danplab.com · lab notes
Curated technical notes on infrastructure, networking, automation and DanpLab projects. Fewer posts, more context and practical value.
Una guida operativa per ridurre la superficie d’attacco di Docker Model Runner: aggiornamenti, fiducia nei modelli, isolamento, inventario e controlli prima di portare l’inferenza locale in produzione.
Guida pratica al Dynamic Load Balancer di Proxmox VE 9.2: prerequisiti, modalità CRS, soglie, affinità, rollout controllato e monitoraggio.
Guida pratica per sostituire la distribuzione manuale delle chiavi SSH con certificati a breve durata emessi da step-ca, includendo configurazione, rinnovo e piano di emergenza.
Technical deep dive on security best practices for Docker Compose in homelab environments. Configurations, privilege restrictions, and isolation to protect containers.
Come progettare alert utili in un homelab: sintomi invece di cause, soglie con for e keep_firing_for, raggruppamento e inibizione in Alertmanager, finestre di manutenzione e metriche di backup con il textfile collector.
Come ridurre il rischio di /var/run/docker.sock con un proxy a privilegi minimi, Docker rootless, segmentazione e controlli operativi verificabili.
Guida pratica per introdurre passkey FIDO2 in Microsoft Entra ID: prerequisiti, gruppi pilota, Authentication Methods, bootstrap con Temporary Access Pass e piano di emergenza.
Una procedura prudente per aggiornare i nodi Proxmox VE uno alla volta con Ansible, controlli pre-flight, migrazione delle VM e verifica finale.
The real identity lifecycle architecture: HR as the source of truth, separate GROUND and CREW paths, idempotent queues, two-stage offboarding, rehires and an operational device dashboard.
How I transformed Hermes from a chatbot to an operational layer in my lab: self-hosted gateway, interchangeable models, tools, memory, skills, cron, checks and security rules. With real examples of how I use it every day.
Operational checklist to evaluate and use ZFS RAIDZ expansion in Proxmox VE 9 without turning the lab storage into a blind experiment.
CrowdSec is an open source collaborative IPS that overcomes the limitations of Fail2Ban with behavioral detection, shared blocklists, and native container support. Practical guide to installation on a Linux homelab.
How to evaluate and introduce hardened container images in a homelab or small infrastructure, without confusing image hardening with the security of the entire service.
How to prepare Linux servers, appliances, and homelabs for OpenSSH's post-quantum key exchange without breaking compatibility, automations, and emergency access.
A concrete Conditional Access baseline for small Microsoft 365 tenants: phishing-resistant MFA, compliant devices, legacy block, and rollout procedures without locking yourself out.
How to use the 2026 Microsoft Intune and Entra ID updates to review Windows baselines, STIG audits, and conditional access with a practical SysAdmin approach.
A Lab Note on the DanpLab AI Workspace: Open WebUI interface, Ollama backend, Pipelines to extend workflows, GPU monitoring, and a privacy-first checklist without exposing sensitive infrastructure details.
An operational checklist to evaluate and prepare for the upgrade to Proxmox VE 9: backup, compatibility, storage, networking, Ceph/ZFS, and a rollback plan for small IT environments and homelabs.
How I built danplab.com with Next.js, a self-hosted AI chatbot, Hermes Agent on Discord, automatic article publishing based on trends and analytics with Matomo.
How to implement Zero Trust access with Cloudflare Access and Tunnel in a hybrid on-premise environment. Practical guide with architecture, configuration steps and best practices.
How to install and use Ollama to run AI models (LLMs) locally: installation, available models, API, integration with n8n and practical IT automations.
Build your professional homelab with Proxmox VE: installation, storage, VLAN networking, automatic backups, LXC containers and GPU passthrough for AI workloads.
Professional configuration of a homelab with MikroTik RB5009: VLAN segmentation, firewall rules, DNS over HTTPS, BGP, and Cloudflare Tunnel integration for secure access.
Practical guide to using containers in the homelab: Docker Compose for application stacks, LXC on Proxmox for lightweight services, and Kubernetes (k3s) for advanced orchestration.
A collection of free and open-source tools essential for an IT SysAdmin: monitoring, networking, automation, security, and productivity.
Complete guide to OpenClaw: installation, configuration, presentation logic, and SSH automations.
Practical guide to identity management with Microsoft Entra ID (formerly Azure AD), Intune for device management and automation with PowerShell and Graph API. Real-world examples of onboarding, Conditional Access and compliance.
Practical guide to self-hosted n8n: installation, user onboarding/offboarding workflows, automatic notifications, Microsoft 365 integration and infrastructure monitoring.
DanpLab is the technical blog of Daniele Puglisi, IT SysAdmin with 15+ years of experience. Here you'll find practical guides on Proxmox, Cloudflare, Microsoft 365, self-hosted AI, and IT automation.