this post was submitted on 30 Mar 2025
101 points (100.0% liked)

Selfhosted

45394 readers
549 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

What's up, what's down and what are you not sure about?

Let us know what you set up lately, what kind of problems you currently think about or are running into, what new device you added to your homelab or what interesting service or article you found.

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 2 points 2 days ago

Finished my migration from Plex to Jellyfin

[–] [email protected] 24 points 4 days ago (3 children)

I've finally powered on a 15 year old machine to run a bot I've been writing. The thing is slow as dirt and stuck behind a flakey power line network, but it's working. I got to write my first systemd service definition, which is kind of cool.

load more comments (3 replies)
[–] [email protected] 19 points 4 days ago (4 children)

Finally switched from plex to jellyfin, seems to be ok so far. Needed to make some small scripts for metadata management but it's running smoothly. Finally decided I'm hosting enough software with user accounts that I've made an authentik instance for SSO with each (ofc jellyfin first)

[–] [email protected] 4 points 4 days ago (1 children)

Hey, we're also thinking about setting up authentik. Could you answer the following, where I haven't found answers to yet: does introducing SSO impede logging into Jellyfin on a TV / phone app at all?

[–] [email protected] 6 points 3 days ago (1 children)

no, works fine. there’s an LDAP plugin for jellyfin so you can use the jellyfin internal login page and the server will verify the login against authentik. took some setting up though.

load more comments (1 replies)
[–] [email protected] 3 points 4 days ago (2 children)

Ann reason you choose authenik? There are a nmber of options and I'm not sure why to choose one over the other.

[–] [email protected] 4 points 4 days ago

I did no research whatsoever and picked the one I'd seen the name of more often. I figured if it didn't work for me I'd try something else, same as when plex wasn't working for me so I switched to jellyfin. I have no idea how it compares to the other options but it feels pretty solid so far

[–] [email protected] 3 points 4 days ago* (last edited 4 days ago) (1 children)

I'm not the person you're replying to, but Authentik:

  • Has a UI for configuring it, including adding users.
  • Supports LDAP if you need it. Authelia needs a separate LDAP server.
  • Supports practically every two factor auth protocol you'd need: OIDC (OpenID Connect), OAuth2, SCIM, SAML, RADIUS, LDAP, and proxying for apps that don't support any of them (which is getting rarer).
  • Supports permissions and permission groups, i.e. only allow certain users to access particular apps.
  • Can be used as the source of truth for Google Workspace and Microsoft Entra. Maybe not as relevant for home use.

I haven't tried Keycloak but I hear it's pretty good, albeit a heavier app to deploy.

I have tried Authelia, and it's much less powerful than Authentik. Authelia requires you to manually modify config files rather than using a web UI. It also only supports OIDC (which is in beta) and proxying. Proxying is not recommended and has several issues since it's not "true" single sign-on.

load more comments (1 replies)
load more comments (2 replies)
[–] [email protected] 14 points 4 days ago (3 children)

I've been learning bash and working on scripts to automate stuff in my homelab. It's been a lot of fun. I'm currently working on a script that will rename the movies and TV shows I rip from my DVD collection.

The script queries the tmdb api, presents me with a mwnu of matches if there's multiple matches, renames the media files according to jellyfin spec, and then places them in the proper folders to be indexed by Jellyfin and Kodi.

load more comments (3 replies)
[–] [email protected] 6 points 3 days ago (1 children)

Found out that docker volumes are important after restarting my server 🙃

[–] [email protected] 2 points 3 days ago (1 children)

That’s a mistake you only make once!

[–] [email protected] 2 points 3 days ago

Meh, made it a few times.

Some images treat volumes differently .

Looking at you, nextcloud.

[–] [email protected] 5 points 3 days ago (1 children)

Docker compose. I had a plan to ease into docker, I slipped and fell in the fucking pool. So far I have AdGuard Home and Heimdall working. Some WireGuard variant is next, followed by moving grafana and Prometheus over.

