Self-Hosting on Support Tools

Plex Media Server CVE-2026-96656 (CISA KEV): Check, Investigate and Patch

Tue, 27 Oct 2026 09:00:00 -0500

On 2026-10-20, CISA added four Plex Media Server vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-96656, CVE-2026-96654, CVE-2026-96655 and CVE-2026-96652. A fifth bug from the same advisory, CVE-2026-96651, is not in KEV, but it is the piece that turns an “admin only” code execution bug into something a regular session holder can reach. All five are fixed in Plex Media Server 1.43.3.10861. If your home media server is older than that, it needs attention today.

This guide is for self-hosters running Plex on Debian or Ubuntu (with a short section for Docker). It covers three questions in order: am I vulnerable, was I compromised, and how do I patch. It also covers the apt signing key gotcha that leaves many servers silently stuck on old builds after an Ubuntu release upgrade.

Running K3s in an IPv6-Only Environment with Cilium

Sun, 01 Jun 2025 00:00:00 -0500

Most guides for Kubernetes focus on IPv4 by default, but IPv6 is no longer a second-class citizen. In this post, I walk through configuring a K3s cluster using only IPv6, with Cilium as the CNI, and BGP to announce addresses to my router. This setup runs entirely on a public IPv6 prefix—no dual-stack, no IPv4 fallback.

Qwen 2.5 Coder Models: Powerful Open-Weight LLMs for Self-Hosting on Consumer Hardware

Tue, 22 Apr 2025 00:00:00 -0500

Qwen’s latest code-specialized language models are creating significant excitement throughout the AI community. The Qwen 2.5 Coder model family stands out by offering fully accessible weights and exceptional performance even on modest consumer hardware - a rarity in today’s landscape of increasingly resource-hungry AI systems.