Security
16 guides about self-hosted security solutions
Secure your self-hosted services with proper authentication, encryption, and access control. These guides cover password managers, VPNs, firewalls, certificate management, and security best practices to keep your infrastructure protected from unauthorized access.
-
Vaultwarden: The Lightweight Self-Hosted Password Manager
Vaultwarden is an unofficial Bitwarden-compatible server written in Rust. Covers Docker deployment, HTTPS setup, organization sharing, emergency access, and how it compares to the official Bitwarden server.
-
Self-Hosting Wazuh: Open-Source SIEM for Home and Small Business Security
Wazuh is a free, open-source SIEM that monitors your servers for intrusions, vulnerabilities, and compliance issues. This guide covers installation, agent setup, and practical alerting.
-
Self-Hosting Passbolt: Open Source Password Management for Teams
A practical guide to self-hosting Passbolt as a team password manager. Covers setup, GPG-based encryption, browser extensions, and comparison with Vaultwarden and Bitwarden.
-
Kasm Workspaces: Self-Hosted Browser Isolation and Virtual Desktops
A practical guide to self-hosting Kasm Workspaces for browser isolation, secure remote desktops, and containerized application streaming. Covers setup, workspace images, security use cases, and production hardening.
-
Infisical: Self-Hosted Secrets Management for Your Infrastructure
How to self-host Infisical for centralized secrets management. Covers Docker deployment, environment syncing, CI/CD integration, Kubernetes operator, and comparison with HashiCorp Vault.
-
CrowdSec Security Engine: AppSec, Multi-Machine Deployment, and Advanced Configuration
An advanced guide to CrowdSec's Security Engine covering the AppSec component (WAF), centralized LAPI for multi-machine setups, custom parser and scenario development, allowlisting strategies, and production hardening.
-
Keycloak: Enterprise Identity Management for Your Homelab
A practical guide to self-hosting Keycloak for single sign-on (SSO), user management, and identity federation. Covers setup, OIDC, SAML, and integration with self-hosted apps.
-
Authentik: The Self-Hosted Identity Provider That Hits the Sweet Spot
A practical guide to self-hosting Authentik for SSO, OAuth2, SAML, and user management. Covers Docker setup, LDAP integration, and how it compares to Authelia and Keycloak.
-
CrowdSec: Collaborative Intrusion Prevention for Your Self-Hosted Services
A practical guide to CrowdSec, the open-source security tool that blocks attackers using crowd-sourced threat intelligence. Covers installation, bouncer setup, integration with reverse proxies, and how it compares to Fail2ban.
-
CrowdSec vs Fail2Ban: Modern Intrusion Prevention for Self-Hosters
A detailed comparison of CrowdSec and Fail2Ban for protecting self-hosted services. Covers setup, configuration, performance, and when to use each tool.
-
SearXNG: Self-Host Your Own Private Search Engine
A practical guide to self-hosting SearXNG, a privacy-focused metasearch engine. Covers Docker setup, search engine configuration, rate limiting, public vs private instances, and customization.
-
Zitadel: Cloud-Native Identity and Access Management You Can Self-Host
A guide to self-hosting Zitadel for identity and access management. Covers Docker setup, OIDC/OAuth2 configuration, multi-tenancy, and comparison with Authentik, Keycloak, and Authelia.
-
Frigate NVR: Self-Hosted Security Cameras with AI Object Detection
A practical guide to Frigate, the self-hosted NVR with real-time AI object detection. Covers setup, hardware acceleration, camera configuration, Home Assistant integration, and comparison with commercial NVR solutions.
-
Vaultwarden vs Bitwarden: Which Self-Hosted Password Manager Is Right for You?
An in-depth comparison of Vaultwarden and Bitwarden for self-hosted password management. Covers features, resource usage, security considerations, and which one to choose for your setup.
-
Self-Hosting Authelia: Add Single Sign-On to All Your Services
A guide to self-hosting Authelia for single sign-on and two-factor authentication. Covers setup with reverse proxies, MFA configuration, and comparison with alternatives.
-
Self-Hosting Vaultwarden: Run Your Own Bitwarden-Compatible Password Manager
Complete guide to self-hosting Vaultwarden — a lightweight Bitwarden-compatible password manager. Covers setup, security hardening, backups, and comparison with Bitwarden's official server.