Skip to content

Better HomeLab Secret Management // Infisical Tutorial

Docker Security Automation

Better HomeLab Secret Management // Infisical Tutorial

This allows YouTube videos and product images hosted on Amazon. YouTube may set cookies when a video loads. Read the privacy policy

Watch on YouTube instead (opens in a new tab)

Video write-up

HomeLab secrets usually start simple: one .env file next to a Docker Compose stack. But over time, those secrets spread into GitLab variables, deployment scripts, copied folders, backups, notes, and places where they should not live.

In this video, I show a practical Infisical workflow for managing HomeLab and Docker secrets. We’ll install and configure Infisical, create a secrets project, explain environments like dev, staging, and prod, manage secrets in folders, sync secrets to GitLab, use the Infisical CLI, and inject secrets into a Docker Compose workflow without committing real values into a .env file.

I’ll also explain the caveats: Infisical is great as a central source of truth, but automated systems like CI/CD, Portainer, Arcane, Docker Compose, and other deployment tools still need a proper way to receive those secrets.

More videos with similar topics.

25:59

Dockhand: A Smarter, Safer Docker Manager

In this video, I’m taking a look at Dockhand, a Docker management platform focused on safer remote Docker management, smart updates, and vulnerability-aware update workflows. We’ll install Dockhand, connect a Docker environment, look at th…

Docker Security Automation
Write-up
11:59

Boilerplates 0.2.0 is HERE // Big Update

Boilerplates 0.2.0 is here, and this update changes quite a lot about how my templates work! In this video, I show you what changed in Boilerplates 0.2.0, why the app and template library are now split into separate repositories, how the n…

Docker Automation
Write-up
23:30

Caddy: Everyone Says It’s the EASIEST… I Tested It

If you want a reverse proxy that gets out of your way, Caddy is one of the easiest places to start. In this video, I test it in a practical homelab setup: serving a static site, proxying Docker apps, getting HTTPS working, and showing wher…

Docker Networking Security
Write-up
33:31

Block stupid Ads and manage DNS // AdguardHome Tutorial

In this video, we’ll dive into AdGuard Home, a powerful and FREE alternative to Pi-hole for network-wide ad blocking. Discover how AdGuard Home offers enhanced features like built-in DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT) for encrypte…

Docker Networking Security
Write-up
19:09

Terraform + Ansible: The DevOps Workflow That Actually Works

Terraform vs Ansible is often the wrong debate. In this video, I’ll explain Infrastructure as Code, compare how Terraform/OpenTofu and Ansible actually work, and use my Proxmox HomeLab as one consistent example. We’ll look at where their r…

Terraform Ansible Automation
Write-up
20:16

VLANs for Proxmox + OPNsense: My Homelab Setup

If your homelab is still running on one flat network, everything is simple — until it is not. In this video, I show how VLANs help split a homelab into cleaner network zones for private devices, production services, public-facing systems,…

Proxmox Networking Security
Write-up