# Core Lab
> Learn homelabs, self-hosting, Docker, Plex/Jellyfin & NAS builds. Step-by-step guides & scripts to build, secure, and optimize your own home server.
Public Ghost content for AI and LLM tooling. Use `/llms-full.txt` for consolidated page and post context.
Append `.md` to any post or page URL to get the content in Markdown (for example, `/example-post.md`).

## Pages
- [About Core Lab: Cybersecurity Meets Homelabbing](https://corelab.tech/about.md) - Most tech content shows you what’s possible with an unlimited budget and a full 42U server rack. Core Lab shows you what’s possible with the hardware you already have. The Mission: Building Your Digital Fortress I'm Joe and I started this site to bridge the gap between high-end security and practic…
- [Legal & Disclosures](https://corelab.tech/disclosures.md) - Core Lab's disclosures: educational-purpose content, affiliate relationships, AI usage in content production, and liability terms.
- [Core Lab Tech's Self-Hosted Lab (My Digital Fortress, 2026)](https://corelab.tech/homelab.md) - A tour of Core Lab's real homelab: 192TB+ of ZFS storage, OPNsense on repurposed hardware, 54 Docker containers, and where to start building your own.
- [Core Lab Partners and Sponsors](https://corelab.tech/partners-sponsors.md) - Current Core Lab sponsors and partners, plus advertising and sponsorship rate information for brands looking to reach the homelab and self-hosting audience.
- [Privacy Policy](https://corelab.tech/privacy.md) - How Core Lab collects, uses, and protects visitor data: hosting location, analytics, third-party services, your rights, and security practices.
- [Core Lab Hardware Shop](https://corelab.tech/shop.md) - Battle-tested homelab servers, mini-PCs, enterprise recertified storage, transcoding GPUs, and multi-gigabit networking gear. Built, bench-tested, and verified in the lab.
- [You're in the lab!](https://corelab.tech/thank-you.md) - Thanks for subscribing to Core Lab. Here's your first tool (the Universal Network Auditor) and where to go next if you're not sure where to start.
- [Topics / Tags](https://corelab.tech/topics-tags.md) - Topic based search, simply click a tag and see all related posts.
- [You’re the Backbone of the Lab!](https://corelab.tech/ty-backbone.md) - Thanks for backing Core Lab. Here's your first tool (the Universal Network Auditor) and where to go next if you're not sure where to start.
- [Welcome to Core Lab Tech](https://corelab.tech/welcome-to-core-lab-tech.md) - A deep-dive into enterprise-grade homelab networking, practical cybersecurity and, self-hosted infrastructure for digital sovereignty. Canadian veteran owned, hosted & operated!

## Posts
- [The Post-Mortem: How an Aggressive Cache Strategy Sabotaged My Ghost CMS Signups](https://corelab.tech/ghost-cloudflare-cache-postmortem.md) - How a single-character pluralization typo and Cloudflare's counter-intuitive rule order silently broke Ghost CMS magic-link logins, tanking my newsletter signups by 85%.
- [25 Best Docker Containers for Homelabs (2026 Architecture Blueprint)](https://corelab.tech/corelab-docker-stacks.md) - Tired of endless "what should I self-host" lists? Here is the complete production blueprint: 25 essential Docker containers across 12 modular stacks on OMV8, complete with VLAN isolation policies and SaaS cost replacements.
- [The Hybrid Pipeline: Real-Debrid with a Usenet Backstop](https://corelab.tech/decypharr-debrid-usenet-backstop.md) - Build the ultimate automated media pipeline by bridging Real-Debrid and Usenet. Learn how to use Sonarr delay profiles and a Block Account to create a 100% reliable backstop.
- [🗞️ News from Core Lab - Summer is Over (Sept '26)](https://corelab.tech/news-sept26.md) - The latest updates from Core Lab, including a deep dive into CrowdSec WAFs, Jellyfin streaming optimization, and homelab security.
- [How to Deploy CrowdSec AppSec (WAF) with SWAG in Docker](https://corelab.tech/crowsec-waf-swag-docker.md) - Learn how to successfully deploy CrowdSec's Web Application Firewall behind a LinuxServer SWAG reverse proxy across a Docker Macvlan without getting 'connection refused' errors.
- [Is Port Forwarding Safe? How to Expose Your Homelab Without Getting Hacked (2026)](https://corelab.tech/is-port-forwarding-safe.md) - Banish the homelab boogeyman. Learn why port forwarding isn't inherently dangerous, and how to safely expose your self-hosted apps to the internet using reverse proxies, CrowdSec, and TLS.
- [Turbocharge Jellyfin Streaming: Enabling QUIC (HTTP/3) via SWAG](https://corelab.tech/jellyfin-enabling-quic-http-3.md) - Want to enable cutting edge speed for Jellyfin? Your QUIC / HTTP3 setup is here, with example firewall rules and reverse proxy configs included.
- [How to Safely Upgrade to Jellyfin 12 (Fix Plugin Errors)](https://corelab.tech/jellyfin-12-upgrade-safely.md) - Jellyfin 12 has officially dropped! The upgrade process from 10.11.x is incredibly smooth, provided you follow a few critical steps regarding third-party plugins and database migrations.
- [The Definitive PS5 Teardown & Deep Clean: Diagnosing Thermal Failure, Liquid Metal & Fan Problems](https://corelab.tech/ps5-teardown-deep-clean-repair.md) - Does your PS5 shut off while playing games? Follow this hands-on teardown guide to deep clean the heatsink and safely replace the APU's liquid metal.
- [News from Core Lab: Theme Upgrades & PC Builds & Overhauls](https://corelab.tech/corelab-news-sept-26.md) - Happy Friday! If things look a little different around here, it's because Core Lab just underwent a massive infrastructure upgrade on the front end. I've migrated the site to a new premium theme designed specifically to fix some of the UX friction you've experienced, when reading massive 3,000-5,00…
- [The Dorm Room Server: Beginner Homelab Setup on an Old Laptop](https://corelab.tech/dorm-roof-selfhosting.md) - Learn how to build a cheap dorm room homelab on an old laptop. Bypass campus Wi-Fi restrictions, host your own media server, and sync your notes securely.
