An incremental way to improve logging, restart behaviour, health checks, exposure and backups without rebuilding a working Docker host.

A reference of every backup layer in my homelab, what data it protects, how fresh it is, and which failure each one actually recovers from.

What an isolated Navidrome database recovery rehearsal proved, how I kept it separate from production, and what remains untested.

How I use Glance, Gatus, Grafana and Gotify to see what is available, investigate problems and keep security notifications useful.

How Caddy, CoreDNS and DNS-01 certificates give private services friendly names and trusted HTTPS without opening them to the internet.

The practical lessons I took from wiping my TrueNAS server and recovering years of family photos.

How my Raspberry Pi 4 backup is now running at a separate location, how the encrypted Restic snapshots reach it over Tailscale, and what the confirmed backup results show.

The restore checks I am using after discovering that a backup job completing does not prove the data can be recovered.

What my Restic backup covers, what it does not cover, and why configuration backups are still valuable during a recovery.

What I learned about backing up an Immich installation after rebuilding one from recovered media and database data.