There are not enough people using the tabs feature of homepage. It allows more separation between items
https://redd.it/1awdn8t
@r_SelfHosted
Owners of Elitedesk G4/5 mini, is it possible to replace the WiFi module with a NVME 2230?
https://redd.it/1awclnj
@r_SelfHosted
I created a GUI for peerjs-server
https:\/\/chat.positive-intentions.com
for this wednesday, i would like to contibute to the selfhosting community my sideproject as a selfhosted-adjacent tool for communication between peer devices.
the app UI is largly focused on presenting itself as a "chat app" but i have more plans for this app to serve individuals in the form of decentralized file transfer (with WebRTC, it could outperform any cloudstorage provider for transferring large files between devices in cases like a wifi/LAN network where the internet can be bypassed).
by default, the app is using the officially hosted peerjs-server to help users get started, but peerjs-server can be selfhosted and configured in the app.
the webapp is also provided in a .zip bundle for you to host on your own static server (not reccommended unless you know what you are doing with things like CSP headers).
i created the app to be a browser-centric tool so i am storing all user data in browser storage. this makes it so on aws i only need to use S3 buckets to run the app. i have avoided the traditional authentication architecture of using a registration process to store user data on a database.
i created a docs-website with docusaurus to help people get started and maybe answer some questions about how the app works, its written by ChatGPT and i havent given it much attention compared to the app. so let me know is something could be made more clear.
https://positive-intentions.com/docs/basics/getting-started
i have a few features to test out... all of it needs refining. the app is still in early development, but id like to hear what you guys think needs more attention.
note 1: the UI is a clunky implementation of Material-UI. it's something i will fix as i move towards open sourcing the UI components. i will take the opportunity to also give more attention to a "desktop friendly UI" (right now the app is best experienced on a mobile device).
note 2: id like to keep the wording i have for "pods" although i have recieved feedback about it not being clear what it means. a pod is what you might think of as like a "chat room" and will be further developed to support group-chat. you can create a pod with a connected peer in the contact-details-page. the wording "pod" comes from how a group of whales is called a pod.
feel free to ask me any questions about the app and i will answer to the best of my ability.
https://redd.it/1aw6u63
@r_SelfHosted
OCIS (OwnCloud) with LDAP backend.
I decided to give OCIS (OwnCloud Infinite Scale) a decent chance and spent a chunk of a day messing about getting it to work with an LLDAP backend. If anyone else wants this, I added an example `compose.yml` file to the LLDAP docs.
https://github.com/lldap/lldap/blob/main/example_configs/ocis.md
No opinion on OCIS yet. It seems simple but quite nice. It's modest with resource usage and the new sync client works well on macOS.
Unfortunately, it looks like it has a similar limitation as Seafile, that and you can't point it at an existing file structure and share that (but unlike Seafile, the files are "just files" on the server). But maybe I'm missing something.
https://redd.it/1avxbcs
@r_SelfHosted
Getting Started Looking for Guidance
I’m looking to start down the road of self hosting a few services. I have an array of machines currently trying to do some of the work and wanted to get a better setup and need some guidance.
What I’m doing:
Plex for media server.
Some form of NAS.
Home assistant.
Blue Iris (if windows is possible)
Obsidian.
What I’m looking at purchasing:
Dell Power Edge R620- 16 Core 256gig RAM.
What I’m currently doing:
I have blue Iris running on a windows PC standalone of everything else.
Plex runs on an intel nuc within Ubuntu.
Portable USB hard drives for storage.
Ideally I’d like to get something like the dell server or something similar and host my own NAS to eliminate external drives, create data redundancy, and simply everything to one machine. I plan on expanding the services I host (like a Minecraft server for my kids.)
My big question is, is this server overkill? I don’t want to underspec, my blue iris machine is on its last leg which is what’s jump started this process for me.
My next question is, is it possible for me to run all these services within the same machine? I know proxmox exists and I can run the majority in dockers. My big hang up is figuring out the blue iris install which is only supported for windows.
Lastly, I want everything in one machine so it’s easier for me to remotely manage, and eliminates the need for a stronger network between the blue iris machine and NAS (same for Plex and NAS.)
Any and all help is greatly appreciated.
