Part 20/A — Self-Hosted Spotify on a Raspberry Pi: Finding Music You’re Allowed to Keep
Where to get music you can legally keep for a self-hosted library, from Bandcamp to netlabels, plus the YouTube route and its risks.
Read Article →
Posts tagged "Docker"
Part 18 — How I Run My Entire Digital Life on a Raspberry Pi: A Self-Hosted Messenger Hub That Refuses to Sell You Out
Replacing the increasingly freemium Rambox with Ferdium, a fully-free messenger aggregator, self-hosting its optional sync server on a Raspberry Pi behind nginx so no chat metadata ever touches a third party.
Read Article →
One Ollama Is Not Enough: How I Run Text and Vision Models Side-by-Side on a Single GPU — and Lock Them Behind a Real API Gateway
Running two purpose-tuned Ollama instances on one GPU — one for text, one for vision — fronted by Open WebUI as an authenticated API gateway, so neither Ollama ever touches the internet directly.
Read Article →
Part 17 — How I Run My Entire Digital Life on a Raspberry Pi: Your Privacy-Preserving DNS Leaves Home Too — DoH, DoT, and a Pi-hole You Can Actually Take With You
Taking Pi-hole and DNSCrypt-Proxy on the road with dnsdist, nginx-terminated DoH/DoT, and EDNS Client Subnet — so remote devices get encrypted, filtered, per-client DNS anywhere in the world.
Read Article →
Part 2 — Meet Git-Kepo Pro: Upgrading My Singlish AI Agent to a Level That Feels Borderline Illegal
Upgrading Git-Kepo from an unreliable prototype to a production-grade NemoClaw agent: fixing Ollama context limits, splitting TOOLS.md to save tokens, and adding repo labelling and batch mode.
Read Article →
Part 1 — Meet Git-Kepo: The Kaypoh Git Detective Who Joined My AI Family
Building Git-Kepo, a Singlish-speaking NemoClaw specialist agent that clones repositories, runs churn/bus-factor/velocity diagnostics, and audits git history for leaked credentials using the LLM's own judgment.
Read Article →
How I Built My Singaporean Grandparents Running a Food Court — In AI
Giving self-hosted OpenClaw agents real personality — building two Singlish-speaking AI characters on separate NemoClaw sandboxes that share a Matrix room and pass conversations to each other by mention.
Read Article →
Your Agentic AI Foundation Is Leaking. Mine Isn’t. Here’s Why.
Combining OpenClaw, NemoClaw, Ollama, and a self-hosted Matrix server into a fully private, kernel-sandboxed agentic AI stack with no third-party servers in the critical path.
Read Article →
Containerizing the Edge: Building a High-Performance llama.cpp Docker Stack for NVIDIA Spark (arm64)
Building a custom two-stage Dockerfile to run llama.cpp with CUDA on the NVIDIA Spark (ARM64/Blackwell), since the official images only target x86_64, plus multimodal model routing with a models.ini catalog.
Read Article →
Fixing and Securing HTTPS API Communication Between Dockerized Nuxt and FastAPI Apps Using Nginx
Debugging a mixed-content HTTPS error between a Dockerized Nuxt frontend and FastAPI backend behind Nginx, fixed with relative API paths and proper proxy headers.
Read Article →
Part II — How to run your private docker registry securely behind Nginx and integrate it federated Keycloak realms
Federating multiple Keycloak realms through a users-less hub realm, so Harbor (or any single-OIDC-client app) can offer sign-in across separate teams without a shared realm.
Read Article →
Part I — How to run your private docker registry securely behind Nginx and integrate it with Keycloak
Running Harbor as a private Docker registry behind NGINX, with Keycloak SSO for the dashboard and a CLI secret for docker login/push.
Read Article →
How to configure containerized PgAdmin + Nginx Reverse Proxy
Two real-world gotchas from putting PgAdmin behind the same NGINX reverse proxy as everything else: an SPA-sized rate limit, and the X-Frame-Options header that blocks its own embedded iframe.
Read Article →
Part 15 — How I Run My Entire Digital Life on a Raspberry Pi: Monitor the Monitors — Real-Time Docker Metrics with cAdvisor
Adding cAdvisor to watch per-container CPU, memory, and disk usage on the Pi, plus why Graylog is a heavier lift than the monitoring itself.
