Self-Hosting
Self-hosting and homelab notes: certificates, reverse proxies and the maintenance that keeps home services running.
- 2026
-
2026-11-05
WordPress Upgrade-Window RCE (CVE-2026-119977): Are You Exposed and How to Patch
CVE-2026-119977 can give attackers code execution while WordPress core is updating, and it's being exploited. How to check, patch and look for signs.
-
2026-11-05
The Raspberry Pi 5 16GB Now Costs $385: Which Pi Should You Buy?
The Pi 5 16GB went from $120 to $385. Current Pi prices, what a full build costs against an N150 mini PC, and which...
-
2026-11-05
How to Monitor a Raspberry Pi in Home Assistant with MQTT
Track Raspberry Pi temperature, disk, memory and power problems in Home Assistant with rpi-mqtt-monitor. No YAML, plus restart buttons and useful alerts.
-
2026-11-02
LXD and Incus Auth Bypass (CVE-2026-112816): Are You Exposed and How to Patch
CVE-2026-112816 lets anyone who reaches the LXD or Incus API log in as a trusted client with only a public certificate. Who is exposed...
-
2026-10-31
PHP2Shell (CVE-2026-109618, CVE-2026-109619) and CVE-2026-115560: What Changed in PHP This Month and How to Patch
PHP2Shell: two exploited, unauthenticated RCE bugs in PHP itself. Affected versions, patching on Debian and Ubuntu, php.ini stopgaps, and CVE-2026-115560.
-
2026-10-31
How to Convert Your WordPress Site to a Static Site (and Stop Patching PHP)
Turn WordPress into static HTML: export with Simply Static or migrate to Jekyll or Hugo. Covers redirects, comments, forms, search and free hosting.
-
2026-10-31
Brotli2Shell (CVE-2026-111497): What the Brotli Bug Does and How to Protect Your Servers
CVE-2026-111497 (Node2Shell) is a Brotli decoder memory bug hitting Node.js, Python, .NET and Envoy. How it works, who is exposed, and how to patch....
-
2026-10-21
Let's Encrypt 64-Day Certificates: Is Your Homelab Ready?
Let's Encrypt cuts certificate lifetimes to 64 days on Feb 10, 2027. What changes and a 5-minute check for certbot, acme.sh, Caddy and Traefik....