(EDIT) formatting and punctuation- apologies I’m on mobile.
https://redd.it/1avy5c5
@r_SelfHosted
Gallery software that allows tagging and organizing into albums but that doesn't need importing/scanning
I'm looking for a gallery software to organize my images (150K+), I don't need many features. Mainly I need to be able to tag images and organize them into albums but I don't want to have to wait for the software to scan or import my library. I've tried most of the projects from: https://github.com/awesome-selfhosted/awesome-selfhosted?tab=readme-ov-file#photo-and-video-galleries but they either require importing/scanning and the ones that don't they don't support tags. Also, I'd prefer it if the software didn't need to touch the actual files (i.e. it's read only) and stored the tags somewhere else
https://redd.it/1avrtk4
@r_SelfHosted
Looking for network advice for Google photos alternative.
https://redd.it/1avqs7b
@r_SelfHosted
I created a docker container that backs-up Bitwarden/Vaultwarden to Keepass!
Hey /r/selfhosted!
I just migrated from Keepass to Vaultwarden a week ago, and I'm loving it. For safety, I'm backing up my instance every night and encrypting it with GPG, but I also wanted the freedom that Keepass used to provide (that being, keeping all my passwords offline in an encrypted file).
I was looking for a way to automatically export my Vaultwarden passwords into Keepass, and I found this repository that did 90% of what I needed: https://github.com/davidnemec/bitwarden-to-keepass
So I forked it, added the ability to set a custom Bitwarden (or Vaultwarden!) URL, and dockerized it!
You can see the code here: https://github.com/rogsme/bitwarden-to-keepass
The TL;DR is this:
Environment variables available
- DATABASE_PASSWORD (required): The password you want your KeePass file to have.
- DATABASE_NAME (optional): The name you want your KeePass file to have. If not set, it will default to bitwarden.kdbx.
- BITWARDEN_URL (optional): A URL for a custom Bitwarden/Vaultwarden instance. If you are using the official https://bitwarden.com, you can leave this blank.
Backup location
All backups will be written to /exports. You need to mount that volume locally in order to retrieve the backup file.
To run:
$ docker run --rm -it \
-e DATABASE_PASSWORD=a-complicated-password \
-e DATABASE_NAME="my-cool-bitwarden-backup.kdbx" \
-e BITWARDEN_URL=http://your.bitwarden.instance.com \
-v ./exports:/exports \
rogsme/bitwarden-to-keepass
sh
$ ls exports
my-cool-bitwarden-backup.kdbx
DNSWatch.info DNS Lookup Tool Self Host Option
Hi all! My team uses the site dnswatch.info quite a bit for DNS lookups. However, the site is riddled with Advertisements now. Is there any self hosted application or WordPress modification that can be used to mimic what DNSWatch.info does by looking UP DNS records?
I am well aware that we could use Powershell to do DNS Lookups as well but it just hasn't stuck with the newer members on my team.
Any help would be greatly appreciated!
https://redd.it/1avmu76
@r_SelfHosted
Giant Thanks
Hope its ok to post a sincere thanks to this sub and community.
I'd been experimenting with an Rpi and struggling with putting all the pieces together with docker, mapping volumes, stringing together environmental variables, etc.
This sub and the app templates helped me tremendously and let me focus on getting things working the way I wanted to rather than just getting them working.
Now I can mess around with my testing and learning and tweaking while having a rock solid environment of the apps and services that I wanted to run.
Thanks a ton!
https://redd.it/1avgxhv
@r_SelfHosted
Internal addresses
Hey all,
Picking up my first mini pc today a M920Q with i5-9500T and 16GB RAM.
Once i’ve got some services running if I want to do something like portainer.local or portainer.internal do I just need Adguard home with DNS rewrites or do I need rewrites plus a reverse proxy to point to the port the service is running on?
My router is a Amplifi HD Mesh Router. Can I set my Primary DNS to the mini PC and leave the secondary as a fallback or should both be the mini pc. Just worried if for whatever reason I need to reboot the mini pc while setting up all the different services I want to host it will drop the connection for others in my house.
Thanks in advance
https://redd.it/1avfxvr
@r_SelfHosted
UPDATE: OneUptime - Self Hosted StatusPage.io + Incident.io + Loggly alternative.
OneUptime (https://github.com/oneuptime/oneuptime) is the open-source alternative to StausPage.io + UptimeRobot + Loggly + PagerDuty. It's 100% free and you can self-host it on your VM / server.
