A password manager is the one self-hosted app where “good enough” isn’t good enough. Every other app on your stack going down for a night is an inconvenience. Your vault going down, or worse, becoming unrecoverable, is every credential you have locked behind a box you can no longer reach. That raises the bar for how carefully you set this one up compared to, say, a media server or a dashboard. Vaultwarden makes the bar easy to clear, it’s a small, mature, low-resource app, but only if you actually do the hardening and backup steps instead of just running the container and calling it done. ...

Every data hoarder eventually hits the same wall: the array keeps growing, the electric bill for spinning a dozen drives 24/7 keeps growing with it, and the off-site backup story (see the 3-2-1 backup guide if you haven’t nailed that down yet) gets more expensive every time you add another few TB. At some point, usually somewhere past the 50-100TB mark, people start hearing the same suggestion from old-school sysadmins: buy a tape drive. It sounds like a joke. It isn’t. ...

Most homelab hardware guides stop at “buy it, rack it, install Proxmox.” The thing that actually changes how a homelab feels to run day to day is whether you can reach the machine when the OS won’t boot, the network stack is misconfigured, or the box is three rooms away in a closet with no monitor attached. That’s what out-of-band management is for, and if you’re running used enterprise gear, you almost certainly already own it. Most people never turn it on. ...

Ceph shows up in every “how do I get real shared storage for my Proxmox cluster” conversation, and for good reason, it’s the one option that’s fully native, fully integrated into the Proxmox web UI, and genuinely production-grade software running underneath some very large real-world deployments. It’s also the option most likely to leave a home cluster worse off than before you added it, because Ceph’s design assumptions (plenty of nodes, plenty of network, plenty of dedicated drives) don’t bend easily to a 3-node home lab built from whatever hardware was on hand. Here’s what Ceph actually is inside Proxmox, what it needs to run well, and when it’s the right call instead of the simpler alternatives. ...

At some point every homelab operator wants to reach their stuff from outside the house, checking on a download, pulling up Jellyfin at a friend’s, hitting the Proxmox web UI from a coffee shop. The wrong way to do this is punching holes in your router’s firewall and forwarding ports straight to internal services. The right way is a VPN that puts your remote device on the same private network as your homelab, so nothing is exposed to the internet at all. WireGuard, Tailscale, and ZeroTier are the three tools homelabbers reach for most, and they’re not really three competing options for the same job, they’re two different approaches with WireGuard sitting underneath one of them. ...

Once you’ve got a properly organized library sitting on real storage, the next question is what actually serves it to your devices. Plex, Jellyfin, and Emby all do the same basic job, scan a library, pull metadata, transcode when needed, and stream to whatever screen you’re on, but the tradeoffs between them are real and they don’t get smaller the longer you put off the decision. Here’s how to actually pick. ...

Every data hoarder eventually hits the same wall: the motherboard only has six SATA ports, and the build calls for twelve drives. The instinctive fix is a cheap RAID card off eBay, and that instinct is almost always wrong. The actual answer, in nearly every homelab storage build, is an HBA flashed to IT mode. Here’s what that means, why it matters, and how to do it without turning a $40 card into a paperweight. ...

Buying the right GPU for your homelab is one decision. Getting Proxmox to actually hand that GPU to a VM or container is a separate one, and it’s where a lot of people get stuck, because Proxmox actually supports two completely different ways to do it, and picking the wrong one for the job means either a fight with IOMMU groups you didn’t need to have, or a container that can’t do what you needed a full GPU for. Here’s what each path actually requires, and how to pick between them. ...

Google Photos used to be the easy answer: unlimited storage, decent search, an app that just worked. That deal is gone, storage now counts against your Google One quota, prices have crept up, and the underlying trade was always the same one every free cloud photo service makes: your entire photo library, including the ones you’d rather not have scanned by an ad-tech company’s ML pipeline, lives on someone else’s servers under someone else’s terms. Immich and PhotoPrism are the two projects that have actually closed the gap between “self-hosted” and “something you’d trust with 15 years of family photos.” Picking between them comes down to a few real differences, not just which one has a nicer logo. ...

Shucking, buying an external USB hard drive purely to crack it open and pull out the bare drive inside, has been a data hoarder rite of passage for over a decade. Drive manufacturers have spent that whole decade trying to make it less appealing, and yet it keeps coming back every time there’s a good external-drive sale. Here’s whether it still makes sense, and what you’re actually signing up for when you do it. ...