- [Back to School PC Build? Don't Pay Full Price for Software (15% Off Kinguin Promo)](https://corelab.tech/kinguin-back-to-school-software-deals-2026.md) - Just built a new homelab or back-to-school PC? Get an extra 15% off Windows 11 Pro, Office 2024, and Adobe CC with our Kinguin promo code.
- [Proxmox Helper Scripts: Spin Up Game Servers and Homelab Services in Minutes](https://corelab.tech/proxmox-helper-scripts.md) - Use Proxmox community helper scripts to spin up game servers, Plex, and homelab services in minutes instead of hours. What the scripts do, how to use them safely, and when to skip them.
- [First Things to Do After Building a Gaming PC: Essential Software & Drivers (2026)](https://corelab.tech/gaming-pc-post-build-software-guide.md) - Every piece of software to install after building a gaming PC: OS and licensing, drivers, launchers, monitoring tools, security, and backups, in the order it actually matters.
- [PC Gaming Build Guide (2026): Budget to High-End](https://corelab.tech/pc-gaming-build-guide.md) - A tiered PC gaming build guide for 2026: CPU, GPU, RAM, storage, and PSU picks for budget, mid-range, and high-end builds, plus what changes if the box also runs a homelab workload.
- [Latest from the Lab: Summer 2026 Hardware, Trust Audits, & Core Series Overhauls](https://corelab.tech/latest-from-the-lab-summer-2026.md) - Latest Core Lab updates: Kinguin safety breakdown, 2026 RAM benchmarks, overhauled reverse proxy guides, and the upcoming OPNsense series rewrite.
- [How Much RAM Do You Actually Need for Gaming in 2026?](https://corelab.tech/how-much-ram-for-gaming.md) - DDR5 prices have tripled thanks to AI datacenters eating the world's DRAM supply, but 16GB is still a completely viable amount of RAM for gaming in 2026. Here's the benchmark data, where 16GB actually breaks, and how to make it work on Windows 11 or Linux.
- [Is Kinguin Legit and Safe in 2026? A Trust Breakdown for Gamers](https://corelab.tech/is-kinguin-legit.md) - Is Kinguin legit? Yes. Here is the trust and verification model behind Kinguin's marketplace, in plain numbers: 13 years in operation, over 12,000 identity verified sellers, and a 4.6/5 Trustpilot score.
- [The 2026 Homelab Networking Gear Blueprint](https://corelab.tech/homelab-networking-gear.md) - The real networking gear running my homelab: OPNsense, UniFi switches and APs, and budget 10GbE SFP+ switching, laid out as a layer-by-layer buying blueprint.
- [Where to Buy Homelab Hardware in Canada (2026): Sources & Border-Tax Survival](https://corelab.tech/where-to-buy-homelab-hardware-canada.md) - Where to buy homelab hardware in Canada in 2026: trusted used-enterprise and mini-PC sources, plus how to dodge brokerage fees and the border tax.
- [Best NAS & Homelab Hard Drives (2026): Plus the Canadian Recert Market](https://corelab.tech/best-nas-hard-drives.md) - How to pick NAS hard drives in 2026, and the recertified Enterprise SAS/SATA drive market that quietly powers cost-effective Canadian homelabs.
- [Best Pre-Built NAS for a Homelab (2026): UGREEN, TerraMaster & More](https://corelab.tech/best-prebuilt-nas-homelab.md) - The best pre-built NAS units for a 2026 homelab. UGREEN DXP4800 Plus/Pro and the TerraMaster F6 compared for Plex, storage, and RAM-upgrade headroom.
- [Best Homelab Server CPUs (2026): Intel vs AMD Builds by Tier](https://corelab.tech/best-homelab-cpu-intel-vs-amd.md) - Intel or AMD for your 2026 homelab server? A tier-by-tier build guide covering Quick Sync transcoding, Ryzen core counts, chipsets and RAM for every budget.
- [Best Mini PCs for a Homelab (2026): Silent, Low-Power, Always-On Nodes](https://corelab.tech/best-mini-pc-homelab.md) - The best mini PCs for a 2026 homelab, from silent N100 "Gatehouse" nodes to beefy Ryzen 7 mini-servers. Battle-tested picks for low-power, always-on self-hosting.
- [🧪 What's Up in the Lab? - July 2026](https://corelab.tech/whats-up-in-the-lab-july-2026.md) - CrowdSec Web UI, Authelia MFA, a new reverse proxy learning path, and a family-friendly Mealie recipe manager setup in this month's Core Lab roundup.
- [Mealie Docker Setup Guide (2026): Build a Self-Hosted Recipe Manager Your Whole Family Will Actually Use](https://corelab.tech/mealie-docker-setup-guide-2026.md) - Learn how to install Mealie with Docker in 2026. Build a beautiful self-hosted recipe manager with recipe imports, meal planning, shopping lists, and secure remote access.
- [What is a Reverse Proxy? Why Every Homelab Needs One (2026 Guide)](https://corelab.tech/what-is-a-reverse-proxy.md) - Learn what a reverse proxy is, why every self-hosted homelab should use one, and compare SWAG, Traefik, Caddy, Nginx Proxy Manager, HAProxy and NGINX before choosing the right solution.
- [Authelia: Centralized MFA for Self-Hosted Services](https://corelab.tech/authelia-mfa-swag-setup.md) - Stop exposing unsecured apps. Learn how to deploy Authelia in Docker with a KeyDB backend and SWAG to enforce centralized Multi-Factor Authentication.
