Selfhosted

Hello everyone! I was thinking about starting a website where to dump some guides on stuff Iearn about selfhosting and general IT stuff.

I don't want a WordPress or similar. I want static pages (but I'm ok with some JavaScript for navigation maybe, or for proper display on different kind of devices). Ideally I'd like to host it on an AWS S3 bucket since it has the built-in option for static hosting.

I could even go back to the '90s and do it myself from scratch in textedit and html by hand, but I'm pretty sure there are better options out there.

I took a look at Hugo but even that it seems overly complicated for what I need.

Any ideas or suggestions?

Thanks!

In the last couple of weeks, I've started getting this error ~1/5 times when I try to open one of my own locally hosted services.

!

I've never used ECH, and have always explicitly restricted nginx to TLS1.2 which doesn't support it. Why am I suddenly getting this, why is it randomly erroring, then working just fine again 2min later, and how can I prevent it altogether? Is anyone else experiencing this?

I'm primarily noticing it with Ombi. I'm also mainly using Chrome Android for this. But, checking just now; DuckDuckGo loads the page just fine everytime, and Firefox is flat out refusing to load it at all.

! Firefox refuses to show the cert it claims is invalid, and 'accept and continue' just re-loads this error page. Chrome will show the cert; and it's the correct, valid cert from LE.

There's 20+ services going through the same nginx proxy, all using the same wildcard cert and identical ssl configurations; but Ombi is the only one suddenly giving me this issue regularly.

The vast majority of my services are accessed via lan/vpn; I don't need or want ECH, though I'd like to keep a basic https setup at least.

Is anyone using dockge?

I used it for a bit and found it very intuitive but checking their github makes me wonder if it is still developed? Last commit was five months ago.

Hello there,

I'm looking for a self-hosted rental system. It's for a smaller institution, which is renting out hardware (for free and non-commercial use), and the current system (EasyJob) is way too bloated.

The service should be publishable to the internet, ideally hostable via Docker or a ProxMox VM, and should have a user-management.

I was thinking about using something like an e-commerce service?

Do you have a good idea regarding this topic?

Best regards

I'm looking at getting a 10 gigabit network switch. I only have 3 devices that could use that speed right now but I do plan on upgrading things over time.

Any recommendations?

Who can suggest an ethical SMTP provider for low volume transactional mail? I'm willing to pay up to 2€/month for a few hundred mails per month.

Spacebar is a free, opensource selfhostable discord-compatible chat, voice and video platform.

• Discord-compatible (Use all your custom clients/bots with minimal changes)
• Selfhostable (Server)
• Open Source (GitHub Organization)
• Configurable (Configure every aspect and limits to your needs)
• Decentralized (no abuse of power and doesn't have a single point of failure)
• Extendable (secure and cross-platform plugin system)
• Themeable (cross-platform theme system with design editor)
• Secure (publicly audited and hosted FOSS software for transparent foundation in terms of security)

Hey, remember me ?

I posted about some entreprise SSDs here before, and now I made a full blog post about their insides! With even more pictures!

I hope you enjoy it :)

Any recommendations for a good non-subscription-based alternative? I could setup syncthing for files, and I have URbackup for images, but I always relied on Macrium more than URbackup. What do other people use?

>Why have you removed the one-time license option?

>Many of our home customers' feedback indicated a preference for the certainty provided by an annual plan. The annual plan offers assurance that you always have access to the latest version with innovations such as improvements we’ve made in compression speeds and algorithms. It also ensures you have access to critical updates and are protected against new threats and risks. Lastly, our annual plan ensures you always have access to technical support (one-time licenses only offer 12 months of support).

And it failed spectacularly.

We only needed a simple form, but we wanted to be fancy, so we used "nextcloud forms".

The docker image automatically updated the install to nextcloud 30, but the forms app requires nextcloud 29 or lower. No warning whatsoever. It's an official app, couldn't they wait that it was ready for NC 30 before launching it? The newsletter boasts "NC hub 9 is the best thing after sliced bread" yet i don't see any difference both in visual or performance compared to NC hub 2

Conclusion: we made our business to rely on nextcloud forms as a signup form, but the only reason we were using it was disabled who knows how many weeks ago.

