blog
Notes on running Docker on your own server
Longer pieces about the parts that are genuinely awkward: remote access, certificates, releases that do not drop requests, and who is allowed to talk to your Docker daemon.
Is exposing the Docker socket remotely safe?
Opening the Docker daemon to the network hands out root on the host. What port 2375 actually grants, why TLS on 2376 is not a fix on its own, and the SSH alternative.
ReadHow to manage Docker containers on a remote VPS
The four ways to manage containers on a server you rent, what each one costs you in setup and attack surface, and how to pick.
ReadA Docker GUI for a Linux VPS without exposing the Docker API
You can have a graphical view of a remote server’s containers without opening the daemon to the network. Here is what that requires.
ReadDeploying Docker Compose over SSH: what the commands actually do
A vendor-neutral walkthrough of shipping a Compose stack to a remote server by hand — copying the file, managing the .env, and what breaks the second time.
ReadPoint a domain at a Docker container with Caddy
A hand-written Caddyfile, the DNS record that has to exist first, and how automatic HTTPS actually gets its certificate.
ReadGitHub Actions deployment to your own VPS: four approaches
SSH action, self-hosted runner, registry plus webhook, or rsync — what each one puts on your server and which secret each one needs.
ReadBlue-green deployment with Docker and Caddy, by hand
The full shell version — start the new container, wait for its health check, move the proxy, and unwind correctly when a step fails.
ReadManaging several Hetzner servers from one desktop
What changes when the second server arrives: SSH config, key hygiene, keeping stacks in sync, and knowing which box you are on.
ReadWhy MihraOps does not put a PaaS on your server
An argument about where the control plane belongs — and a fair account of when a server-side platform such as Coolify is the better choice.
ReadA container panel for people who prefer a desktop app
Why some of us keep reaching for a native window instead of another browser tab, and what that preference actually buys.
Read