- [CrowdSec Web UI: The Dashboard CrowdSec Should Have Shipped With](https://corelab.tech/crowdsec-web-ui-setup-guide.md) - CrowdSec told me it was working, but I wanted to see it. Here's how I deployed CrowdSec Web UI for live alerts, geo-mapped attacks, and notifications - without giving up local control.
- [Latest from the Lab - Jun 22 '26](https://corelab.tech/latest-from-the-lab-jun-22-26.md) - Canada's digital privacy rollback, hardening your homelab stack, Prime Day deals, and a new homelab pen-testing guide in this week's Core Lab update.
- [Prime Day 2026: Homelab, Networking & Budget PC Deals Worth Your Click](https://corelab.tech/prime-day-2026-homelab-deals.md) - Skip the junk. Here are the genuine, tested Prime Day 2026 deals on 10GbE switches, OPNsense mini-PCs, NAS storage, and budget server hardware.
- [Canada Is Quietly Dismantling Digital Privacy - And You're Probably Not Paying Attention](https://corelab.tech/canada-privacy-laws-bills-c22-c34-c9.md) - Buried inside federal Bills C-22, C-34, and C-9 is a sweeping surveillance architecture. Here is what it means for Canadians and how to self-host your way out.
- [How to Scan and Pentest Your Homelab (2026 Guide)](https://corelab.tech/homelab-security-audit-openvas-guide.md) - Stop guessing if your self-hosted infrastructure is secure. Use Shodan, Greenbone OpenVAS in Docker, and Trivy to audit your homelab like a professional.
- [New from Core Lab: Linux Gaming Showcas, 1 Year of Running A Tech Blog, more to come](https://corelab.tech/updates-tues-june9.md) - The CachyOS gaming guide, one year of running a Ghost tech blog (costs and lessons learned), and a preview of an upcoming homelab security audit.
- [🎮 Gaming on CachyOS (2026): Performance Tweaks & Hydra Launcher Guide](https://corelab.tech/cachyos-linux-gaming-guide-hydra-launcher.md) - Maximize your frame times. Discover why CachyOS is the ultimate Linux gaming distro, how to configure the Hydra launcher with Debrid, and fix stubborn HDR & audio bugs.
- [Fighting the AI Slop: Year 1 Metrics, Costs, and Lessons Self-Hosting a Ghost Tech Blog](https://corelab.tech/self-hosted-ghost-blog-metrics-costs.md) - A raw look at Year 1 metrics, real electricity costs, and traffic sources for an independent, self-hosted Ghost tech blog fighting internet AI slop.
- [The Ultimate 18-Drive Self-Hosted Monolith: Why the Fractal Design Define 7 XL is Still the Best Home Server Case in 2026](https://corelab.tech/fractal-design-define-7xl-review.md) - A long-term review of the Fractal Design Define 7 XL configured as an 18-drive custom DIY NAS and home server running 58 Docker containers, Home Assistant, and n8n natively.
- [When Power Outages Break Everything: Recovering an OMV8 NAS After Filesystem Corruption, Kernel Drift, and DKMS Failure](https://corelab.tech/omv8-filesystem-corruption-dkms-recovery.md) - A complete technical post-mortem and recovery guide for OpenMediaVault 8 after rolling power failures corrupt the boot SSD, drift kernels, and break DKMS blocks.
- [SSD-Deaths & NAS Upgrades, Ghost CMS Home Assistant and Massive Real-Debrid shock & awe!](https://corelab.tech/ssd-deaths-nas-upgrades-ghost-cms-home-assistant-and-massive-real-debrid-shock-awe.md) - An OPNsense SSD death, an OMV8 power-outage recovery, a Real-Debrid purge fix, and integrating Ghost CMS with Home Assistant in this Core Lab update.
- [How to Integrate Ghost CMS with Home Assistant Natively (2026 Guide)](https://corelab.tech/ghost-cms-home-assistant-integration.md) - Stop wasting time checking dashboards. Learn how to natively connect Ghost CMS to Home Assistant to monitor MRR, subscribers, and trigger custom automation.
- [How to Fix Real-Debrid "Infringing File" & "Infringing Torrent" Errors (2026)](https://corelab.tech/real-debrid-infringing-file-fix.md) - Real-Debrid now blocks many releases with automated filtering, causing “infringing file” errors. Here’s the ultimate 2026 fix for Sonarr, Radarr, Stremio, and Decypharr.
- [Visualization, Stronger Ingress & Giving your Homelab a Physical](https://corelab.tech/updates-tues-may12.md) - Homelab network visualization tools, media/gaming server networking, Cloudflare DDNS setup, and 2026 hardware recommendations in this Core Lab update.
- [The SATA Pivot: Mitigating IOPS Bottlenecks in a 18+ Drive Homelab](https://corelab.tech/homelab-iops-optimization.md) - Is your ZFS array thrashing under Docker logs? You don't need a new server; you need a better bus. Learn how moving my OS to USB reclaimed SATA III ports for SSD caching - solving IOPS bottlenecks and extending drive life for under $20.
- [🛠️ The Homelab Physical: A Guide to Annual & Bi-Annual Maintenance](https://corelab.tech/homelab-maintenance.md) - Neglect is the quiet killer of uptime. Don't let dust or "chip creep" sabotage your ZFS pools. This guide covers essential bi-annual routines - from LSI HBA cooling to reseating the "Big Three" - to keep your custom server healthy for the long haul.
- [Homelable Deployment Guide: Visualize Your Network Topology with Docker (2026)](https://corelab.tech/homelable-docker-deployment-guide-network-topology.md) - Stop guessing your network map. Learn how to deploy Homelable using Docker Compose to visualize VLANs, device relationships, and topology in your homelab.
- [Beyond Default Deny: Reducing Attack Surface & Exposure in 2026](https://corelab.tech/security-through-obscurity-opnsense-guide.md) - Stop Shodan and Censys from mapping your network. Learn how to use OPNsense 26.1, CrowdSec, and Divert Mode to achieve true Security through Obscurity in 2026.
