Published: May 25, 2026 Category: Security / Docker / Cloudflare / Ghost CMS Introduction On May 25, 2026, we identified suspicious outbound email activity originating from a self-hosted Ghost CMS environment running inside Docker containers. The incident ultimately traced back to a vulnerable Ghost CMS installation that allowed attackers to gain access to

This guide outlines a clean and secure method for deploying a self-hosted Ghost publishing platform using Docker, with external access handled through a secure tunnel. The approach avoids exposing ports directly to the internet while keeping the deployment simple and maintainable. Architecture Overview The deployment consists of three core components:

Building a Secure Home Server Architecture with Private and Public Access Separation In modern self-hosted environments, one of the biggest challenges is balancing accessibility with security. This setup demonstrates a practical approach to exposing services publicly while keeping core infrastructure protected and privately managed. Overview The architecture separates access into

One of the challenges of running services from a home lab is exposing applications to the internet safely. Traditionally, this meant opening ports on the router and forwarding traffic to internal servers. While that works, it also exposes your network directly to the public internet. A better approach is to