homelab online

Self-hosting from
the trenches

Battle-tested guides for Docker homelabs. Written after hours of debugging so you don't have to.

Read the guides ↓ See my stack

25+

Containers running

Guides published

99.5%

Uptime target

∞

Hours debugging

Guides

Learn from my mistakes

Every gotcha, every silent failure, every config that took three attempts — documented.

Pangolin + CrowdSec + Authentik

→

Complete reverse proxy stack with Web Application Firewall and Single Sign-On. From DNS records to OIDC role mapping.

Traefik v3 WireGuard WAF SSO RBAC

The Complete Mediastack

→

Fully automated media server — movies, TV, music, and subtitles. VPN-protected downloads, hardlinks, quality profiles, and request management.

Gluetun VPN Sonarr Radarr Plex *arr suite

~/ — the homelab

$ docker ps --format "table {{.Names}}\t{{.Status}}" | head -12 NAMES STATUS pangolin Up 14 days (healthy) traefik Up 14 days gerbil Up 14 days crowdsec Up 14 days authentik-server Up 12 days gluetun Up 10 days (healthy) sonarr Up 10 days radarr Up 10 days plex Up 22 days grafana Up 18 days wazuh-manager Up 9 days $ docker ps -q | wc -l 28 $ uptime up 47 days, 3:22, load average: 1.42, 1.38, 1.35

Infrastructure

What's running

The full stack, split across Dockge-managed compose files.

Reverse Proxy

Pangolin + Gerbil + Traefik v3 + CrowdSec WAF + Newt tunnel

5 containers

Identity

Authentik server + worker + PostgreSQL + Redis for SSO/OIDC

4 containers

Media

Gluetun VPN + qBittorrent + Sonarr + Radarr + Lidarr + Prowlarr + Bazarr + extras

15+ containers

Monitoring

Prometheus + Grafana + Loki + Promtail + Alertmanager

5 containers

Security

Wazuh SIEM + Suricata IDS on host network