So the final thing tethering me to macOS is Apple Photos, which is really a fantastic program.

PhotoPrism looks like it’s improving quickly, but I was curious to know how it’s going today with regards to:

• Search filters
  • Date
  • Place
  • Object/person recognition
  • Text recognition
• Live Photo support
• Ease of importing
• Album support, including smart albums
• Built-in touch ups
• General stability

Hello everyone, I have some questions and need food for thought about clamAV. First, do you use it and why ? If yes, how are you running it ? I plan to maybe use it for nextcloud (and *arr stack later)

I want to be able to access (watch and record) a couple of FTA tv channels on several devices on my LAN.

I already have a couple of USB tuners so I don't want to spend money on HDHomerun.

I did some research and most people recommended TVheadend.

I've also stumbled upon minisatip but there is almost no documentation for it.

Any recommendations?

Hey everyone! :)

I am currently looking to replace Obsidian with a self-hostable alternative (that preferably also uses Markdown - but it's not a must) but instead of storing the files directly on disk has a way to have all the files within in an encrypted vault / binary format.

Reason being I have very very sensitive data that needs to be stored (employee & medically related).

I read that Logseq used to support this feature but it has since been deprecated, some light googling didn't surface any results other than that so I would be delighted if anyone had any suggestions!

Thanks so much in advance for any and all help! :)

edit: Forgot to mention that it needs to support Linux as well as Android

I have quite an extensive collection of media that my server makes available through different means (Jellyfin, NFS, mostly). One of my harddrives has some concerning smart values so I want to replace it. What are good harddrives to buy today? Are there any important tech specs to look out for? In the past I didn't give this too much attention and it didn't bite me, yet. But if I'm gonna buy a new drive now, I might as well...

I'm looking for something from 4TB upwards. I think I remember that drives with very high capacity are more likely to fail sooner - is that correct? How about different brands - do any have particularly good or bad reputation?

Thanks for any hints!

Hello, not sure how on-topic is this, but I'll ask anyway. Since I'm wrapping my head around this topic for long time to no avail.

I'm planning to buy NAS mostly to store my music, pictures and documents on my place. At the beginning I'd like to keep it simple so I don't plan to install billion things on it. I would definitely want to install adblocker like PiHole/AdGuard. I'm also eye-ing Tailscale for remote access (no public IP) and Jellyfin/Emby for music streaming at home. So apart from usual NFS/SMB file shares, let's say there are these three apps I'd like it to run at the beginning.

The NAS has to be as quiet as possible, so even thought it's more expensive, I'll have to go with SSD drives. Looking at prices two 2 TB (in mirror RAID) should be doable and should be enough space for me, at least for now. I'm no hoarder.

I have few other "must-haves":

1. decently working companion app that automatically backups pictures from at least 2 android phones (my wife needs to deal with it and she's not really friends with tech stuff)
2. possibility to upgrade storage other than just replacing drives for bigger ones
3. simple, easy to use (both setup and "rescue") scheduled backups to external USB drive
4. I knew I had something else but it completely slipped out of my head

That brings me to what's available. I almost pulled the trigger on Synology DS423+. It looks reasonable powerful, I can put 4 SATA SSDs and 2 M.2... that's what I thought. But it turned out it's not possible to use M.2 as storage with anything but Synology's own overpriced drives that aren't even available in my country. So, it's just four SATA drives, which is... "not great, not terrible" as some would say. What seems to be a big plus is the DSM. Everyone I know really praises it. Plus it seems to have very good reputation in terms of longevity of devices.

Then there is QNAP. Apparently their system QTS is not as polished as DSM, but everything needed should still be there. There's similarly priced, similarly equipped TS-462. It's just dual-core CPU, but has more RAM (not upgradeable though) and it seems it can accept M.2 as storage at least. As per internet research, the build quality is just as good as Synology.

