Home labs, smart home & privacy

AYX / KNOWLEDGE BASE

Run, secure and connect technology at home.

Source research checked: 2026-10-14

26

Home labs, Raspberry Pi and self-hosting

LAB-001

Is a Raspberry Pi enough for a home lab or small self-hosted service?

A Raspberry Pi can support a useful home lab when its processor, memory, storage, network and power arrangements match the workload. It is not automatically the cheapest or most reliable choice for every service. Include storage, cooling, accessories, backups and administration when comparing it with a small PC or hosted service.

Explanation, examples & sources

Start with one recoverable service and measure resource use before adding more. Use the correct power supply and supported boot/storage configuration for the exact model. Decide which data must survive hardware failure and keep recoverable copies elsewhere. A learning environment can tolerate experiments that a public website cannot. Separate development from a service that other people depend on, and document how to rebuild it rather than relying on an unrecorded sequence of manual changes.

References

Explore next

LAB-002

What is Docker, and is a container the same as a virtual machine?

Docker packages applications into containers with their required user-space environment. Containers share the host's kernel rather than each running a complete separate operating-system kernel like a conventional virtual machine. An image is the packaged template; a container is a running or stopped instance created from that image.

Explanation, examples & sources

Keep application configuration reproducible, but store important runtime data in an intentionally managed persistent location. Treat image updates as software changes requiring a test and rollback plan. Containers do not remove the need for host security, backups, resource limits or monitoring. A container image built for one processor architecture may also need a different build for another. Before deployment, identify what is disposable and what would be lost if the container were recreated.

References

Explore next

LAB-003

What should a WordPress or self-hosted-service backup contain?

A recoverable WordPress backup needs both the database and the relevant files, including uploads and site-specific configuration or code. Copying a Docker image alone does not capture the live site's content. For any service, identify all persistent data and prove that a backup can be restored into an isolated environment.

Explanation, examples & sources

Record versions and dependencies, protect credentials separately and keep at least one copy outside the machine being protected. Use an application-consistent database export or supported backup method rather than assuming a live filesystem copy is coherent. Test recovery without overwriting production. Define acceptable data loss and downtime so backup frequency and restoration effort match the service's importance. A successful backup job is useful evidence, but a verified restore is stronger evidence that the recovery plan works.

References

Explore next

LAB-004

How can I access a home lab remotely without exposing everything to the internet?

Expose only the access that is actually needed, using supported authentication, encrypted connections and maintained software. A private remote-access path can be preferable to opening every service port publicly. The right design depends on the services, users and recovery needs; remote convenience should not grant unrestricted access to the entire home network.

Explanation, examples & sources

Separate administration from public applications, use individual accounts and protect recovery credentials. Restrict privileges and review which devices or services are reachable after login. Keep a tested local recovery path in case a remote-access change fails. Do not copy firewall commands from a generic tutorial without understanding the network. VPNs and tunnels reduce some exposure but do not make weak passwords, vulnerable services or overly broad permissions harmless.

References

Explore next

LAB-005

What should I check before repeatedly rebooting a failing home server?

Preserve the evidence first: service status, recent logs, disk space, memory, storage errors and the timing of the failure. A reboot may restore service temporarily without identifying the cause. For a database-backed website, distinguish application failure, database failure, storage exhaustion and network or name-resolution problems.

Explanation, examples & sources

Compare local and external checks, identify which component stopped responding and record recent changes. Confirm that persistent storage is mounted where expected before recreating containers. Avoid deleting volumes or restoring an old database as a routine repair. Once the cause is understood, test the smallest corrective change and verify both service health and data integrity. A watchdog can aid recovery, but repeated watchdog resets should trigger investigation rather than being treated as a complete reliability solution.

References

Explore next

27

Smart homes and home connectivity

HOME-001

What is a smart home, and where should I start?

A smart home connects devices and automations to perform useful household tasks. Start with one clear need—such as a light reacting to occupancy—rather than buying many incompatible products. The best first project remains understandable, recoverable and usable manually when the network, controller or cloud service is unavailable.

Explanation, examples & sources

Define the trigger, desired action, override and failure behaviour before selecting hardware. Check electrical installation needs, device support, household privacy and whether everyone can operate the result. Start with a reversible, low-consequence task and observe false triggers before expanding. A voice assistant is an optional interface, not the whole system. Avoid making essential household functions depend on a fragile experiment or an undocumented account that only one person can access.

References

Explore next

HOME-002

How do Matter, Thread, Zigbee and Wi-Fi differ?

Matter specifies how supported smart-home devices communicate at the application level. Thread is a low-power IP mesh network; Wi-Fi is another networking technology. Zigbee is a different protocol ecosystem. Matter can use Thread or Wi-Fi, so “Matter” and “Thread” are not interchangeable labels and do not eliminate all controller requirements.

Explanation, examples & sources

For a Matter-over-Thread device, check both a compatible Matter controller and a Thread border router. A border router forwards network traffic; it is not necessarily the device's application controller. Verify the exact functions exposed by the product and platform, rather than assuming every manufacturer-specific feature is standardised. Before purchase, write down the device transport, supported ecosystem, onboarding method and update route. This is more reliable than choosing solely from logos on the box.

References

Explore next

HOME-003

Will my smart home still work when the internet goes down?