- [Updates from the Lab](https://corelab.tech/updates-tues-apr21.md) - Maximizing Radarr and Sonarr after initial setup, media server networking updates, and the latest content overhauls from Core Lab.
- [Decypharr Setup Guide: Replace Downloads with Instant Debrid Streaming (2026)](https://corelab.tech/decypharr-setup-guide.md) - A complete Decypharr guide for existing Sonarr/Radarr users. Replace torrents with instant Debrid streaming using symlinks, rclone/DFS, and zero-download workflows.
- [NAS vs Server: What’s the Difference? (2026 Guide for Homelabs)](https://corelab.tech/nas-vs-server.md) - NAS vs server isn’t just semantics - it’s the difference between smooth performance and constant frustration. Learn when to use each and how to build the perfect homelab in 2026.
- [How to Safely Delete Unused Images in Ghost CMS: The Surgical Guide](https://corelab.tech/ghost-cms-image-cleanup-guide.md) - 🖖These instructions & information are provided without warranty, guarantee of any kind, or support, and used completely at your own risk. Please use due diligence backing up your site before utilizing these steps‼️ I am not a developer, my python script was partially written with AI/LLM. Ghost CMS…
- [The Hybrid Gen 5 Experiment: High-Speed Linux Storage Without the Gen 5 Heat](https://corelab.tech/samsung-990-evo-plus-linux-ssd-heat-test.md) - Can a "Hybrid" SSD outperform the flagship Gen 5 screamers? I test the Samsung 990 EVO Plus on CachyOS to see how it handles BTRFS, thermals, and 2.5GbE NAS transfers in my newest workstation.
- [Advanced Sonarr & Radarr Guide: Implementing the "Native Hunting" Protocol](https://corelab.tech/sonarr-radarr-profilarr-native-hunting-protocol.md) - Stop settling for "good enough" media quality. Learn how to use Profilarr and Decluttarr to build a secure, self-healing, "Always Hunting" Sonarr and Radarr stack without third-party scripts.
- [Latest from Core Lab](https://corelab.tech/updates-tues-mar24.md) - The OPNsense Day 2 advanced configuration guide is now open to everyone, plus the new Suricata IDS/IPS guide and a homelab security roundup.
- [OPNsense IDS/IPS in 26.4+: Suricata, Inline vs Divert Mode](https://corelab.tech/opnsense-ids-ips-suricata-inline-vs-divert-mode.md) - Learn how to configure Suricata IDS/IPS in OPNsense 26.4+. Compare Inline vs Divert mode, optimize performance, and secure your self-hosted services.
- [Upgrading to OPNsense 26.1](https://corelab.tech/opnsense-26-1-upgrade-kea-dnsmasq-guide.md) - The jump to OPNsense 26.1 changes how DHCP and DNS interact. Learn how to navigate Kea migration, fix subnet mask mismatches, and resolve Android Wi-Fi errors.
- [Best Plex Server Hardware (2026): Budget Builds to Enterprise NAS Guide](https://corelab.tech/best-plex-server-hardware.md) - Building a Plex server in 2026? Learn how to choose the best hardware for 4K transcoding, from scavenged Intel QuickSync builds to high-end enterprise ZFS rigs.
- [Advanced OPNsense Networking: Cloudflare Bypass, DNS/NTP Hijacking & SQM](https://corelab.tech/opnsense-advanced-networking-guide.md) - Learn advanced OPNsense routing techniques including Cloudflare proxy bypass, DNS/NTP interception, and SQM bufferbloat fixes for high-performance homelab networks.
- [Core Lab Q1 Update: Homelab SIEM, CG-NAT Bypassing & Modernization!](https://corelab.tech/core-lab-q1-homelab-update-2026.md) - Core Lab Q1 update: new homelab SIEM stack, CG-NAT Plex bypass, networking guide overhaul, hardware updates, and upcoming firewall & NAS build guides.
- [Building a Homelab Mini-SIEM with Grafana, Loki, and Promtail](https://corelab.tech/homelab-mini-siem-loki-grafana-opnsense.md) - Stop guessing and start visualizing. Turn siloed OPNsense and NGINX logs into a real-time threat map with the lightweight GLP stack. Includes GeoIP and Discord alerts.
- [How to Access Plex and Jellyfin Behind CGNAT: A 2026 Guide](https://corelab.tech/running-plex-jellyfin-behind-cgnat.md) - Stop Plex Relay throttling! Learn how to bypass CG-NAT using a VPS relay with WireGuard or Headscale (Tailscale). Secure, full-bitrate remote access without port forwarding.
- [JellyWatch Review: The Ultimate Jellyfin Admin Dashboard for Android](https://corelab.tech/jellywatch-review-jellyfin-admin-android.md) - Always wanted a mobile native app to manage Jellyfin? Discover JellyWatch - an Android app with "Arr" integration, real-time stats, and a killer "Watch Pass" feature.
- [Hello Seerr: A Guide to Migrating from Overseerr & Jellyseerr](https://corelab.tech/migrate-overseerr-jellyseerr-to-seerr.md) - Switching from Overseerr or Jellyseerr to Seerr? Here is a step-by-step guide to migrating your Docker container, fixing UID 1000 permissions, and keeping your data intact.
- [Updates from Core Lab!](https://corelab.tech/fantastic-thurs-feb12.md) - A featured series on protecting your identity as a Canadian, plus lab updates on the Dirty Snow build and the latest threat landscape roundup.
- [Part 3: The Domino Effect - What To Do When Your Email & Socials Get Hacked](https://corelab.tech/email-hacked-recovery-guide.md) - Locked out of Facebook or Gmail? Don't panic. Follow this NIST-based cyber response guide to kick attackers out, secure your SIN, and reclaim your digital identity.
