Categories
Networking
Give your services clean domain names, reach them safely from anywhere, block ads network-wide, and segment your network like a professional.
In this category
How to Set Up WireGuard VPN
Self-host a fast, modern WireGuard VPN so you can reach your entire homelab securely from anywhere — with wg-easy for a simple UI.
How to Install Nginx Proxy Manager
Publish internal services with free Let's Encrypt TLS certificates and a friendly point-and-click UI — no config files required.
How to Set Up Caddy as a Reverse Proxy
Get automatic HTTPS for all your homelab services with Caddy's tiny config — including Docker, subdomains and DNS challenges.
Secure Remote Access to Your Home Server
Reach your homelab from anywhere without exposing insecure ports — compare VPNs, Tailscale, reverse proxies and tunnels, and when to use each.
Tailscale vs WireGuard
Managed mesh VPN vs self-hosted WireGuard — ease vs control for remote homelab access.
How to Set Up Pi-hole for Network-Wide Ad Blocking
Install Pi-hole with Docker to block ads and trackers for every device on your home network.
Home Server Networking Guide
Reverse proxies, DNS, VLANs and secure remote access — give your services clean, reachable names the right way.
Comparisons
Tailscale vs WireGuard
Managed mesh VPN vs self-hosted WireGuard — ease vs control for remote homelab access.
Software
Glossary
Port Forwarding
A router rule that directs incoming internet traffic on a specific port to a device on your local network.
Reverse Proxy
A server that sits in front of your services, routing requests by domain name and handling TLS certificates.
VPN(Virtual Private Network)
An encrypted tunnel that lets you securely access your home network from anywhere as if you were local.
DNS(Domain Name System)
The system that translates human-readable names like example.com into the IP addresses computers use.
DHCP(Dynamic Host Configuration Protocol)
A service that automatically assigns IP addresses and network settings to devices as they join the network.
VLAN(Virtual LAN)
A way to split one physical network into isolated logical networks for security and organization.
Subnet
A logical subdivision of an IP network, defined by a mask that separates the network and host portions of an address.
IP Address
A numeric label that identifies a device on a network, such as 192.168.1.10 (IPv4).
Static IP
A fixed IP address that never changes, either set on the device or reserved on the router.
Dynamic DNS(DDNS)
A service that keeps a domain name pointed at your home's changing public IP address.
CGNAT(Carrier-Grade NAT)
An ISP setup where many customers share one public IP, making inbound connections impossible without workarounds.
Wake-on-LAN(WoL)
A feature that powers on a computer remotely by sending it a special network packet.
PoE(Power over Ethernet)
Delivering electrical power to devices over the same Ethernet cable that carries data.
MAC Address
A unique hardware identifier assigned to a device's network interface.
Default Gateway
The device (usually your router) that traffic is sent to when leaving the local network.
NAT(Network Address Translation)
The router technique that lets many private devices share one public IP address.
Load Balancer
A component that spreads incoming requests across multiple servers or services.
CGNAT(Carrier-Grade NAT)
When your ISP puts you behind shared public IP addresses, blocking direct inbound connections.
PoE(Power over Ethernet)
Delivering electrical power to devices like access points and cameras through Ethernet cables.
VLAN(Virtual LAN)
A logical network segment that isolates traffic on shared physical switches.
PXE Boot(Preboot Execution Environment)
Booting a computer from the network instead of a local disk, using DHCP and TFTP to load an OS image.
MTU(Maximum Transmission Unit)
The largest packet size a network link will carry without fragmenting it.
DoH / DoT(DNS over HTTPS / DNS over TLS)
Encrypting DNS queries so they can't be read or tampered with by your network or ISP.
macvlan
A Docker network mode that gives a container its own MAC address and IP on your physical LAN.