Sign in

CodeWithRomi

@codewithromi.bsky.social
20 followers 15 following 108 posts

homelab + self-hosting tutorials. docker, proxmox, networking, security, and automating the boring stuff. i break things so you dont have to, then show you how. new video most weeks 👇 codewithromi.com

PostsRepliesMedia
CodeWithRomi @codewithromi.bsky.social · 13/10/2026
the zero-knowledge proof in signal's new numberless setup isn't replacing your phone number. it's hiding your payment from signal itself. two totally different things. wrote the whole thing up. #cybersecurity #opensource #privacy
codewithromi.com
How Signal Made the Phone Number Optional, and What the Zero-Knowledge Proof Actually Protects
Signal's new numberless registration is Android beta only and costs a one-time fee. The zero-knowledge proof is not what replaces your phone number; it is what stops Signal linking your payment to your account.
010
CodeWithRomi @codewithromi.bsky.social · 11/10/2026
if your BookOrbit scan finishes but finds nothing, it's almost always a permissions mismatch on the mapped volume. fix that one thing and your whole ebook/audiobook/comic library shows up. wrote the whole thing up #selfhosted #homelab #docker
codewithromi.com
Self-Host BookOrbit on Your NAS: Ebooks, Audiobooks and Comics in One Library
BookOrbit gives you a browser reader, OPDS and two-way Kobo and KOReader sync across your whole library. Here is the Docker setup on a NAS, plus the permissions mistake that makes a scan succeed and find nothing.
030
CodeWithRomi @codewithromi.bsky.social · 09/10/2026
😂🔥 WITNESS ME! 13.7 TB/s?! Even PCIe is begging for mercy. Serious question though, Warboy: what’s the actual SSD model and interface powering this legendary machine? NVMe, SATA, or pure Immortan magic? 💀
100
CodeWithRomi @codewithromi.bsky.social · 09/10/2026
WITNESS ME! 😂🔥 But Warboy, even the Immortan needs uptime! When the War Rig crashes, do you check the kernel logs or sacrifice another SSD to the machine-spirit? 💀⚙️
100
CodeWithRomi @codewithromi.bsky.social · 09/10/2026
WITNESS ME! 😂⚙️ The engineers command, the agents execute, and the GPUs shall rise! But tell me, Warboy, does the War Rig run on Linux, or has the Immortan forbidden open source? 💀
100
CodeWithRomi @codewithromi.bsky.social · 09/10/2026
😂 The War Rig might need a kernel update. But that’s the interesting part here. The agents weren’t magically replacing engineers. They helped accelerate the repetitive work while humans still handled debugging, validation, and the hard decisions. That’s a pretty big distinction.
100
CodeWithRomi @codewithromi.bsky.social · 09/10/2026
llm coding agents helped ship a conformant linux gpu driver for the m4 mac mini in roughly one month. wild what's possible when you let the agents handle boilerplate. wrote the whole thing up #linux #opensource #homelab
codewithromi.com
Building a Linux GPU Driver for the M4 Mac mini in One Month, Mostly With Coding Agents
Cody Ho and Niklas Sheth built a conformant Linux GPU driver for the M4 Mac mini in about a month, largely with LLM coding agents. It ships in Gravity Linux, a Fedora remix forked from Asahi Linux over that exact question.
140
CodeWithRomi @codewithromi.bsky.social · 08/10/2026
Nice! Curious about the 7B setup. What model and inference backend are you running, and is that 5 tok/s on CPU or GPU? Also, what happened tonight that made the 4TB backup drive the only thing that kept up?
100
CodeWithRomi @codewithromi.bsky.social · 07/10/2026
I’ve been slacking on this. It’s been on my list ever since I saw what it can do. Still stuck with grafana and Prometheus.
010
CodeWithRomi @codewithromi.bsky.social · 07/10/2026
Great point. Permissions tell you what the agent should be able to do, but egress controls and network logs tell you what actually left the box. Definitely worth adding that layer, especially for self-hosted agents.
110
CodeWithRomi @codewithromi.bsky.social · 07/10/2026
if an AI coding agent has repo access, check what it can actually reach. ZCode was uploading full git histories quietly. audit your agent permissions before something leaks. wrote the whole thing up #homelab #cybersecurity #selfhosted
codewithromi.com
An AI Coding Agent Uploaded Whole Git Histories: How to Lock Down Your Homelab
ZCode, Z.ai's GLM coding app, was caught uploading entire Git histories in September 2026 and fixed it within days. Here is how to audit and contain every other agent that reads your repos.
150
CodeWithRomi @codewithromi.bsky.social · 05/10/2026
Exactly 💯 Fixing the bug stops future exposure, but it can’t take back a secret that may have already leaked. Rotate first, ask questions later.
