in your homelab) will probably be your own personal DNS server. Today we will look at running our own DNS server and how to set it up for the entire network
SecurityNetworks
Understanding Evil Twin Wi-Fi: Protect Yourself From Unsafe Hotspots
Understand evil twin hotspots, the limits of PMF and HTTPS, and how to check a self-hosted VPN for full-tunnel routing, DNS and connection failures.
SoftwareNetworks
A Beginner’s Guide to Technitium DNS for Your Home Network
A beginner’s guide to Technitium DNS: local naming, filtering, recursive and encrypted forwarding, a private Docker setup, client testing and dependable backups.
SoftwareHomelab
Monitoring Your Home Lab with Uptime Kuma: A Beginner’s Guide
Monitor homelab service availability with Uptime Kuma, choose meaningful checks, verify alerts and plan a persistent Docker installation and safe upgrades.
SecuritySoftware
Pi.Alert Explained: Network Inventory, Alerts and Setup Checks
Use Pi.Alert to observe devices and availability changes, understand its discovery limits, and configure the right project version and alerts.
SecuritySoftware
Keep a Watchful Eye on Your Home Network with NetAlert X
Use NetAlertX for device discovery and presence alerts, with current Docker setup, VLAN visibility checks, private-MAC troubleshooting and a practical notification workflow.
NetworksHomelab
Nagios: Keeping Your Home Network Running Smoothly
Use Nagios Core for practical home-network checks, with clearer alert behaviour, a private container example and configuration verification.
HomelabSoftware
QuickDrop: Temporary File Sharing and a Private Docker Setup
Run the actual QuickDrop service with persistent storage, separate access controls and recipient-side checks. Understand encryption, expiry and recovery limits.
SecurityNetworks
Understanding Honeypots: When They Help a Home Network
Compare internet-facing research honeypots with internal detection canaries, and learn how to plan isolation, test alerts and investigate unexpected activity.
SecurityNetworks
How to Use a Raspberry Pi as a Hardware Firewall for Your Home Network
Plan a Raspberry Pi OpenWrt gateway with correct image and LAN setup, separate WAN/LAN paths, DNS and IPv6 checks, staged policy tests and recoverable upgrades.
SecurityNetworks
Hardware vs Software Firewalls: Gateway and Endpoint Protection Compared
Compare gateway appliances and host firewalls by traffic path, rule capabilities, cost and recovery needs, with practical Windows and container exposure checks.
NetworksHomelab
Watchtower Docker Updates: Compatibility, Checks and Recovery
Understand Watchtower’s archived status, check Docker compatibility, select containers deliberately and plan verification and recovery before updates.
NetworksSecurity
UPnP Explained: Device Discovery, Port Mapping and Home Network Tradeoffs
Understand UPnP discovery versus router port mapping, security tradeoffs, scoped firewall controls and practical checks for your home network.
NetworksSecurity
Running Headscale at Home: A Beginner’s Guide
Plan a reachable Headscale coordinator, use a version-matched configuration and private container setup, and verify client registration, policy, DNS and recovery.
NetworksHomelab
Running OPNsense on a Raspberry Pi as a Home Router
Explore Raspberry Pi OPNsense community builds, official support limits, compatible network interfaces and a reversible lab workflow before considering a home-router deployment.
NetworksSoftware
YunoHost: Install, Verify and Maintain a Home Server
Choose a supported YunoHost installation, configure domains and user access, understand app-specific SSO, and test backups before depending on the service.
SecuritySoftware
BunkerWeb: Protecting Self-Hosted Web Applications
Deploy BunkerWeb’s AIO reverse proxy for self-hosted web apps, with realistic WAF limits, client-IP trust, certificate setup, testing and recovery.
SoftwareNetworks
OPNsense: More Control for Your Home Network
Explore OPNsense firewall rules, VPNs, multi-WAN, Suricata and traffic shaping, with practical hardware, maintenance and recovery checks for a home network.
NetworksHomelab
What Is Network Monitoring and Should You Use It at Home?
The original recommendation on home network monitoring, plus practical ways to choose a targeted availability check and interpret device discovery, traffic and privacy limits.
SoftwareNetworks
Running a DHCP Server at Home: How and Why
Plan a home DHCP server with maintained software, a clear address pool, lease-aware cutover, client verification and a practical rollback procedure.
SoftwareNetworks
Running Your Own DNS at Home: A Guide
Plan dependable home DNS with local names, filtering, forwarding or recursion, consistent redundant resolvers and verified IPv4/IPv6 client settings.
SecurityNetworks
Secure Your Home Network: Eight Practical Steps and Verification Checks
Improve home-router, Wi-Fi, account and IoT security with eight practical steps, correct encrypted-DNS setup and recoverable IPv4/IPv6 isolation checks.
SecurityHomelab
Understanding the Network Security Tool: Bjorn
Understand Bjorn’s active lab-auditing role, documented Pi and Bookworm setup, installer changes, private management access and practical remediation and recovery checks.
NetworksSecurity
Understanding NAT: The Unsung Hero of Your Home Network
Understand NAT address and port mappings, distinguish firewall protection from translation, and troubleshoot double NAT, CGNAT and homelab access.