- [Part 2: The 8-Minute Nightmare - What To Do When You Are Sim Swapped in Canada](https://corelab.tech/sim-swap-attack-recovery-guide.md) - At 5:45 PM, the spam calls started. By 6:00 PM, the phone was dead and the bank accounts breached. If you see 'No Service,' you have minutes to act. Here is the definitive Canadian battle plan to stop a SIM Swap, lock down your credit, and stop the bleeding.
- [Part 1: The Data Pipeline - Where Your Identity Leaks](https://corelab.tech/where-your-identity-leaks.md) - Stop thinking of identity theft as a "hack." Learn how corporate negligence and data aggregation fuel the Canadian black market, and why your info is at risk.
- [How to Add a Dark Mode Toggle to Ghost Using Code Injection](https://corelab.tech/how-to-dark-mode-toggle-ghost.md) - Add a persistent dark mode toggle to Ghost's Edition theme using only Code Injection: no theme files or FTP access required, including a fix for the stubborn 'You might also like' section.
- [OpenMediaVault 8 Upgrade Guide: Navigating the Jump to Debian 13 & Kernel 6.17](https://corelab.tech/omv8-upgrade-guide.md) - Master the OpenMediaVault 8 (Synchrony) upgrade. Learn to fix PHP 502 Bad Gateway errors, handle SHA-1 repo issues, and optimize Kernel 6.17 for your homelab.
- [The Media Server Janitors: Deploying Maintainerr & Declutarr](https://corelab.tech/maintainerr-declutarr-media-automation-guide.md) - Stop manual library cleanup. Learn how to use Maintainerr for Plex pruning and Declutarr for stalled queue management in this comprehensive 2026 guide.
- [NGINX 101: Under the Hood of Your Reverse Proxy](https://corelab.tech/nginx-deep-dive-config-guide.md) - Stop relying on magic. Learn how NGINX actually works under the hood. A deep dive into config files, proxy headers, and Raw Docker deployments.
- [CrowdSec Installed but Showing No Decisions? Here's Why That's Normal](https://corelab.tech/crowdsec-logs-forensics-guide.md) - Installed CrowdSec and seeing “No active decisions”? Learn how to verify CrowdSec is working, inspect metrics, investigate alerts, and whitelist trusted IPs.
- [Home Assistant Container (Docker) vs. OS: Why I Ditched the VM](https://corelab.tech/home-assistant-docker-vs-os.md) - Debating Home Assistant OS vs. Docker? Discover why the "limitations" of Docker are actually superpowers. Learn how to build a faster, flexible smart home.
- [Mastering WireGuard: Site-to-Site & Road Warrior Setups Behind OPNsense NAT](https://corelab.tech/mastering-wireguard-opnsense-docker-site-to-site.md) - Stop running WireGuard on your firewall. Learn how to decouple your VPN using Docker or Linux VMs behind OPNsense for better performance, portability, and Site-to-Site routing.
- [Fantastic Friday: Dirty Snow, The Digital Vault & The Advanced Malware Threat](https://corelab.tech/fantastic-friday-jan-16-2026.md) - A 2026 hardware refresh, the Dirty Snow build, major guide overhauls, and why you might want to check your Docker containers today.
- [The 2026 Hybrid Workstation: Building "Dirty Snow" (Ryzen 9800X3D + Linux)](https://corelab.tech/dirty-snow-ryzen-9800x3d-linux-build.md) - I built "Dirty Snow," a Ryzen 9800X3D workstation running CachyOS. See how this hybrid beast crushes gaming and virtualization with surprising thermals.
- [Threat Hunting in the Homelab](https://corelab.tech/threat-hunting-docker-malware-homelab.md) - Zenarmor blocked a C2 beacon from my NAS. It wasn't the OS. See how I used tcpdump to hunt down a compromised Docker container hiding in plain sight.
- [Are Cloudflare Tunnels Safe for Media Servers? A Cybersecurity Vet's Analysis](https://corelab.tech/cloudflare-tunnel-vs-vpn-plex.md) - A deep dive into securing self-hosted media servers. Explore the pros and cons of Cloudflare Tunnel and why you should consider Headscale or direct WireGuard for better privacy.
- [Cutting the Cord in Canada: The 2026 Playbook](https://corelab.tech/cord-cutting-canada.md) - Tired of paying Rogers or Bell for channels you never watch? This is the complete 2026 guide to replacing cable in Canada - hardware, free apps, sports streaming, and self-hosted setups that actually work.
- [Hacking Ghost: Adding Mobile-Friendly Breadcrumbs to the Edition Theme](https://corelab.tech/ghost-breadcrumbs-guide.md) - Hack the Ghost Edition theme to add a swipeable, SEO-friendly breadcrumb bar with a template edit and custom CSS in Code Injection.
- [The "Digital FOB": The Ultimate Cyber Survival Guide for OUTCAN Deployments (2026)](https://corelab.tech/digital-fob-secure-travel-router-guide.md) - Don't connect directly to camp Wi-Fi. This guide explains how to build a "Digital FOB" using travel routers and VPNs to defeat Deep Packet Inspection and cellular tracking. The ultimate "Go Bag" tech list for Canadian soldiers deploying in 2026.
- [Self-Hosting Vaultwarden Securely (Complete 2026 Guide)](https://corelab.tech/digital-vault-self-hosting-vaultwarden.md) - Learn how to self-host Vaultwarden with a hardened setup using SWAG, CrowdSec, and geoblocking. Build a secure, private password manager with full control over your data.
- [Profilarr vs. Recyclarr: Which TRaSH Automation Tool is Better? (2026)](https://corelab.tech/profilarr-vs-trash.md) - Profilarr automates TRaSH Guides through a GUI, while Recyclarr sticks to YAML. Compare setup, control, and which one fits your Sonarr/Radarr stack.
- [The Speed of Light: OPNsense WireGuard Setup Guide](https://corelab.tech/opnsense-wireguard-guide.md) - Set up a fast, secure WireGuard VPN on OPNsense: keys explained, the Cloudflare Orange Cloud trap, firewall rules, and handshake troubleshooting.