So far so good…..internet blogs, videos, etc have been not great, seems things have changed since dropping the version in your yaml file. All in all, I think the direction I’m heading in is good. Time will tell.

[–] [email protected] 4 points 3 days ago (1 children)

Docker compose is great! Good luck!

I've been moving from docker compose to podman, and I think that's the better long term plan for me. However, the wins here are pretty marginal, so I don't recommend it unless you want those marginal wins and everything is already in containers. IMO: Podman > docker compose >>>no containers. Docker compose has way better examples online, so stick with that until you feel like tinkering.

[–] [email protected] 3 points 3 days ago (1 children)

I really like the idea of containers, it def solves my problems of running multiple services in the host OS. I’d like to build my own containers to pull the few “bare metal” services I’ll have outside of docker. Anyway, I’ll keep podman in the back of my head.

One thing I’m already happy I did was create a docker directory and having sub directories keep all of my container volumes separate. Should make backing things up easier as well.

load more comments (1 replies)
[–] [email protected] 5 points 3 days ago

Recently been working on setting up forgejo to migrate away from GitHub. My open source stuff I’ve actually put onto codeberg and I’ve set up a handful of pull mirrors on my local instance for redundancy. This weekend I’ve been testing out woodpecker-ci for automating pushing files to s3 for some static websites for repos on codeberg as well as my forgejo instance. Today will tell if that is successful!

[–] [email protected] 7 points 4 days ago

Scrubbing a little demo project I made featuring a web app behind oauth2-proxy leveraging keycloak as local idp with social login. It also uses a devcontainer config for development. The demo app uses the Litestar framework (fka starlite, in Python) because I was interested, but it's hardly the focus. Still gotta put caddy in front of it all for easy SSL. Oh, and clean up all the default secrets I've strewn about with appropriate secret management.

All of it is via rootless podman and declarative configuration.

Think I might have to create my own Litestar RBAC plugin that leverages the oauth headers provided by the proxy.

It has been a minute since I worked daily in this space, so it has been good to dust off the cobwebs.

[–] [email protected] 4 points 3 days ago

Last week got my new epyc server with GPU running ollama and all the trimmings.

This week linked my 2 home bases with wire guard, all the subnets mesh and the wifi isolation is solid. Performance is surprisingly good considering they're 9 time zones apart on different hemispheres.

Migrating plex to jellyfin to get hw accel working.

Also trying to get my second base multiple statics and 10gb if possible, rural fiber in Europe is unbelievably aweome, hope to drop Comcast business back home if it works.

Got someone to work with on a new company, so that's part of this, though my day job relies on this too.

[–] [email protected] 7 points 4 days ago* (last edited 4 days ago)

Oh, I've just been tinkering around with LangFlow specifically as a news aggregator.

The flow: https://i.imgur.com/5HqznQm.png

Then asking AI to go get me some news: https://i.imgur.com/ltZPBwC.png

Still needs a little tinkering and as the final step, to send said news stories to my Telegram. I really have a blast with automation platforms like N8N, Flowise, Gotify, DopplerTask, & Kestra.

Afterwards, I smoked a small bowl and worked on a couple songs I have in the works.

HBU?

[–] [email protected] 7 points 4 days ago (2 children)

This week I finally managed to route torrent traffic through a VPS that was sitting around gathering dust. I am behind CGNAT so was taking me 6 weeks to do the kind of traffic I do in a day now. I couldn't be more chuffed.

load more comments (2 replies)
[–] [email protected] 5 points 3 days ago (1 children)

I have a self-hosted AI system that works pretty well. I can interact with it via my phone, the shell, my IRC server, and I can verbally talk to it.

But I want to get it to remember things, so I need to start working on RAG or something. Eventually I'd like to be able to have it draft emails for me, and schedule appointments.

load more comments (1 replies)
[–] [email protected] 4 points 3 days ago

i run coolify and I have to make my own solutions so I'm learning a lot about docker.