Read Article →
Part 14 — How I Run My Entire Digital Life on a Raspberry Pi: Host Your Own Secure Chat Server for True Privacy
Self-hosting a federated Matrix homeserver with Keycloak SSO, a Cloudflare Worker for the well-known federation lookup, and the DNS and memory gotchas that came with running it long-term.
Read Article →
Part 13 — How I Run My Entire Digital Life on a Raspberry Pi: Have your online notes entirely yours
Self-hosting Outline as a private Notion alternative, backed by Postgres and a shared Redis instance, with Keycloak SSO and an NGINX config tuned for a React SPA's burst of parallel requests.
Read Article →
Part 12 — How I Run My Entire Digital Life on a Raspberry Pi: Unify and Elevate your Authentication with Keycloak
Setting up Keycloak for unified single sign-on across the stack, then wiring Grafana and Portainer to it via OpenID Connect, with an NGINX config for rate-limited remote access.
Read Article →
Part 11 — How I Run My Entire Digital Life on a Raspberry Pi: Keep Your Containers Fresh with Watchtower
Automating Docker image updates with Watchtower, wired to Gotify for notifications, plus the IP-pinning gotcha that leaves Watchtower stuck mid self-update.
Read Article →
Part 10 — How I Run My Entire Digital Life on a Raspberry Pi: Effortless Device Monitoring with Grafana, Node Exporter, and Prometheus
Building a Grafana + Prometheus + Node Exporter + Smartctl Exporter monitoring stack, gated behind Cloudflare Zero Trust, with an alert rule wired through to Gotify.
Read Article →
Part 9 — How I Run My Entire Digital Life on a Raspberry Pi: Real-Time Notifications with Gotify
Self-hosting Gotify as a push-notification server, exposed via Cloudflare Tunnel, with a curl and Python example for sending alerts to it.
Read Article →
Part 8 — How I Run My Entire Digital Life on a Raspberry Pi: Make it to Become the Brain of our Smart Home
Running Home Assistant on the Pi with a Zigbee USB stick, exposing it via Cloudflare Tunnel or NGINX, and turning a touchscreen into a motion-aware kiosk dashboard.
Read Article →
Part 7 — How I Run My Entire Digital Life on a Raspberry Pi: Seamless Torrenting via Running Transmission Securely Behind a VPN
Running Transmission behind an always-on OpenVPN tunnel in Docker, exposing it remotely via Cloudflare Tunnel or NGINX, and sharing the download directory back to the LAN over NFS.
Read Article →
Part 6 — How I Run My Entire Digital Life on a Raspberry Pi: Breaking Free from Big Cloud and Self-Hosting Nextcloud for Total Privacy and Control
Self-hosting Nextcloud on a Raspberry Pi with MariaDB and Redis, exposed via Cloudflare Tunnel or NGINX, plus the occ commands and cron job that keep it healthy long-term.
Read Article →
Part 5 — How I Run My Entire Digital Life on a Raspberry Pi: Password management with Bitwarden
Self-hosting Vaultwarden as a Bitwarden-compatible password vault, exposed remotely via Cloudflare Tunnel, with a hardened NGINX config as the alternative reverse-proxy path.
Read Article →
Part 4 — How I Run My Entire Digital Life on a Raspberry Pi: Make it accessible from outside
Setting up remote access with Cloudflare Tunnel via Docker Compose and Portainer — dealing with CG-NAT, and enabling SSH access to the Pi through the tunnel.
Read Article →
Part 3 — How I Run My Entire Digital Life on a Raspberry Pi: Protect the DNS communication of your entire home
Combining Pi-hole and dnscrypt-proxy in Docker for network-wide, encrypted DNS — plus the NULL-blocking-mode default that quietly breaks your own reverse proxy.
Read Article →
Part 2 — How I Run My Entire Digital Life on a Raspberry Pi: Docker and Portainer
Installing Docker on a Raspberry Pi, enabling cgroup memory accounting, moving container storage onto the encrypted SSD, and managing everything through a self-hosted Portainer instance.
Read Article →
Install Nvidia drivers + CUDA on Debian 12 (bookworm) + nvidia-smi + ollama and Docker
Pinning NVIDIA driver, CUDA, and nvidia-smi package versions on Debian 12 to avoid mismatches, then wiring up the NVIDIA Container Toolkit for GPU access in Docker and a self-hosted Ollama + Open WebUI stack.
Read Article →