Containers Without the Chaos: Docker Compose, Reverse Proxies, Automatic HTTPS and Single Sign-On for Self-Hosters

Containers Without the Chaos is a hands-on guide to running self-hosted apps on Docker without the mess: one Docker host in a Proxmox VM, one folder per stack, one reverse proxy as the only front door, real trusted HTTPS for internal names without opening a single port, one good login in front of every app, updates you choose instead of surprises, and backups you have actually restored. It starts with where Docker should live on Proxmox (and what the Proxmox docs recommend), installs Docker Engine and the Compose plugin from Docker's own repository with log rotation set before the first container, and explains the firewall surprise that catches nearly everyone. Then it walks through every part of a compose.yaml you will use, builds a tidy /srv/stacks layout with a shared proxy network, puts Caddy in front of everything with a DNS-01 wildcard certificate and local DNS, adds Authelia single sign-on with forward auth and two-factor, and finishes with secrets, a calm update routine with Diun notifications, two-layer backups and a troubleshooting routine that starts with evidence instead of deleting things.

What you get

• Docker on Proxmox, done the recommended way: VM or LXC tradeoffs, sizing, a separate data disk
• The official Docker install on Debian, log rotation in daemon.json, and why published ports skip ufw
• Every part of a compose.yaml explained: tags, bind mounts vs named volumes, networks, env files, restart policies, healthchecks, depends_on conditions, resource limits and privilege settings, plus a complete copy-ready stack
• One stack per folder under /srv/stacks, a naming scheme and one shared proxy network
• Caddy as the only front door, with a short Traefik labels section for comparison
• Real HTTPS for internal names: a custom Caddy build with a DNS module, a wildcard certificate over DNS-01, split DNS at home
• Authelia single sign-on: forward auth, users, access rules, secrets from files
• Compose secrets, pinned tags, Diun update notifications (Watchtower is archived), and backups you can restore
• A troubleshooting routine (ps, logs, inspect, exec, network tests), Dockge or Portainer behind 2FA, and Podman in one page

63 pages, 22 diagrams plus a chapter-opener graphic for every chapter, a checklist and a cheat sheet. PDF and EPUB. Homelab the Right Way, Book 8.

Not sure yet? Read the free sample first: the cover, the full table of contents and all of Chapter 3, "Anatomy of a compose.yaml" (every part of a compose.yaml you will use, with a complete copy-ready stack), at https://payhip.com/b/1qoiW

Also in a bundle: Everything Bundle: every ebook in the store, $89 · Homelab Bundle, $59. Code RIGHTWAY20 = 20% off any order through Oct 31.