CrowdSec Locked Me Out of My Own Server
A post-mortem: how an intrusion-prevention system banned my homelab IP and removed all access at once, how I got back in, and the two-layer whitelist that stops it happening again.
ls -lt ~/blog
total 17 posts
Headplane: a Web UI for Headscale
Building and running Headplane against a self-hosted Headscale control server — the requirements the docs get wrong, and the two permissions traps that keep it in a crash loop.
Building a Homelab SOC: One Log Pipeline, Eight Dashboards
Centralising logs from ten machines into Loki with rsyslog and Alloy, adding metrics with Prometheus, and building the dashboards that answer security questions.
Running Your Own Mail Server: Postfix, Dovecot and DKIM
Hosting your own email in 2026: the full stack, the DNS records that decide whether you land in an inbox, and the mistakes that get you blacklisted.
Self-Hosted Push Notifications with ntfy
Replacing a cloud push service with ntfy: the access model that keeps topics private, wiring it into Grafana and camera alerts, and the limits worth knowing.
A WiFi Access Point Inside an LXC Container
Passing a physical WiFi card into a Proxmox container to run hostapd, with dnsmasq for DHCP, network-level ad blocking, and per-client notifications.
Building a Home Media Server with Jellyfin and Proxmox
How I turned a spare 4TB drive and a Proxmox LXC container into a family media server with Jellyfin, replacing multiple streaming subscriptions with a single self-hosted solution.
Introducing WorkItOut — Find Your Gym Partner & Track Your Progress
A comprehensive platform for gym goers to find training partners, log workouts, follow training programs, and build a fitness community.
Automated Daily CrowdSec Reports via Email
Setting up an HTML email report of CrowdSec security alerts delivered to your inbox every morning with Postfix and Gmail SMTP relay.
Managing DNS Programmatically with the IONOS API
How to automate DNS record management for your domains using the IONOS REST API — listing zones, adding and deleting records with curl and Python.
Getting Started with Proxmox VE for Your Home Lab
A beginner-friendly introduction to Proxmox VE — installation, initial configuration, and first container creation for homelab enthusiasts.
Harden Your LXC Containers: Security Essentials for Proxmox
Practical security hardening steps for LXC containers in a Proxmox homelab — SSH, AppArmor, unprivileged containers, and resource isolation.
Using Headscale for Self-Hosted VPN Access
Setting up a self-hosted Tailscale control server with Headscale to securely access your homelab from anywhere.
My Proxmox VE Homelab: Infrastructure Overview
A walkthrough of my self-hosted Proxmox VE homelab — LXC containers, networking, and the services that run my digital infrastructure.
Monitoring Your Homelab with Grafana, Loki, and CrowdSec
Setting up centralised logging, metrics dashboards, and intrusion detection for a Proxmox-based homelab with open-source tools.
Setting Up a Reverse Proxy with NGINX for Self-Hosted Services
How to use NGINX as a reverse proxy with automatic TLS certificates to expose multiple self-hosted services through a single entry point.
Setting Up ISC DHCP for Private IPs in a Proxmox Homelab
A practical guide to running isc-dhcp-server in an LXC container for static and dynamic IP allocation across your Proxmox VE lab network.