Some functions can operate locally, while others depend on cloud services, remote authentication or internet-based integrations. The answer is specific to each device and automation. Local network availability, controller power and device connectivity are also separate from internet access, so test the actual failure scenario rather than assuming “local” means independent of everything.

Explanation, examples & sources

List which routines require remote data, voice processing or vendor servers. Test an internet outage while retaining the local network, then separately consider a controller or power failure. Keep manual switches and suitable overrides available. Local operation can improve resilience, but it still requires backups and maintenance. Do not design access, heating or other consequential functions around an untested assumption that all components keep working offline.

References

Explore next

HOME-005

What should I check before buying a connected household device?

Check useful functionality, compatibility, update support, privacy, subscription dependence and manual operation—not just whether an app exists. Ask what happens if the manufacturer stops supporting the device or the household changes platforms. A connected product should solve a real problem without creating an unreasonable maintenance or account-management burden.

Explanation, examples & sources

Read the exact support policy and verify which features require a subscription or cloud account. Check data export, account deletion, replacement parts and reset/ownership-transfer procedures. For shared homes, plan permissions and guest use. For cameras or microphones, consider placement and who can access recordings. Keep a record of model, firmware and purchase details. Features that are merely promised for a future update should not be counted as delivered purchase benefits.

References

Explore next

HOME-004

How should I troubleshoot unreliable Wi-Fi or smart-home connectivity?

First identify which connection fails: the device's radio link, local IP network, controller discovery or cloud service. These are different faults. Check power, placement, signal conditions, firmware and recent network changes before replacing hardware or resetting every device, which can destroy useful configuration and make diagnosis harder.

Explanation, examples & sources

Test one affected device near the access point or border router and compare it with a working device. For Matter, verify required local network reachability and discovery rather than assuming a guest network or segmented network permits the necessary traffic. Inspect logs and change one variable at a time. A mesh product is not a guarantee of coverage; placement and the connection between access points still matter. Preserve a configuration backup before changing the network topology.

References

Explore next

29

Personal cybersecurity and privacy

SEC-001

What should I do first to protect my online accounts?

Prioritise your main email account, use unique credentials and enable strong additional authentication or passkeys where supported. Protect account recovery as carefully as normal login. Email often links to password resets for other services, so losing it can create a wider chain of account-access problems.

Explanation, examples & sources

Use a reputable password manager or supported passkey system, and store recovery codes securely outside the device you might lose. Review signed-in devices and remove access you no longer recognise or need. Do not approve an authentication request you did not initiate. When replacing a phone, verify your new authentication and recovery methods before removing the old ones. The goal is both preventing unauthorised access and avoiding a self-inflicted lockout.

References

Explore next

SEC-002

How are passkeys different from passwords and authenticator codes?

Passkeys use public-key authentication rather than a reusable shared password. They are designed to resist phishing by binding authentication to the legitimate service. Authenticator codes provide an additional login factor but can still be entered into a deceptive page. Recovery and device management remain important whichever method is used.

Explanation, examples & sources

Check whether the passkey is device-bound or synchronised through an account or manager, and understand how access is recovered if the device is lost. Secure the account that synchronises credentials and maintain a suitable backup method. Do not remove every alternative recovery path before testing the new setup. A passkey reduces particular credential attacks, but it does not automatically protect an unlocked device, a compromised session or every action performed after login.

References

Explore next

SEC-003

Can I safely keep using a router or smart device after updates stop?

End of support means newly discovered weaknesses may no longer be fixed. Continued use is therefore a risk decision, not automatically safe because the device still works. Exposure, functionality and available isolation matter. Replacing an internet-facing unsupported router generally deserves greater priority than keeping an isolated, non-sensitive experimental device.

Explanation, examples & sources

Confirm the exact model and support status from the manufacturer, not the date of the last update alone. Remove unnecessary remote administration and services while planning a supported replacement where appropriate. Keep configuration and recovery information, and check compatibility before changing central network equipment. Isolation can reduce exposure but cannot repair vulnerable firmware. Avoid treating a firewall or a strong Wi-Fi password as a complete substitute for maintained software.

References

Explore next

SEC-004

How can I recognise phishing, fake support and malicious copy-paste instructions?

Be suspicious of unexpected requests to sign in, approve access, install software or paste commands, even when the page looks professional. Verify the request through a separate trusted route. A message's urgency, familiar logo or apparent sender name is not sufficient evidence that the action is legitimate.

Explanation, examples & sources

Open the service through a known bookmark or app instead of the supplied link. Do not paste unknown commands into a terminal to “verify you are human” or repair a problem reported by an unsolicited page. Contact support through independently located details. After entering credentials or approving a suspicious request, use the legitimate service to secure the account and review sessions and connected access. Preserve useful evidence and follow the relevant provider or local authority's reporting guidance.

References

Explore next

SEC-005

Is private browsing, a VPN or local AI enough to make my activity private?

No single label establishes complete privacy. Private browsing, a VPN and local inference address different parts of an information flow. Accounts, endpoints, stored files, logs, cloud tools and telemetry can still expose data. Evaluate who receives which information and under what retention and access arrangements.

Explanation, examples & sources

Map a representative task from input to storage and deletion. For AI, distinguish local model computation from web search, connected documents and external tools. For a network service, distinguish encrypted transit from access by the destination. Use the least data and permissions needed, and verify configuration rather than assuming defaults. This is a practical privacy review method, not a guarantee of anonymity or a statement that every service has the same data policy.

References

Explore next

← Back to all subjects