HomelabSecurity
Accessing Home Assistant Outside Your Home Network
Choose Home Assistant Cloud, a VPN or an HTTPS proxy; check current HTTP settings, precise proxy trust, DDNS, certificates, app access and recovery.
SecurityNetworks
The KRACK Attack On WPA2 - What It Is, How It Works, and How to Protect Yourself
Understand KRACK’s key-reinstallation flaw, why both clients and access points need updates, and why WPA3 does not replace careful implementation and maintenance.
NetworksHomelab
Understanding Reverse Proxy: A Beginner's Guide
A reverse proxy is a server that sits between your website's servers and the internet. It acts as an intermediary, receiving incoming requests and forwarding them to the appropriate server.
NetworksSecurity
IPv4 vs. IPv6: A Deep Dive for Intermediate Users
Compare IPv4 and IPv6 addressing, scopes, DHCP and SLAAC, temporary addresses, dual-stack routing and the firewall checks each protocol needs.
SoftwareHomelab
Running Nextcloud Inside a FreedomBox Machine
Use FreedomBox’s integrated Nextcloud app for a personal cloud, with supported setup, account checks, storage planning and a verified backup and recovery process.
HomelabSoftware
FreedomBox on Raspberry Pi: Your Personal Private Server
Use FreedomBox on a supported Raspberry Pi to manage private home services, with realistic setup, remote access, storage and backup expectations.
SecurityNetworks
What Is SSL/TLS, and Why Should You Care?
Understand modern TLS, HTTPS connection checks, certificate validation and wildcard coverage, plus renewal and configuration basics for your own site.
Software
Firmware: The Unsung Hero of Your Tech Gadgets
Understand firmware, drivers and boot security, then plan exact-model updates, encryption-key recovery and supported repair without relying on unsafe flashing shortcuts.
NetworksSecurity
All About Guest Wi-Fi: Keeping Your Home Network Safe and Sharing the Web
Guest Wi-Fi explained: separate visitor passwords, router and AP isolation settings, safe sharing, and practical checks that guests cannot reach your private devices.
NetworksSecurity
DNS Settings: Resolvers, Privacy and Troubleshooting
Choose and test DNS resolvers, understand encrypted DNS and filtering limits, and keep local names working across routers, browsers, VPNs and IPv6.
NetworksHomelab
Navigating Your Network: Understanding DHCP Servers
Understand DHCPv4 address leases, DORA, configurable renewal timers, reservations and practical checks for a home network.
HardwareHomelab
Pi-hole on Raspberry Pi: Setup, DNS Filtering and Limitations
Set up Pi-hole on a supported Raspberry Pi, verify client DNS, and understand the limits of domain-based ad blocking.
SecurityNetworks
Beware the Middleman: Protecting Yourself from Man-in-the-Middle Attacks
Understand how MITM attacks interact with HTTPS, VPNs and DNS, recognise meaningful warning signs and use practical travel-network, pairing and account-recovery checks.
SecurityNetworks
TP-Link HomeShield Explained: Plans, Parental Controls and Practical Checks
Compare TP-Link HomeShield security and parental-control plans, Router/AP limits, household profiles and report examples before choosing a supported subscription.
HardwareHomelab
Raspberry Pi Connect: Access Your Pi From Anywhere With a Web Browser
Use Raspberry Pi Connect for browser-based desktop or shell access, with accurate OS requirements, account linking, diagnostics and unattended reboot checks.
SecurityNetworks
Firewalls Explained: Traffic Rules, State Tracking and Practical Checks
Learn what a firewall can see and block, how stateful rules and network zones work, and how to check UFW, IPv6 and Docker exposure without losing access.
NetworksSoftware
Revolutionizing Networks: A Guide to Software-Defined Networking (SDN)
Understand SDN control and forwarding, controller/protocol differences, Proxmox zone limits and a practical lab approach for testing network policy.
NetworksSecurity
Subnetting 101: Dividing Your Network for Efficiency and Security
Learn IPv4 masks and CIDR, work through four /26 subnets, and connect address planning to VLANs, routing, firewall rules and meaningful verification.
SecurityNetworks
Keeping Your Wi-Fi Safe: From WPA2 to WPA3
Compare WPA2 vs. WPA3 Wi-Fi security: how Simultaneous Authentication of Equals (SAE / Dragonfly handshake), Protected Management Frames (802.11w), and OWE protect your wireless network.
SecurityNetworks
Should You Use a VPN? A Deep Dive into Virtual Private Networks
Decide whether a VPN fits your privacy or remote-access needs, understand its limits and verify the routes, DNS and applications you actually use.
SecurityNetworks
VPNs Explained: Encryption, Routing, Privacy and Remote Access
Understand what a VPN protects, how full and split tunneling differ, which protocols suit your devices, and how to verify private access without anonymity promises.
NetworksHomelab
Unlocking Your Network: A Beginner's Guide to Port Forwarding
Understand port forwarding, public-IP and CGNAT limits, stable LAN addresses, precise rules, external testing and service-specific security for a home network.
NetworksHomelab
Understanding Dynamic DNS: A Beginner's Guide
Learn how Dynamic DNS updates a changing address, what it cannot fix, and how to verify a provider or securely configure an optional DNS updater.