Docker

Use Docker IPvlan when a service needs LAN presence but shared MAC behavior and a deliberate host-reachability test make bridge or macvlan a poor fit.

Use Docker macvlan when a service needs its own LAN identity, while planning host reachability, parent interfaces, and safer alternatives.

A Docker documentation-based guide to bounded json-file retention, Compose overrides, and verifying that log growth cannot consume the host disk.

Set up rootless Docker for a homelab, understand the low-port and privilege tradeoffs, and decide when the extra isolation is worth the effort.

Learn how Docker health checks really work, how to pair them with Compose startup ordering, and how to pick probes that reflect service readiness instead of process uptime.

Use Docker Compose secrets, BuildKit secrets, and encrypted files to keep passwords and tokens out of compose files, screenshots, and Git history.

Use Docker to deploy WireGuard for homelab remote access with clear UDP port-forwarding requirements, safer UI exposure choices, and client or DNS checks that confirm the tunnel really works.

Fix Docker proxy issues by separating daemon proxy settings, build and client defaults, and container egress rules so pulls, builds, and private-network traffic each use the right path.

Harden Docker in a homelab by tightening the Linux host, limiting socket exposure, reducing published ports, running containers with less privilege, and keeping image hygiene reviewable.

Deploy Nginx Proxy Manager on Docker with a shared app network, working public DNS, ports 80 and 443 for certificate issuance, and one test app before expanding.

Set up Pi-hole on Docker with a simple Compose stack, fix port 53 conflicts, point test clients at the right DNS server, and verify that queries are actually flowing through Pi-hole.

Keep Docker Compose maintainable with one readable stack file, deliberate volume choices, clear profile use, preflight config validation, and health checks that support recovery.