[–] [email protected] 6 points 4 days ago (3 children)

I tried to update my lemmy instance and it all went so horribly wrong. DB never came up, errors everywhere, searching implied I updated to a dev branch sometime in the past (not a dev, don't think I did) and it'll be console and DB queries for a fix.

Ran out of time and overwhelmed, I restored backups and buried my head in the sand. Nope, not now. Future, yes, but oh not now.

[–] [email protected] 8 points 4 days ago

Sometimes we get so engrossed in what we're doing we can't see the problem(s). I do that a lot, so I have take a break. Same with creating music. You get so deaf to what you are trying to write that nothing sounds good no matter what you do. In the words of Snoop Dog, 'I had to back up off of it and sit my cup down. Tanqueray and chronic, yeah, I'm fucked up now.'

Take a break.

load more comments (2 replies)
[–] [email protected] 4 points 3 days ago (1 children)

I'm switching my immich instance to an SSD one and switching my VPN from zerotier to tailscale.

Hopefully that means my Immich will be a little more reactive.

[–] [email protected] 2 points 3 days ago (4 children)

If at all possible see if you can do wireguard yourself. Tailscale is basically inserting a third party company for no reason as its just wireguard with their servers involved. For example if you can run opnsense its easy to get running via the GUI. Very rewarding!

load more comments (4 replies)
[–] [email protected] 4 points 3 days ago (2 children)

I am currently arguing what to do with my gaming rig and home theater. Either get a long cable which would need a DP-to-HDMI adapter or get a used mini PC (which is currently cheaper than a Raspberry Pi?) and setup Sunshine and Moonlight (but over WiFi and not LAN) to be more flexible when I eventually move the two into separate rooms. Does anyone have some experience with that? Maybe also latency over wireless network?

[–] [email protected] 2 points 3 days ago

I use sunshine and moonlight using a pi 5 running Android TV as the client. It works perfectly for the occasional video stream but latency for games is a bit rough. You'll probably be fine playing something relaxed like Stardew Valley but platformers (I've tried Ultimate Chicken Horse) and racing games (Mario Kart Wii running in Dolphin) are just bad enough to be unplayable. This is with both devices connected over Ethernet (albeit through a powerline adapter and my router is fairly cheap) so WiFi will probably be worse.

Not sure if sunshine and moonlight just have loads of overhead or if there's a part of my setup causing the latency.

[–] [email protected] 2 points 3 days ago

I don’t have the quantitative metrics, but I will say that I had the flu last year and I just laid on the couch with my steam deck and streamed cyberpunk using Moonlight. The latency was imperceptible to my flu brain, and it was a much better experience than playing for an hour at a much lower quality natively on the deck. I have a friend who also streams his desktop to his Apple TV (hardwired desktop, wireless Apple TV) and he beat metal gear solid V like that.

[–] [email protected] 6 points 4 days ago* (last edited 3 days ago) (4 children)

More incus:

  • mounting persistent storage into containers (cheating by exporting NFS from my proxmox zfs into the incus host.
  • wrote a pruning backup script for containers, runs daily, keeps last 7 days and the first of the month
  • passed through hardware (quicksync) into jellyfin container (it works!)
  • launched an OCI container (docker home assistant) natively in incus (this is a game-changer!)

Next:

  • build 2nd incus node
  • move all containers from proxmox to incus
  • decom proxmox
  • setup Debian with NFS export
load more comments (4 replies)
[–] [email protected] 3 points 3 days ago

I’m trying to figure out a basic CRM for my local sports club. I use docker to self host a voting platform called RALLLY that we use a lot and enjoy. If people can recommend a CRM I’d give it a go today. I tried a platform called twenty yesterday but couldn’t get it off the ground

[–] [email protected] 5 points 4 days ago (3 children)

Email... My wife really wants to further de-google, this means moving custom domains off gsute.