- [Secure Jellyfin with HTTPS: Reverse Proxy Guide (SWAG, NPM & Traefik)](https://corelab.tech/jellyfin-guide-https.md) - Stop exposing port 8096. Set up Jellyfin behind SWAG, NGINX Proxy Manager, or Traefik for full HTTPS encryption and secure remote access.
- [Cloudflare Advanced - The Layered Cache Strategy (2026)](https://corelab.tech/cloudflarept3.md) - Learn how to utilize Cloudflare's FREE tier to perform advanced & powerful layered caching to give your services sub second load times!
- [How to Install Profilarr: Docker Compose & Setup Guide (2026)](https://corelab.tech/setup-profilarr.md) - Tired of Sonarr grabbing low-quality 720p files? Use Profilarr to automate "TRaSH guides" quality rules with a beautiful GUI. Complete setup guide inside.
- [Fantastic Friday!](https://corelab.tech/fantastic-friday.md) - Holiday sales alerts and reminders, plus a rundown of the newest posts published on Core Lab this week.
- [Gluetun Docker Setup: Split-Tunnel VPN Guide (2026)](https://corelab.tech/setup-gluetun.md) - Route only qBittorrent or Prowlarr through a VPN using Gluetun and Docker split-tunneling, with a built-in kill switch and provider examples.
- [Wireguard vs OpenVPN?](https://corelab.tech/wireguard-vs-openvpn.md) - Is one better than the other, or are there simply different use cases? We'll dive into that and help you decide the path forward. Both hold their place for the self-hoster... Firstly, let's discuss the security aspects. Is WireGuard "less" secure than OpenVPN? Are we sacrificing security & privacy…
- [Cloudflare Advanced - Geoblocking, AI Scraping & Bruteforce Protection (2026)](https://corelab.tech/cloudflarept2.md) - Learn how to use Cloudflare free tier to setup advanced security features like bot defence, AI scraping & brute force security for your services.
- [OPNsense Part 3: Layer 7 Control & Threat Intelligence](https://corelab.tech/opnsensept3.md) - Secure your OPNsense firewall with next-gen threat protection. Configure Suricata IDS/IPS, Zenarmor Layer 7 filtering, CrowdSec, and GeoIP blocking.
- [OPNsense Zenarmor Master Setup Guide: Layer 7 WAF Deep-Dive](https://corelab.tech/opnsense-zenarmor.md) - Secure your OPNsense firewall with next-gen threat protection. Configure Zenarmor Layer 7 filtering & WAF in detail.
- [The 2026 VPS Security Checklist: Hardening Debian & Ubuntu Servers](https://corelab.tech/vps-security-hardening.md) - The first 10 minutes after spinning up a VPS matter most. A 2026 hardening checklist for both managed (cPanel/WHM) and unmanaged (root/SSH) Debian and Ubuntu servers.
- [🚨An Early Gift for My Subscribers: Pre-Holiday Tech Deals & Exclusive Codes❗](https://corelab.tech/preholiday-techsales-2025.md) - Curated pre-holiday deals on QD-OLED monitors, homelab mini-PCs, 2.5Gbps networking upgrades, and portable displays, plus exclusive subscriber codes.
- [How to Build a Silent Homelab: A Guide to Fans, Racks, and Acoustic Treatment](https://corelab.tech/silent-homelab.md) - A practical, three-part system for a quiet homelab: swapping enterprise fans for Noctua, choosing between open/enclosed/acoustic racks, and treating the room itself.
- [🚀 The 2025 Black Friday Web Hosting Deals Are LIVE! Why "Cheapest" Isn't Best (And Who to Choose Instead)](https://corelab.tech/best-black-friday-hosting-value-2025.md) - Don't just get the cheapest Black Friday hosting deal. Get the best value. We compare WHC, HostPapa, & more. Get the 2025 deals here.
- [OPNsense Part 2: Firewall Rules, NATs, and Traffic Flows](https://corelab.tech/opnsensept2.md) - Learn how to configure OPNsense firewall rules, VLAN isolation, port forwarding, NAT mechanics, and advanced outbound egress filtering for your homelab.
- [How to Add a Custom Table of Contents to Ghost CMS (Code Injection Guide)](https://corelab.tech/ghostblog_customization.md) - Learn how to add a dynamic table of contents, scroll progress bar, and "back to top" button to your Ghost blog using simple code injections—no theme change required.
- [Finally Friday! Core Lab: Multiple New Guides & Updates🎆](https://corelab.tech/oct24roundup.md) - New key tech guides, recent site changes, new core pages, and the latest cybersecurity news corner, all in one Core Lab weekly roundup.
- [The Ultimate Plex & Jellyfin Real-Debrid Setup Guide (2026)](https://corelab.tech/ultimate-plex-debrid-guide.md) - Stop buying hard drives. Build a 100TB media server for $3/mo. The complete guide to Plex or Jellyfin, Real-Debrid, and DUMB with zero-buffering 4K streaming.
- [This Month in Cyber: When the Giants Stumble, We All Feel the Shake](https://corelab.tech/cybernews_oct.md) - Breaking down the F5 breach and Cisco firewall vulnerabilities from this month's cybersecurity news, and what self-hosters should take away from them.
- [The Definitive Arr Stack Docker Compose Guide (2026) + Generator](https://corelab.tech/arr-stack-docker-compose-guide.md) - Master the Arr Stack with this 2026 Docker Compose guide. Get a complete config for Sonarr, Radarr & Plex, plus a free interactive Generator tool.
- [OPNsense 26.2 Master Guide: Architecture, Hardware & Deployment (2026)](https://corelab.tech/opnsensept1.md) - Master OPNsense firewall setup. Build a digital fortress with OPNsense 26.2. This expert 2026 guide covers network topology, hardware sizing, ZFS installation, DNS config and baseline systems hardening.