000
CodeWithRomi @codewithromi.bsky.social · 05/10/2026
if you cache target/ in GitHub Actions with Miri, every env var in that run could leak to any PR. fixed in sept 26 nightly but rotate your secrets anyway. wrote the whole thing up on the blog #devops #cybersecurity #opensource
codewithromi.com
Miri Was Leaking CI Secrets Through GitHub Actions Caches: What to Clean Up
Miri wrote every environment variable into target/, so caching that directory in GitHub Actions could hand your secrets to a pull request. Fixed in the 22 September 2026 nightly. Clear your caches and rotate anyway.
110
CodeWithRomi @codewithromi.bsky.social · 03/10/2026
if your user is in the docker group, any process running as you can get full root. no exploit needed. omarchy's default did exactly this. 4.0.1 fixes it but check your setup anyway. wrote the whole thing up #docker #selfhosted #cybersecurity
codewithromi.com
Omarchy: Any User Process Can Escalate to Root
Omarchy shipped a default that put your user in the docker group, which is root by another name. What actually happened, and why 4.0.1 matters.
020
CodeWithRomi @codewithromi.bsky.social · 02/10/2026
I definitely wasn’t covered that’s for sure. As to why I wrote this up 😂. Learn from my mistakes and negligence.
100
CodeWithRomi @codewithromi.bsky.social · 01/10/2026
ubuntu still has zero patches for those four linux kernel local root vulns from sept 18. debian trixie is clean but bookworm users are still exposed on TUNderflow. check your distro before assuming you're covered. wrote the whole thing up. #linux #cybersecurity #homelab
codewithromi.com
Patch These Four Linux Kernel Local Root Vulns Now: DirtyAH6, PPPoEject, TUNderflow, and DiagSpill
Four Linux kernel local root bugs went public on 18 September 2026 with working exploits. Checked 29 September: Debian trixie is patched, bookworm still is not for TUNderflow, and Ubuntu has shipped nothing yet.
111
CodeWithRomi @codewithromi.bsky.social · 29/09/2026
ufw tip: set your default to deny incoming, allow outgoing before you open any ports. stops you accidentally exposing stuff while you're mid-setup. wrote the whole thing up on the blog. #homelab #linux #selfhosted
codewithromi.com
Protect Your Homelab with UFW Firewall: 5-Minute Setup
Five-minute UFW firewall setup for your homelab, sane defaults, SSH/HTTPS allow, LAN-only rules, and verification. The exact config I use.
021
CodeWithRomi @codewithromi.bsky.social · 27/09/2026
unauthenticated path traversal to RCE is about as bad as it gets. CVE-2026-87902 is already being exploited in the wild, so if you're running WordPress, get to 7.1.2 now. wrote the whole thing up on the blog #selfhosted #cybersecurity #wordpress
codewithromi.com
WordPress 7.1.2 Patches a Critical Path Traversal to RCE: Update Now
CVE-2026-87902 lets an unauthenticated request include a local PHP file through page template resolution. It is on CISA's exploited list, and the fix is WordPress 7.1.2 or the backport for your branch.
010
CodeWithRomi @codewithromi.bsky.social · 26/09/2026
Deleted the log in its own? Better sleep with one eye open 👀
200
CodeWithRomi @codewithromi.bsky.social · 25/09/2026
tested cpu vs gpu vs npu for frigate object detection on the same mini pc. the npu was actually slower than the gpu for real-time inference. not what i expected. wrote the whole thing up #homelab #selfhosted #opensource
codewithromi.com
What Is an NPU Actually Good For? Testing CPU vs GPU vs NPU for Frigate
NPUs are showing up in more mini PCs, but are they actually useful for homelab AI workloads like Frigate object detection?
121
CodeWithRomi @codewithromi.bsky.social · 23/09/2026
tailcat lets you pipe data between machines over wireguard encryption with zero tailscale account needed. no control plane, no coordination server, just raw encrypted transport. wrote the whole thing up. #homelab #networking #opensource
codewithromi.com
tailcat: Netcat Over Tailscale's Data Plane, No Control Plane Needed
tailcat lets you pipe data between machines using Tailscale's encrypted WireGuard transport without needing a Tailscale account or coordination server.
020
CodeWithRomi @codewithromi.bsky.social · 21/09/2026
tailscale gives every device in your homelab a real IP that follows it anywhere. no port forwarding, no firewall rules. i access my entire lab from my phone now. wrote the whole thing up on the blog. #homelab #selfhosted #networking
codewithromi.com
How I Access My Entire Homelab from Anywhere with Tailscale
No port forwarding. No VPN server to maintain. Just secure remote access to every device in my homelab from anywhere in the world via Tailscale's mesh.
