Self-Hosting Notes

Write-ups of real failures on an ~80-container production homelab running Caddy, Authentik and Docker, and the fixes that held.

Any container on your server can log in as you

Header auth behind Caddy + Authentik has a side door, and Caddy 2.10 let users forge their own groups. The two-layer fix, with a lab to reproduce it.