Est. 2026 · For homelab operatorsArchive  ·  RSS  ·  Daily 07:00 PT

Homelab Hero · No. 004

One incident. Three calls.

Tuesday, 6:40 AM. A critical unauthenticated RCE is announced in the PHP your file-sharing app runs on, and your instance is reachable from the internet through your reverse proxy. The fixed release shipped yesterday, and the app holds your household's documents.

Your call:

A. Restart the container — a restart picks up the patched image

B. Pull the fixed release, recreate the container, restart the PHP workers, and confirm the new version before reopening access

C. Take the app offline and patch it during Saturday maintenance

100 Hero Points for the right call — 200 on the Friday Boss Fight. From Issue No. 004 of The Homelab Herald. Your result lands on the next page, ready to share.