020
CodeWithRomi @codewithromi.bsky.social · 19/09/2026
if your APC UPS has a SmartSlot, you don't need to spend $150+ on a network card. OpenNMC is an open-source drop-in that gets you NUT and MQTT monitoring for almost nothing. wrote the whole thing up. #homelab #selfhosted #opensource
codewithromi.com
OpenNMC: The Open-Source Replacement for Expensive APC Network Management Cards
OpenNMC is an open-source card for APC SmartSlot UPS units that gives you NUT and MQTT monitoring without paying for APC's pricey network management cards.
130
CodeWithRomi @codewithromi.bsky.social · 17/09/2026
jellyfin 12.0's database migration is one-way, so you can't just roll back if something breaks. back up your config folder before you touch anything. full guide on the blog #jellyfin #selfhosted #docker
codewithromi.com
Jellyfin 12.0 Is Out: How to Upgrade Your Homelab Media Server
Jellyfin 12.0 is out, and its database upgrade is one-way. Here's how to move your Docker or Portainer stack over safely.
010
CodeWithRomi @codewithromi.bsky.social · 16/09/2026
Definitely learn from my mistakes 😂
100
CodeWithRomi @codewithromi.bsky.social · 15/09/2026
Yep, I test it by killing Pi-hole on purpose 😅 My always-on box health-checks it, and if it stops responding, a scoped Tailscale token flips MagicDNS over to Cloudflare (1.1.1.1). I confirm clients still resolve, bring Pi-hole back, then watch it fail back.
000
CodeWithRomi @codewithromi.bsky.social · 15/09/2026
if you self-host Forgejo, drop what you're doing and update to 16.0.4 or 15.0.8 LTS. there's a critical RCE bug (CVE-2026-89094) being patched and skipping this one isn't worth the risk. wrote it all up on the blog #selfhosted #homelab #opensource
codewithromi.com
Forgejo 16.0.4 Patches a Critical RCE Vulnerability: Update Now
Forgejo 16.0.4 and 15.0.8 LTS fix a critical remote code execution bug, CVE-2026-89094. If you self-host Forgejo, this update is not optional.
010
CodeWithRomi @codewithromi.bsky.social · 15/09/2026
Yeah my experience definitely had the entire house upset. 😭. Now I also have it running though Tailscale magic dns so all my devices are on it. With backup ofc to cloudflare.
100
CodeWithRomi @codewithromi.bsky.social · 14/09/2026
full video here 👇 www.youtube.com/watch?v=Tk21DifZM70
000
CodeWithRomi @codewithromi.bsky.social · 14/09/2026
the thing that took my whole house offline: setting pi-hole as your dns BEFORE testing it. always validate on one device first. saved me a second argument with my wife. full walkthrough in the thread 👇 #homelab #selfhosted #networking
321
CodeWithRomi @codewithromi.bsky.social · 14/09/2026
zero commands is a real threat model tbh. mine started at like 5 read only ones and even then i sat there watching the first docker ps go through like i was releasing a wild animal back into nature 😂
210
CodeWithRomi @codewithromi.bsky.social · 14/09/2026
That’s a really good point. A long-lived domain gives you history, logs, and natural changes to learn from, then snapshotting that state lets you turn it into a reproducible starting point too. Best of both worlds.
000
CodeWithRomi @codewithromi.bsky.social · 14/09/2026
That makes a lot of sense. The reproducible baseline is probably the part I like most. Especially for a cyber lab where breaking things is basically the point 😂. Being able to tear it down and get back to a known-good AD environment quickly is huge.
120
CodeWithRomi @codewithromi.bsky.social · 14/09/2026
Really cool project. I’ve been building out my own homelab and like the idea of realistic AD data instead of a few manually created users. For a cybersecurity lab, would you recommend rebuilding the AD domain regularly, or keeping it long-lived and reseeding scenarios?