And then there's Asustor, which I heard about years ago and then completely forgot they exist. Last week my friend mentioned this name, so I checked their offering too. Well, Nimbustor AS5402T looks absolutely the best on paper! Well, it only has two regular drives, because it's got FOUR M.2 slots! I assume it's because SATA is on decline, but M.2 SSDs are cheaper than SATA nowadays so it's actually better for me to have the numbers reversed. And it's cheapest on top of it. So where's the catch? I presume the ADM system is piece of shit. Right? Or is it build quality that's bad? Reliability? IDK.

Which of these three do you think would be the best for my needs? I'm more than open to other offerings and suggestions too! Thank you very much!

Asking for clarification as what I've read suggests yes, but is also sometimes coupled with advice to (still?) set a static IP outside of the DHCP address range as well.

Thanks in advance!

I want to set up location sharing for my family/friends, but

• without having a closed source app having access to my location/sensors all the time
• be able to choose when I want to share

Any recommendations?

Edit for those who find this later: I ended up choosing Traccar suggested by @mbirth@lemmy.ml, but big thanks to everyone who brought some ideas to the table! I'll leave my configs here.

My Docker Compose file

My traccar.xml

Hi,

I've had Navidrome set up for a while and am really happy using Symfonium on andriod, however I'm struggling with a set up for home speakers.

I'm currently running mo0de on a raspi and using Symfonium to cast to mo0de via uPnP. However this is very janky and frequently crashes mo0de after 5-10 songs.

Is there anything better I can use? Is there anything that can use the subsonic api? Or something else I can cast to from Symfonium?

I am using Nextcloud for several years now without any issues but with update to Nextcloud 30 a few issues were introduced:

Most importantly file sharing via mail link is broken, bug was listed but no workaround or fix is known for now.

Also: Installing Enabling Apps via web client is broken if you are behind a reverse proxy. Workaround is to use the occ cli client to install, enable/disable addons.

And: RuntimeException image not found: image:apps/whiteboard.svg error that quickly fills your log if you do not have the whiteboard app installed. Workaround is to install the app.

Anyone else with similar experience since NC30? It seems to me that NC30 release was not very well tested?

Edit: Thanks for all the suggestions. I'm going to try sticking with syncthing and try the fork of the UI and see if that keeps everything working.

--

I want to sync files between my linux PC and Android phones (mostly for Obsidian notes).

Can anyone recommend a good real-time sync?

I've been trying syncthing, but despite turning off battery optimization for the app, it rarely sees the phone as connected. I don't want to have to remember to check syncthing every time I edit a note.

I use resilio for syncing between PCs but it looks like it has a high battery usage on the phone, as if it is frequently polling for changes.

I use FolderSync for occasional scheduled syncs (e.g. updating my MP3s from the server to my phone), but a scheduled sync either is frequent enough to affect battery or it risks sync conflicts.

Cloud services such as OneDrive, Dropbox and Google Drive don't show up as big battery drains, so I assume that they use change notifications from the OS instead.

Are there any real-time 2-way sync apps for phone that don't have big battery drain and are not for cloud providers?

I'm proud to share a major development status update of XPipe, a new connection hub that allows you to access your entire server infrastructure from your local desktop. It works on top of your installed command-line programs and does not require any setup on your remote systems. XPipe integrates with your tools such as your favourite text/code editors, terminals, shells, command-line tools and more.

Here is how it looks like if you haven't seen it before:

!Hub

!Hub Alt

!Browser

More terminal integrations

There is now support to use the following terminals:

• Termius
• MobaXterm
• Xshell
• SecureCRT

These work via a local SSH bridge that is managed by XPipe. That way you can keep using your existing SSH terminal solution with the added functionality of XPipe.

Pricing model updates

I received plenty of user feedback, so I changed the old pricing model to one that should capture the demand better. The old pricing model was created at a time when XPipe had no customers at all and did not reflect the actual user demand. The main changes are the addition of a homelab plan, a new monthly subscription, and changes to the one-year professional edition. All changes only apply to new orders. The community edition is also not changed.