- [The Ultimate Media Server Guide (2026): Plex vs. Jellyfin vs. Cloud-Hybrid Stacks](https://corelab.tech/ultimate-media-server-guide.md) - Should you build a NAS or stream from the cloud? We break down the 4 paths to media server mastery: The Digital Dragon (Arr Stack), The Streamer (Stremio), and The Hybrid (Zurg).
- [Networking & Cybersecurity Roadmap: The 2026 Guide to a Secure Homelab](https://corelab.tech/cybersecroadmap.md) - Ditch the ISP router. Learn to secure your homelab with OPNsense, VLANs, and SWAG. A 20-year veteran's roadmap to building a "Default Deny" digital fortress in 2026.
- [Beyond the Fluff: Real-World CI/CD Automation for Your Homelab](https://corelab.tech/cicd_homelab.md) - Beyond the fluff: real-world CI/CD automation for your homelab. What CI/CD actually does, the core pipeline components, and why it matters even at small scale.
- [Installing & Gaming on Pop!_OS (Steam, Lutris & Heroic, ProtonGE)](https://corelab.tech/installpopos.md) - Switch to Linux the right way. A complete, step-by-step guide to installing Pop!_OS, setting up for gaming with NVIDIA drivers & optimization.
- [State of Gaming on Linux in 2026](https://corelab.tech/gamingonlinux2025.md) - Proton, ProtonDB, and the best gaming distros compared. Everything you need to know about ditching Windows for Linux gaming in 2026.
- [Frigate 0.17 NVR Setup Guide: NVIDIA GPU, Docker Compose & go2rtc (2026)](https://corelab.tech/setupfrigate.md) - Set up Frigate with Reolink cameras and an NVIDIA GPU using Docker, go2rtc, and TensorRT. This guide shows how to reduce CPU usage, stabilize RTSP streams, and get fast, accurate object detection.
- [The Complete Stremio + Real-Debrid Setup Guide (2026 Working Config): The "Netflix Killer" Setup](https://corelab.tech/stremio-setup-guide.md) - Stremio provides the Netflix-style interface, AIOStreams aggregates multiple sources into one addon, and Real Debrid/Torrentio delivers fast HTTPS streams without maintaining a media server.
- [Beyond the Streamer's Paywall: A Dive into Self-Hosted Streaming Media Servers](https://corelab.tech/selfhosted-mediaservers.md) - Break free from streaming subscriptions! Explore Plex, Jellyfin, Emby, and Stremio. This guide compares features, costs, and privacy for beginners.
- [How to Automate Docker Backups: Script to Stop, Sync, Update & Prune](https://corelab.tech/simplebackups.md) - A production-ready bash script to safely stop, backup, update, and restore your Docker stacks with rsync, plus a full disaster recovery playbook.
- [Homelab NAT Explained: How Network Address Translation & Port Forwarding Work](https://corelab.tech/homelab-nat-port-forwarding-guide.md) - Learn how NAT works in a homelab, how port forwarding exposes services, and why reverse proxies are safer for self-hosting.
- [RAM-Only VPNs FTW](https://corelab.tech/ramonlyvpn.md) - RAM-only VPN servers store nothing on disk and wipe all data on reboot. Why that matters for privacy, the Hong Kong PIA case study, and how top VPN providers compare.
- [Jellyfin vs Plex (2026): Which Media Server Is Better for Privacy, Streaming & Transcoding?](https://corelab.tech/plexvsjellyfin.md) - An expert 2026 breakdown of Plex vs Jellyfin. We test 4K HDR transcoding performance, NVIDIA vs Intel QuickSync, and the "Plex Pass" value in a self-hosted world.
- [Why Docker Compose is the 2026 Standard for Self-Hosting](https://corelab.tech/whatiscompose.md) - What is docker compose eh? It's the hot thing standard for running multi-container applications in isolated boxes. But managing multiple containers, each with its own configuration, can quickly become a nightmare. That’s where Docker Compose steps in. I started with docker in 2014/2015, and grew in…
- [The Ultimate 2026 Guide to Self-Hosting Game Servers: Docker, LinuxGSM & Security Hardening](https://corelab.tech/gamingservers.md) - Master the 2026 gaming stack with Docker and LinuxGSM. Learn to host Palworld, CS2, and Satisfactory servers on high-performance Mini PCs with veteran security tactics.
- [How to Setup Open Media Vault 8 (OMV8) for 2026](https://corelab.tech/setup-omv.md) - Master OpenMediaVault 8 on Debian 13. Learn to configure ZFS pools, switch to the Proxmox kernel, and deploy Docker containers for the ultimate 2026 homelab.
- [How do RAID and ZFS work?](https://corelab.tech/zfs.md) - A practical breakdown of ZFS RAIDZ levels, when RAIDZ2 beats RAIDZ1/RAIDZ3, how the ZFS ARC cache uses RAM, and real CLI commands for monitoring pool health.
- [Building the Ultimate Home Assistant Server (2026 Edition)](https://corelab.tech/ultimate-home-assistant-guide.md) - Stop building your smart home on a fragile SD card. Here is the professional guide to running Home Assistant on an N100 Mini PC with Docker—fully unlocked and "Add-on" free.
- [How to Harden SWAG or NGINXfor an A+ Security Rating (2026 Guide)](https://corelab.tech/swag-nginx-security-hardening-guide.md) - Stop bots and brute-force attacks. Learn how to enable HSTS, harden Nginx headers, and configure Fail2ban Recidive in SWAG for an A+ security rating.
- [The Ultimate 2026 Obsidian Docker Guide: GPU-Accelerated & Wayland Ready](https://corelab.tech/obsidian.md) - Deploy a high-performance Obsidian vault in Docker. Master GPU acceleration and Wayland for near-native speed in your 2026 homelab build.
