If you run a Docker host that is reachable from the internet, one of the most effective security changes you can make costs nothing and takes five minutes: stop running your containers as root. This post walks through creating a dedicated, tightly-scoped service account for running Docker workloads that need hardware access, such as GPU […]
Tag: docker
Enable GPU on Server Hardware for Media Services
Some datacenter and server farms disable GPUs in their servers by default. The hardware is present and functional, but the devices are hidden at the BIOS or firmware level to simplify inventory management and reduce support complexity. Hetzner does not officially support GPU passthrough or direct GPU use on auction servers, but the hardware can […]
Deploying AdGuard with DNS-over-HTTPS in Docker
AdGuard provides centralized DNS filtering and encrypted upstream queries for infrastructure deployments. This guide covers deploying AdGuard in Docker with DNS-over-HTTPS upstreams, integrating it with Nginx Proxy Manager and WireGuard, and securing administrative access behind VPN boundaries. Prerequisites The following items are required: Checking Port 53 Availability Before deploying AdGuard Home, verify that port 53 […]
WordPress with Docker, Nginx Proxy Manager, and Cloudflare
Deploying WordPress behind Nginx Proxy Manager requires understanding how reverse proxy layers interact with DNS routing and SSL termination. Misconfigured proxy chains produce redirect loops, failed certificate validation, or exposed origin IPs. This guide covers a production Docker Compose stack and routing architecture decisions for self-hosted WordPress. Prerequisites The following items are required: Routing Architecture […]
Deploy wg-easy v15 for WireGuard
The wg-easy project provides a web interface for managing WireGuard VPN servers. Version 15 introduces a first-boot setup wizard while maintaining kernel-level packet routing controls. This guide covers deployment using Docker Compose with explicit IPv4-only configuration to avoid boot loops and routing errors on servers without IPv6 support. Prerequisites The following items are required: Configuration […]
Install Docker Compose and Deploy Nginx on Ubuntu
Docker Compose extends Docker with declarative configuration files that define multi-container deployments. This guide covers installation of Docker Compose on Ubuntu 22.04, deployment of an Nginx web server, and addition of Heimdall as a second service to demonstrate extensibility. Prerequisites This guide was tested on Ubuntu 22.04 Server in September 2023, updated January 2025. You […]
Install VirtualBox with Web Control Panel on Ubuntu Server
This guide covers the installation of VirtualBox 7.0 on Ubuntu 22.04 Server with a Docker-based web control panel. By the end, you will have a headless virtualization host accessible through a browser interface, suitable for running operating systems that require full system control without the resource overhead of a desktop environment. Why VirtualBox for Server […]