The homelab plan is essentially a cheaper alternative to the professional plan that should include all paid features necessary to operate XPipe in a typical larger homelab environment if the community edition is not enough. If you are looking for a detailed feature comparison of what is included in which plan, you can find that information at https://xpipe.io/pricing#comparision.

The old yearly plan differed from many established pricing models and required some bit of reading to fully understand. I think there were more people asking clarifying questions about it than actually buying it, which is not a good sign for a pricing model. And in the end, many customers who valued ownership of a product went for the lifetime variant anyway instead. So the pricing model has been changed to a more traditional subscription plan for monthly/yearly options, plus the already existing lifetime plan which stays the same. This makes it easier to understand for potential customers and hopefully easier to sell as well.

Hyper-V support

This release comes with an integration for Hyper-V. Searching for connections on a system where Hyper-V is installed should automatically add connections to your VMs. XPipe can connect to a VM via PSSession or SSH. PSSession is used by default for Windows guests if no SSH server is available on the guest. In all other cases, it will try to connect via SSH. Since Hyper-V cannot run guest commands on non-Windows systems from the outside, you have to make sure that an SSH server is already running in the VM in that case.

The Hyper-V integration is available starting from the homelab plan.

Teleport support

There is now support to add teleport connections that are available via tsh. You can do that by searching for available connections on any system which has tsh installed. This is a separate integration from SSH, SSH config entries for teleport proxies do not work due to tsh limitations and are automatically filtered out. The new implementation solely works through the tsh tool.

This feature is available in the Professional plan as Teleport is typically an enterprise tool.

VNC improvements

The VNC integration has been reworked. It now supports more encrypted authentication methods, allowing it to connect to more servers. Furthermore, it is also now possible to create VNC connections without an SSH tunnel for systems that do not have SSH connectivity. You can also now send CTRL+ALT+DEL via SHIFT+CTRL+ALT+DEL.

Experimental serial connection support

There is now support to add serial connections. This is implemented by delegating the serial connection to another installed tool of your choice and opening that in a terminal session.

Note that this feature is untested due to me not having physical serial devices around. The plan for this feature is to evolve over time with user feedback and issue reports. It is not expected that this will actually work at the initial release. You can help the development of this feature by reporting any issues and testing it with various devices you have.

TTYs and PTYs

Up until now, if you added a connection that always allocated pty, XPipe would complain about a missing stderr. This was usually the case with badly implemented third-party ssh wrappers and proxies. In XPipe 11, there has been a ground up rework of the shell initialization code which will allow for a better handling of these cases. You can therefore now also launch such connections from the hub in a terminal. More advanced operations, such as the file browser, are not possible for these connections though.

Scripting improvements

The scripting system has been reworked to make it more intuitive and powerful. You can now call a script from the connection hub directly for each connection. You can also now launch scripts either in the background or in a terminal if they are intended to be interactive. In the file browser, when multiple files are selected, you can now call a script with all the selected files as arguments.

Other

There have also been a lot of improvements and bug fixes across the board that are not listed here. The workflow has been streamlined, the Proxmox support has been refined, and the git sync has been made more robust.

The XPipe python API has now been designated the official API library to interact with XPipe. If you ever thought about programmatically interacting with systems through XPipe, feel free to check it out.

The website now contains a few new documents to maybe help you to convince your boss when you're thinking about deploying XPipe at your workplace. There is the executive summary for a short overview of XPipe and the security whitepaper for CISOs.

A note on the open-source model

Since it has come up a few times, in addition to the note in the git repository, I would like to clarify that XPipe is not fully FOSS software. The core that you can find on GitHub is Apache 2.0 licensed, but the distribution you download ships with closed-source extensions. There's also a licensing system in place as I am trying to make a living out of this. I understand that this is a deal-breaker for some, so I wanted to give a heads-up.

