Docker on heezy.blog

Docker 28, NVIDIA GPUs, and the cgroupns Trap

Sun, 19 Apr 2026 00:00:00 +0000

Plex was pegging the CPU on every transcode. The GTX 1070 sitting in the box was doing nothing. The GPU was passed through to the container correctly, the NVIDIA driver capabilities were set, the device requests were in the compose file. Everything looked right. It wasn’t.

Hosting a Blog on Kubernetes Through Cloudflare with Zero Exposed Ports

Sun, 12 Apr 2026 00:00:00 +0000

I wanted a blog. Not a WordPress instance, not a hosted platform, not something I pay monthly for. A static site built with Hugo, baked into a container image, served by nginx, tunneled through Cloudflare, running on my Kubernetes cluster at home. No ports exposed to the internet. No public IP pointing at my house. Just a Cloudflare Tunnel and a reverse proxy.

Split DNS, MetalLB, and the dnsmasq Debugging Saga

Sun, 12 Apr 2026 00:00:00 +0000

This is the story of building split-horizon DNS for a homelab with four VLANs, a FortiGate firewall, a 5-node MicroK8s cluster, and a Cloudflare tunnel. Then spending hours debugging why dnsmasq wouldn’t answer queries despite the port being open, the firewall allowing traffic, and the container running fine. The entire implementation and debugging session was driven through MCP tooling.