Reproducible homelab backups with restic

Notes on wiring restic against a local NAS target, pruning policies, and how to verify snapshots on a schedule without babysitting cron.

Tuning Docker Compose for small VPS boxes

A few knobs — memory limits, restart policies, and log rotation — that keep long-running stacks from eating a 2 GB droplet alive.

DNS-01 certificates without exposing port 80

Walkthrough of issuing wildcard certs over the provider API, so nothing has to listen on the public web just to renew TLS.