Outlook

If this project sounds interesting to you, you can check it out on GitHub!

Enjoy!

Having a bit of trouble getting hardware acceleration working on my home server. The cpu of the server is an i7-10700 and has a discrete GPU, RTX 2060. I was hoping to use intel quick sync for the hardware acceleration, but not having much luck.

From the guide on the jellyfin site https://jellyfin.org/docs/general/administration/hardware-acceleration/intel

I have gotten the render group ID using "getent group render | cut -d: -f3" though it mentions on some systems it might not be render, it may be video or input which i tried with those group ID's as well.

When I run "docker exec -it jellyfin /usr/lib/jellyfin-ffmpeg/vainfo" I get back

libva info: VA-API version 1.22.0 libva info: Trying to open /usr/lib/jellyfin-ffmpeg/lib/dri/nvidia_drv_video.so libva info: Trying to open /usr/lib/x86_64-linux-gnu/dri/nvidia_drv_video.so libva info: Trying to open /usr/lib/dri/nvidia_drv_video.so libva info: Trying to open /usr/local/lib/dri/nvidia_drv_video.so libva info: va_openDriver() returns -1 vaInitialize failed with error code -1 (unknown libva error),exit

I feel like I need to do something on the host system since its trying to use the discrete card? But I am unsure.

This is the compose file just in case I am missing something

version: "3.8" services: jellyfin: image: jellyfin/jellyfin user: 1000:1000 ports: - 8096:8096 group_add: - "989" # Change this to match your "render" host group id and remove this comment - "985" - "994" # network_mode: 'host' volumes: - /home/hoxbug/Docker/jellyfin/config:/config - /home/hoxbug/Docker/jellyfin/cache:/cache - /mnt/External/Movies:/Movies devices: - /dev/dri/renderD128:/dev/dri/renderD128 networks: external: external: true

Thank you for the help.

Hi all, long time listener first time caller,

I have a WD PR4100, old equipment but it suits my needs, I maxed out the ram when I first bought it 5 years ago and it has 4 drive bays. Right now I have four 4TB WD Red Pro/Premium drives inside in a RAID1 setup. One of the drives is more recent and the other 3 are from when I bought the PR4100 5 years ago.

It is time for me to replace the drives, one started failing awhile back and that is why it was replaced, but in anticipation of the other 3 failing eventually I would like to upgrade them all and to take this opportunity to replace them with higher capacity drives.

First question, is there an upper limit for capacity on the PR4100 and can I just drop new 20tb+ drives in there and expect them to work?

Second question, do I replace them one at a time and in doing so would the system rebuild the RAID 1 setup or is there a better way?

This is for local backups and a self-hosted media library, not commercial or professional use.

I am not looking to build a new NAS system right now as the PR4100 is working as intended without much hassle but in a year or so I may need a more complex and professional NAS/server depending on if I get back into video production more fully.

Thank you for your time and for everyone posting and providing help in this community.

cross-posted from: https://lemmy.dbzer0.com/post/28234230

> I'm looking into setting up Mastodon instance for myself on a very minimal cloud server. To save resources on that box, I'd like to run the web interface on my own server at home, and only have the Mastodon backend running on the VPS. Is it possible to completely get rid of the web interface and only access the instance through the API? What's the best way to achieve this? Does anyone have experience with this, or do you know any useful resources?

I honestly can't get my head around this. I have a machine with Linux (endeavouros), and docker with a few containers. Since I want all the traffic from this system to go through the VPN, do I need to set up gluetun? I think not, but I am not 100% sure...