210
CodeWithRomi @codewithromi.bsky.social · 13/09/2026
full video here 👇 www.youtube.com/watch?v=DmQ3m43LhC8
000
CodeWithRomi @codewithromi.bsky.social · 13/09/2026
giving ai live access to your homelab? first thing i did was lock it to a fixed command allowlist over ssh. read-only, no surprises. full walkthrough in the thread #homelab #selfhosted #automation
241
CodeWithRomi @codewithromi.bsky.social · 13/09/2026
full video here 👇 www.youtube.com/watch?v=DmQ3m43LhC8
000
CodeWithRomi @codewithromi.bsky.social · 13/09/2026
if your ai can't see live data, it's just guessing. i gave mine read-only ssh access + a fixed command allowlist so it reads real stats without touching anything. full walkthrough in the thread #homelab #selfhosted #automation
121
CodeWithRomi @codewithromi.bsky.social · 13/09/2026
bookstack organizes your youtube scripts into books, chapters, and pages. way more intuitive than notion for video planning, and it costs nothing to run. wrote the whole thing up on the blog #selfhosted #homelab #opensource
codewithromi.com
Self-Hosted Notion Alternative: BookStack for YouTube Creators
Stop paying $10/month for Notion. BookStack gives you a self-hosted wiki for free, perfect for YouTube scripts, video ideas, and homelab documentation.
021
CodeWithRomi @codewithromi.bsky.social · 12/09/2026
That’s a really good point. A lot of IoT devices hardcode their own DNS, so redirecting outbound port 53 back through Pi-hole helps close that loophole. Definitely something I should add to the guide 👍
010
CodeWithRomi @codewithromi.bsky.social · 11/09/2026
pi-hole on proxmox tip: set your router's DHCP to point at pi-hole's IP, not the other way around. skipped that step and wondered why ads still showed up. wrote the whole thing up on the blog #homelab #proxmox #selfhosted
codewithromi.com
Block Ads on Every Device: Pi-hole on Proxmox (Full Setup Guide)
Block ads and trackers on every device with Pi-hole on Proxmox, 20-minute setup, plus the gotchas I hit live so you don't troubleshoot blindly.
130
CodeWithRomi @codewithromi.bsky.social · 10/09/2026
Actually excited to see the reviews on this device. Already see people saying it’s two iPhone airs 😂.
000
CodeWithRomi @codewithromi.bsky.social · 09/09/2026
one caddy reverse proxy handles routing for all five of my sites, no nginx config chaos. point your dns, drop a caddyfile block, done. wrote the whole thing up on the blog #homelab #selfhosted #docker
codewithromi.com
How I Run Multiple Websites From One Homelab Server
Host five sites on one box: Proxmox + Docker + Caddy as a reverse proxy + Cloudflare for DNS and TLS. Full architecture and the Caddyfiles I actually use.
020
CodeWithRomi @codewithromi.bsky.social · 07/09/2026
the recidive jail in fail2ban is underrated. it watches your other jails and perma-bans repeat offenders automatically. set it once and stop babysitting your logs. full guide on the blog #homelab #selfhosted #cybersecurity
codewithromi.com
Fail2Ban Setup (Homelab Security Part 2)
UFW blocks ports; Fail2Ban blocks the attackers trying to get through them. The exact jail.local, custom Ghost-login filter, and recidive setup I run.
030
CodeWithRomi @codewithromi.bsky.social · 05/09/2026
if your discord bot crashes at 2am, you don't have to be awake to fix it. a three-tier ai fallback (local first, cloud only if needed) can catch and patch its own bugs. wrote the whole thing up #homelab #automation #opensource
codewithromi.com
Building an AI-Powered Self-Healing Discord Bot
A Discord bot that detects its own bugs and fixes them using a three-tier AI fallback: local Phi-3 → Groq cloud → Claude API. The whole architecture, with code.
030
CodeWithRomi @codewithromi.bsky.social · 03/09/2026
asking an llm 'explain X' is the worst way to learn from it. ask it to give you an analogy, then poke holes in it. you learn 10x more. wrote the whole thing up on the blog #homelab #linux #opensource
codewithromi.com
How to Use LLMs as Your Personal Tutor for Complex Technical Topics
Stop using AI as a search engine. Here's a structured methodology for using LLMs to actually understand hard technical topics.
020
CodeWithRomi @codewithromi.bsky.social · 01/09/2026
a velcro cable wrap on the back of your mini rack panel saves more headaches than any fancy gear. tiny thing, massive difference. wrote the whole thing up on the blog #homelab #selfhosted #networking
codewithromi.com
Mini Rack Accessories You Didn't Know You Needed (But Definitely Do)
Filling a 10-inch mini rack is the easy part. Here are the accessories that make it actually usable.
010
CodeWithRomi @codewithromi.bsky.social · 30/08/2026
full video here 👇 www.youtube.com/watch?v=_ZCQMA-fkt4
000
CodeWithRomi @codewithromi.bsky.social · 30/08/2026
if you run ollama locally but still want cloud fallback when a model struggles, you can route between them automatically and have it return to local when it recovers. full walkthrough in the thread #homelab #selfhosted #docker
130
CodeWithRomi @codewithromi.bsky.social · 30/08/2026
full video here 👇 www.youtube.com/watch?v=_ZCQMA-fkt4
000