Configure Docker Macvlan and Ipvlan for Dedicated LAN IPs
A docker macvlan ipvlan setup gives containers real LAN IPs instead of NAT'd ports — here's how we built it for a picky VoIP appliance.
Docker Rootless Mode Security Hardening Checklist
Your containers are running as root right now. This rootless Docker security checklist covers installation, hardening, and CI enforcement in 18 steps.
Secure Docker Multi-Stage Builds with Trivy CVE Gates
Secure Docker multi-stage builds go beyond size reduction — learn how to gate CVEs, pin digests, and stop shipping vulnerable layers to production.
WireGuard Multi-Peer Configuration and Zero-Downtime Key Rotation
WireGuard multi-peer configuration and zero-downtime key rotation require careful attention to AllowedIPs scoping, preshared key management, and the correct use of wg syncconf to avoid tunnel disruption. This post walks through the full setup, a reusable automation script, and the operational patterns that keep mesh networks stable under change.
Docker BuildKit Cache Optimization for Faster CI Pipelines
Slow Docker builds in CI waste engineering time and inflate infrastructure costs — BuildKit's registry cache backend eliminates redundant layer rebuilds across pipeline runs. This walkthrough covers enabling BuildKit, configuring cache-from and cache-to flags, and wiring everything into a GitHub Actions workflow with verified cache hits.
Blocking Sensitive Dotfiles in nginx-proxy for Dockerized WordPress
Exposed dotfiles like .env, .git, and .htpasswd are among the most exploited attack vectors in containerized WordPress deployments. This tutorial walks through writing a targeted nginx location rule, mounting it into nginxproxy/nginx-proxy without rebuilding the image, and verifying the block is active — without breaking Let's Encrypt ACME challenges.
☕ Support us · 💳 Monobank