- [NVIDIA Toolkit Setup on Linux](https://corelab.tech/nvidiatoolkit.md) - Introduction / why? Now I'm actually a bit of an underdog (AMD) fanboy, but in the end a real tech/nerd uses the best tool available, to do the job. NVIDIA is wearing the King's crown for GPU accelerated functions like video transcoding and especially, AI. This guide will walk you through installin…
- [Build Your Own Local AI Server / Stack with Ollama & Docker (2026 Guide)](https://corelab.tech/private-chatgpt-local-llm.md) - Learn how to run private AI locally using Docker Compose, Ollama and Open WebUI. Includes NVIDIA GPU setup, model selection, networking and troubleshooting.
- [Best GPU for Local LLMs (2026): VRAM Tier List & Buyer's Guide](https://corelab.tech/llmgpu.md) - Looking for the best GPU for local LLMs in 2026? Stop overpaying. Here is the ultimate VRAM tier list and buyer's guide for running Llama, Mistral, and Ollama locally.
- [The Definitive Guide to Docker Compose: Infrastructure as Code (2026)](https://corelab.tech/setupcompose.md) - Stop following generic tutorials. Build the ultimate self-hosted homelab with this 2026 Docker Compose guide. Learn the perfect /opt/ folder structure, deploy Dockhand & Dozzle, and master container networking for your home server.
- [Plex Media Server Optimization Guide 2026](https://corelab.tech/plexoptimization.md) - Stop Plex buffering. Fix RAM transcoding, GPU passthrough, Relay limits, and 4K HDR issues with this complete 2026 optimization guide.
- [Immich Deep Dive: The Ultimate Self-Hosted Google Photos Alternative (2026)](https://corelab.tech/immichdeepdive.md) - Take control of your photos with Immich: facial recognition, maps, Docker setup, GPU acceleration, and importing your Google Photos library.
- [Cloudflare Protection for Homelabs: OPNsense, DDNS, & Wildcard Setup](https://corelab.tech/cloudflare-protection-free.md) - Stop exposing your home IP. Learn how to use Cloudflare's free tier with OPNsense to secure your homelab. Includes DDNS setup, wildcard CNAMEs, and IP masking.
- [Homelab VLANs Explained: Network Segmentation & Inter-VLAN Routing](https://corelab.tech/homelab-vlans-routing.md) - Learn how VLANs work in a homelab, how network segmentation improves security, and how inter-VLAN routing connects separated networks.
- [Homelab Networking Basics: A Beginner’s Guide to Understanding Home Networks](https://corelab.tech/homelab-networking-basics.md) - Learn homelab networking basics including IP addressing, routers, subnetting, and private ranges. A beginner-friendly foundation before VLANs and routing.
- [The Best NAS OS of 2026: Beyond Synology & Vendor Lock-in](https://corelab.tech/best-nas-os-comparison.md) - Ditching Synology? Our 2026 guide compares TrueNAS SCALE, Unraid, and OMV8. Build your digital fortress with the best NAS OS for Plex, ZFS, and Docker.
- [CrowdSec & Fail2Ban: Real-Time Threat Defense for SWAG](https://corelab.tech/crowdsec-fail2ban-swag-hardening.md) - Stop brute-force attacks and secure your self-hosted apps. Learn to deploy harden SWAG with CrowdSec for an A+ security rating and Zero Trust access.
- [Self-Hosting SWAG: Deploying Your Reverse Proxy in Docker (2026)](https://corelab.tech/swag-reverse-proxy-guide.md) - Forget Nginx Proxy Manager. Learn how to set up LinuxServer.io SWAG with CrowdSec, Authelia, and the new Dashboard Mod for a secure, automated reverse proxy stack.
- [The Self-Hosting Roadmap: From Localhost to Public URL (Safely)](https://corelab.tech/self-hosting-roadmap-dns-nginx.md) - From Localhost to Public URL. A step-by-step architecture guide for self-hosting securely using Cloudflare, OPNsense, and Nginx Proxy Manager.
- [The Architecture of Transcoding: NVENC vs. QuickSync & The AV1 Future (2026)](https://corelab.tech/transcoding-architecture-nvenc-vs-quicksync.md) - You've seen, read or heard a lot about transcoding since you've begun your streaming media idealization no doubt. Let's break it down shall we? I've been utilizing home media / streaming servers since roughly 2011 and went through XBMC to Android streaming services, through to Emby, an older media…
- [The Ultimate OMV8 & Plex Media Server Guide (2026): Build Your Own 100TB NAS](https://corelab.tech/plexomv.md) - Master your home lab with this 2026 update for OpenMediaVault 8. Learn to set up Plex on OMV8 using Docker Compose, optimize ZFS pools, and enable 4K transcoding.
- [The "Core Lab" Monster: My 80+TB DIY NAS Build (2026)](https://corelab.tech/diy-nas-server-build.md) - A 17-drive, 80TB+ DIY NAS build log: enterprise SAS hardware, ZFS pool design, HBA cards, and the 3.3V pin gotcha that stops drives from spinning up.
- [Best Homelab Hardware Guide (2026): Servers, Mini-PCs, CPUs & Parts](https://corelab.tech/homelab-hardware-guide.md) - Construct your Digital Fortress. From silent N100 "Gatehouse" nodes to massive "Command Center" storage servers, this is the battle-tested hardware we trust to hold the line in 2026.
- [Homelab on a Budget: Your Zero-to-Hero Guide (2026)](https://corelab.tech/levelup.md) - Build a high-performance home lab for under $300 CAD in 2026. Learn to use "scrap" hardware, Dell Optiplex Micros, and Proxmox to start your self-hosting journey.
- [🗺️ Start Here: Turn Your "Trash" Hardware Into a Digital Fortress](https://corelab.tech/start-here.md) - Learn self-hosting, Docker, homelabs, networking, Plex or Jellyfin, automation, and cybersecurity. Turn scrap hardware into a secure digital fortress with Core Lab.

## Optional
- [RSS Feed](https://corelab.tech/rss/)
- [Sitemap](https://corelab.tech/sitemap.xml)
- [Full content of pages and posts](https://corelab.tech/llms-full.txt)