> Key Takeaways > Start with Type-2 hypervisors for an easy beginning. > Explore personal cloud platforms for and venture into Docker containers. > Check out Proxmox when you want to build a home lab specializing in self-hosting services.

cross-posted from: https://lemmy.ml/post/20536177

> txt > +-----------------+ > | . local server | > +-.---------------+ > < . > > < . > > < . > > < . > > < . > > +-.-----------------------+ > | . serveo/localhost.run | > +-.-----------------------+ > < . > > < . > +----------------------+ > < . > | . raw data | > < . > | < . > encrypted data | > < . > +----------------------+ > +-.----------+ > | . clients | > +------------+ > > > hellow, > > i wanna host things (nextcloud, bin, syncthing) myself but im under cg nat so i cant do it the regular way. i have to tunnel my way out. the only concern is that, the raw data is readable by the ssh server (ie. serveo/localhost.run), but i dont anyone elses eyes on my data > > sorry for my broken english. > > --- > > edit: > - syncthing (solved): https://docs.syncthing.net/users/untrusted.html > - bin (solved): https://github.com/HemmeligOrg/Hemmelig.app?tab=readme-ov-file#features > - nextcloud: ??? > > --- > > please clarify me. > > if i setup a vpn which provides encryption on my local server, can i go like this > txt > +------------------+ > | . local server | > +-< . >------------+ > << . >> > << . >> > << . >> > << . >> > << . >> > +-< . >----------------------+ > | < . > serveo/localhost.run | > +-< . >----------------------+ > << . >> > << . >> +-------------------------------------+ > << . >> | . raw data | > << . >> | < . > vpn encrypted data | > << . >> | << . >> vpn encrypted data over tls | > << . >> +-------------------------------------+ > +-< . >-------+ > | . clients | > +-------------+ > > sorry i dont know how to express this in words

---

!

this is what i was trying to say. so the idea, is that okay?

I'm setting up a self-hosted stack with a bunch of services running on a home device. I'm also tunneling all the traffic through a VPS in order to expose the services without exposing my home IP or opening ports on my local network. Currently all my traffic is HTTP, and its path looks like this:

• Caddy proxy on remote VPS (HTTPS, :80 & :443)
• Wireguard tunnel
• Caddy proxy in Docker on homeserver (HTTP, :80)
• app containers in separate isolated subnets, shared with Caddy

I want to set up qBittorrent and other torrent apps, and I want all their traffic to pass through the proxies. Proxying traffic to the WebUI is easy, there's plenty of tutorials; what I'm struggling with is proxying the torrent leeching and seeding traffic, which is the most important part since I live in a country that's not cool with piracy.

Unless I'm misunderstanding, BitTorrent traffic is TCP or UDP, so I'd need Caddy to act as a Layer 4 proxy. There's a community-maintained plugin that should support this. How would I configure it though? Do I need both instances to listen on a new port? Or can I open a new port on the VPS only, and forward traffic to the homeserver Caddy over the same port as the HTTP traffic (:80)? Are there nuances in proxying TCP traffic that I should be aware of?

After the arrest of Pavel Durov, I wanted to move from Telegram to something end-to-end encrypted. I know Signal is pretty good, but I think it is better to have our messages in my own server.

I have already looked in XMPP, but it required SSL certs and I did not have the mood to configure them.

Do you know any other selfhosted messaging service for a group of 4-5 friends, or an easy way to configure an XMPP server? Or shall I use Signal after all (I don't really care that much about being selfhosted, I just thought it would be more privacy friendly)?

UPDATE: I managed to set up an XMPP server using prosody with the SSL certs. We have been testing it with my friend and it seems to go well.

Found a great widget for monitoring my raspberry pi. RaspPi Check

!

But I would like to have a similar app with widget for my proxmox server. Does anyone have any suggestionsor other ideas?

I had changed the SSH password on something so I had to dig through my known hosts file, and saw the word FUCK spelled out in there in all caps. I chuckled but am sure there's an explanation

Hello all, I'm looking for a switch/kvm for my home setup. ive been through a few tries and none of them have worked for one reason or another.

I have two machines,

A windows 11 work laptop

• USB-C out, both USB and display port.
• HDMI out
• USB 2.0 out

A Ubuntu based personal server

• Displayport out
• USB-C out (no Displayport)

For displays, I have a single double wide 4k monitor

Additionally I have a USB-C hub all my peripherals are connected to.