Security

Open-source security tools for self-hosters — reverse proxies, VPNs, firewalls, network monitoring, and privacy-first alternatives to commercial security software. Harden your homelab without vendor lock-in.

16 min read

Homelab Security Hardening: From Exposure Inventory to Repeatable Workflow

A practical end-to-end guide to auditing, containing, scanning, and hardening a self-hosted Docker homelab.

Self-Hosting Docker Security
10 min read

How to Upgrade Nextcloud to Avoid the PHP2Shell Vulnerability

How to upgrade Nextcloud 32 to 35 with Docker and get the patched PHP runtime that fixes PHP2Shell, without losing data.

Self-Hosting Docker Security
Self-hosted Warpgate bastion controlling access to internal services
8 min read

Warpgate - A Self-Hosted Bastion for SSH, Databases, Kubernetes, RDP and VNC

A practical review of Warpgate, the Rust bastion that gives users precise access to SSH, HTTPS, Kubernetes, MySQL, …

Self-Hosting Docker Security
Security checklist for PHP patching and TLS certificate verification
12 min read

The PHP Drama and the SSL Certificate Week

What happened with the emergency PHP2Shell fixes and the eMudhra TLS certificate incident, plus a practical checklist …

Security PHP TLS
Web-Check on-demand OSINT tool for exploring website data
12 min read

Self-Hosting Web-Check - On-Demand Website Intelligence

Run Web-Check with Docker to inspect website security, DNS, TLS, email, SEO, privacy, and server exposure.

Self-Hosting Docker Security
LanGuard dashboard showing LAN device inventory and network status
9 min read

LanGuard - Self-Hosted LAN Visibility

A practical look at LanGuard, a self-hosted LAN discovery and device monitoring dashboard with Docker deployment, a …

Self-Hosting Docker Networking
Technitium DNS Server self-hosted DNS with DoH DoT DoQ and ad blocking
11 min read

Technitium DNS Server - Self-Host DNS with Ad Blocking and Encrypted Queries

Technitium DNS Server is a self-hosted DNS with ad blocking, DoH/DoT/DoQ, DNSSEC, DHCP, clustering and a full web …

Self-Hosting Docker Security
3 min read

DNS and Domain Ops

A curated map of DNS, domain, HTTPS, routing, tunnel, and local resolver guides across Foss Engineer.

Networking DNS Security
1 min read

Impala

Rust terminal UI for managing Linux Wi-Fi through iwd, with station mode, access point mode, hidden networks, WPA …

Dev Security
Impala terminal Wi-Fi manager showing wireless networks on a Linux laptop
13 min read

Impala - TUI Wi-Fi Manager for Linux

Impala is a Rust TUI for managing Linux Wi-Fi with iwd, station mode, AP mode, QR sharing, and themes.

Dev Security
Feedback