Do I move to proton/tuta or go back to self hosting email again like I did for years until about 2010?

If I self host, do I do it at home or on the server that runs my lemmy instance?

[–] [email protected] 7 points 4 days ago* (last edited 3 days ago) (1 children)

I self-host my email using Mailcow, and use a VPS for it. I don't trust my home server to be reliable enough, and the VPS providers have nicer equipment (modern AMD EPYC CPUs, enterprise SSDs, datacenter-grade 10Gbps or 40Gbps connections, etc). I use a separate VPS just for my emails - it's the one thing I want to ensure is secure, so I didn't want any other random software (that could potentially have security issues) running on it..

I also use an outbound SMTP relay to avoid having to deal with IP reputation. Very easy to configure this in Mailcow. SMTP2Go has a free plan for sending <1000 emails per month.

[–] [email protected] 4 points 3 days ago

It kind of amazes me that, in this day and age, email has turned out to be the lynchpin of security. Email as a 2FA endpoint. Email password reset systems. If email is compromised, everything else falls. They used to tell us not to put anything in email that you wouldn't put on a postcard...how did this happen?

load more comments (2 replies)
[–] [email protected] 4 points 4 days ago* (last edited 3 days ago) (1 children)

A new homepage for the business of my wife.

I plan to use Hugo for it, I just wish the documentation would be better.

For the homepage I need a few additional "non-blog" pages and from the documentation I am not sure how to do that the best way.

But to be honest, I have not really looked deeper into that, so it is very possible that I just missed something.

[–] [email protected] 3 points 3 days ago (1 children)

Ive been using Zola for a bit now and love it. Very simplistic. Could be worth a look but simple pages can be html or markdown. Couldnt be much simpler. Super fast to build

load more comments (1 replies)
[–] [email protected] 5 points 4 days ago (1 children)

I've just moved and I'm setting up my machines. NIC died in my DIY router just before the move so I'm upgrading to 2.5/10 Gbps at the same time.

[–] [email protected] 3 points 4 days ago (1 children)

What NIC are you looking at and what OS have you chosen?

load more comments (1 replies)
[–] [email protected] 4 points 4 days ago

Firing up my NAS and Arrs. My Aoostar WTR Pro and all the components arrived, it’s all setup, and I swapped out the fan for a larger one to get more airflow into the nvme drive area since I live in a hot climate.

Spending the day configuring a vpn, sab, and qbit. Already learning a lot!

[–] [email protected] 4 points 4 days ago

I've been testing out immutable distros, in this case openSUSE Aeon (laptop) and openSUSE MicroOS (server).

I set up Forgejo and runners are working, all in podman. I'm about to take the plunge and convert everything on my NAS to podman, which is in preparation for installing MicroOS on it (upgrade from Leap).

I also installed MicroOS on a VPS, which was a pain because my VPS provider doesn't have images for it, and I'd have to go through support to get it added. Instead, I found a workaround, which is pretty amazing that it works:

  1. Install Alpine Linux (in my case I needed to provision something else first and mount an ISO to install Alpine, which was annoying)
  2. Download MicroOS image on VPS (not ISO, qcow image)
  3. Write image to the disk, overwriting the current OS (qemu-img command IIRC)
  4. Reboot (first boot takes longer since it's expanding the disk and whatnot)

The nice thing is that cloud-init works, so my keys set up in step 1 still work with the new OS. It's not the most convenient way to set things up, but it's about the same amount of time as asking them for an ISO.

Anyway, now it's the relatively time consuming task of moving everything from my other VPS over, but I'll do it properly this time with podman containers. I had an ulterior motive here as well, I'm moving from x86 to ARM, which reduces cost somewhat and it can also function as a test bed of sorts for ARM versions of things I'm working on.

So far I'm liking it, especially since it forces me to use containers for everything. We'll see in a month or two how I like maintaining it. It's supposed to be super low effort, since updates are installed in the background and applied on reboot.

load more comments
view more: next ›