Run Trivy on all your homelab containers. I found 312 critical CVEs across 47 containers — here is the fix strategy and automated pipeline.
Category: Homelab
Homelab is the category on orthogonal.info dedicated to building, operating, and securing home server infrastructure. From NAS configuration and network segmentation to Docker-based self-hosting and power management, this collection documents the real decisions and trade-offs involved in running production-grade services at home. If you believe your home network deserves the same engineering rigor as a cloud deployment, you are in the right place.
With 16 hands-on posts, Homelab captures lessons learned from building and maintaining a serious home infrastructure — complete with the mistakes, workarounds, and victories that vendor documentation never mentions.
Key Topics Covered
TrueNAS and network-attached storage — Setting up TrueNAS SCALE and TrueNAS CORE, ZFS pool design, snapshot and replication strategies, and SMB/NFS share configuration for mixed-OS environments.
Self-hosting services — Deploying and maintaining services like Nextcloud, Immich, Jellyfin, Home Assistant, Vaultwarden, and Pi-hole with Docker Compose on home servers.
Network segmentation and firewalls — Designing VLAN architectures with OPNsense or pfSense, isolating IoT devices, configuring WireGuard for secure remote access, and implementing DNS-based ad blocking.
Hardware selection and builds — Choosing server hardware, evaluating mini PCs vs. rack-mount servers, NIC and HBA selection, and balancing performance with power consumption and noise levels.
UPS and power management — Configuring NUT (Network UPS Tools) for graceful shutdowns, monitoring battery health, and designing power-resilient home infrastructure.
Backup and disaster recovery — Implementing 3-2-1 backup strategies with ZFS replication, restic, Borg, and off-site cloud targets, plus documented recovery procedures.
Monitoring and automation — Running Uptime Kuma, Grafana, and Prometheus at home, plus scripting automated maintenance tasks with cron, systemd timers, and Ansible.
Who This Content Is For
This category is for homelab enthusiasts, self-hosting advocates, system administrators who tinker at home, and privacy-conscious engineers who want to own their data and services. Whether you are starting with a single Raspberry Pi or running a multi-node server rack, the guides scale to your ambition. The content assumes basic Linux familiarity and a willingness to learn by doing — no enterprise budget required.
What You Will Learn
By exploring the Homelab category, you will learn how to plan, build, and maintain home infrastructure that is reliable, secure, and genuinely useful. You will understand how to design storage pools that protect your data, segment your network to contain IoT risks, deploy self-hosted services that rival their cloud counterparts, and monitor everything with open-source tools. Each guide shares real configurations, hardware recommendations based on actual use, and honest assessments of what works and what does not.
Check out the posts below to start building your ideal homelab.
-
Optimize Plex on TrueNAS Scale: Tips & Techniques
TL;DR: TrueNAS Scale is a powerful platform for running Plex, but optimizing performance requires careful resource allocation, advanced configuration, and proactive troubleshooting. This guide covers everything from setting up secure permissions to fine-tuning your Plex server for smooth playback, even under heavy load. Quick Answer: Use TrueNAS Scale’s containerized apps feature to deploy Plex securely,…
-
Secure Self-Hosted LLM: Enterprise Practices at Home
TL;DR: Self-hosting large language models (LLMs) offers privacy and control but comes with security challenges. By scaling down enterprise-grade practices like zero trust, RBAC, and encryption, you can secure your homelab deployment. This guide covers setup, monitoring, and future-proofing your self-hosted LLM environment. Quick Answer: To securely self-host LLMs, implement zero-trust principles, encrypt sensitive data,…
-
Network Segmentation for a Secure Homelab
TL;DR: Network segmentation is a critical security practice that isolates devices and services into distinct zones to reduce attack surfaces and improve control. In this article, we’ll explore how to adapt enterprise-grade segmentation techniques for homelabs, covering VLANs, subnets, and tools like pfSense and Ubiquiti. By the end, you’ll have a blueprint for a secure,…
-
Building a Home Server: The Budget Networking Gear Guide
Some links in this post are affiliate links. I only recommend products I personally use or have thoroughly researched. TL;DR: Your homelab is only as fast as your network. A managed switch, proper Cat6 cabling, and a capable router matter more than the server hardware itself. Budget around $150–300 for networking gear that won’t bottleneck…
-
Docker CVE-2026-34040: 1MB Request Bypasses AuthZ Plugin
CVE-2026-34040 lets attackers bypass every Docker AuthZ plugin with a single 1MB request. Here's what's broken, how to check if you're vulnerable, and what I changed on my own homelab to fix it.
-
TrueNAS Setup Guide: Enterprise Security at Home
TL;DR: TrueNAS is a powerful storage solution for homelabs, offering enterprise-grade features like ZFS, encryption, and snapshots. This guide walks you through setting up TrueNAS securely, from hardware selection to implementing firewalls and VPNs. By following these steps, you’ll ensure your data is safe, accessible, and future-proof. Quick Answer: TrueNAS is the best choice for…
-
OpenClaw Setup: Zero to Autonomous AI Mastery
Complete guide to setting up an autonomous OpenClaw AI agent. Includes 5 SOUL.md templates, 30 cron patterns, memory protocol guide, and revenue automation blueprint.
-
Secure TrueNAS Plex Setup for Your Homelab
Learn how to set up Plex on TrueNAS with enterprise-grade security practices tailored for home use. Protect your data while enjoying smooth media streaming. Quick Answer: To securely run Plex on TrueNAS, create a dedicated jail or VM with isolated networking, mount your media datasets read-only, configure a reverse proxy with SSL termination, and restrict…
-
Stop Ngrok Tunnels: Enterprise Security at Home
Learn how to securely stop Ngrok tunnels using enterprise-grade practices scaled down for homelab environments. Protect your home network with these practical tips. Quick Answer: Instead of exposing your homelab services through ngrok tunnels, use Cloudflare Tunnels with Zero Trust policies or WireGuard/Tailscale VPN for enterprise-grade security. These alternatives provide encrypted access without opening any…