NEW UPDATES: We now support fluentd (https://www.fluentd.org/) for logs ingestion so you can use 1000+ sources like Docker, Syslog, Systemd to send logs to OneUptime. Powered by Ceph & Clickhouse. Ingest petabytes of logs and search in milliseconds. Ingest from any source, alert right team members when things go wrong.
https://redd.it/1avcs8q
@r_SelfHosted
I selfhosted a LLM with a nice frontend (well, still have some bugs) on my server
Hi there!
I selfhosted a LLM via Ollama[\^1\] on my server. It's running llama2 now and is quite fast.
Since Ollama is a CLI service, I also want to host a frontend for it. I tried BionicGPT[\^2\], but I can't get it run with Ollama backend due to this issue[\^3\]. Finally, I ran BionicGPT in CPU mode without an Ollama backend.
https://preview.redd.it/nil4rpdl4ojc1.png?width=3292&format=png&auto=webp&s=1ceb7cf3786045a46d01f39d5b0701c976b8e618
The Ollama still runs on the server though.
There's sth wrong with BionicGPT, the LLM runs so slow and it crashes frequently, I think it owes to my server's poor performance.
https://preview.redd.it/0i1lpbmj4ojc1.png?width=3796&format=png&auto=webp&s=7b08aac9c1c8b6a829e5d231a5a3d5165e5c3d58
Anyway, I couldn't find a better LLM frontend, so BionicGPT is what I'm gonna use. Do you have any recommendations for LLM stuff?
​
[\^1\]: https://github.com/ollama/ollama
[\^2\]: https://bionic-gpt.com/
[\^3\]: https://github.com/bionic-gpt/bionic-gpt/issues/375
https://redd.it/1av8uw1
@r_SelfHosted
SSHGuard - Working well for SSH. Possible to protect Apache WWW as well ?
Hi Guys,
I have sshguard v2.4.3 running well - protecting SSH on a OpenSuse 15.5 box.
Is there any way to protect Apache v2.4.51 from brute force attacks as well ? These will generate '404' errors in the system log ?
The docs at https://www.sshguard.net/docs.html dont seem to have anything on this ?
https://redd.it/1av73b6
@r_SelfHosted
Local DNS with assigned service and Tailscale
Hey, is it possible that I can make a custom domain that is resolved over DNS which is hosted on my server which also hosts a web service I want to expose only to my self when I'm in my Tailscale network. To be specific, I want a website running on port 3001 in a docker container to be accessible through the domain h.lan which I don't own, obviously, but I still want it to be secure and use HTTPS and not HTTP like a normal server.
​
How can I achieve this. What I know at the moment is that I can add custom nameserver on Tailscale with Split DNS. What I also managed to do is set up a simple local DNS server that resolves h.lan to the Tailscale domain which hosts the website, but that's basically only an alias from a domain to a device, but I want it to point directly to the website.
https://redd.it/1av4gv3
@r_SelfHosted
Dashboard day, my first "real" server
https://redd.it/1awcycy
@r_SelfHosted
Hi! I have a cluster of windows computers connected to the internet that need to access a postgres database on one of the computers. As soon as we opened a test database to the web in order to access it remotely, it got hacked by a ransomware. Here is my question
Can a self-made windows VPN be safe enough for the team? Will we see the database as we are on the same local network? Any advice on how to set it up?
https://redd.it/1aw8yks
@r_SelfHosted
Kyoo: Your cozy cornor for streaming movies, tv shows, and anime
https://redd.it/1avyqx7
@r_SelfHosted
Android TV client fork for Jellyfin users, users
A customized version of the popular Android TV client application tailored specifically for Jellyfin users, users!
Modifications from the Official Repository:
​
Package name has been altered, enabling concurrent installation with the official version.
Distinctly sets itself apart from the official version.
Streamlined many elements of the UI to create a less cluttered and more inviting appearance.
Automatic population of a default server addresses during setup (Android Studio required).
https://github.com/CookeInCode/jellyfin-androidtv
https://redd.it/1avze81
@r_SelfHosted
I am looking for Guidance/Best Practices - Hosting Containers and workloads for home
Howdy.
I was old school using oindows Server machines for a while but recently moved to a couple of RPI4 and RPI5 devices with RPI OS + Docker + Portainer.
My goal is to have my Home Assistant, a NAS, Plex, and a Dev environment and possibly a Web server and Game server all running in Containers.
So far I have RPI5 + USB3/SSD (250G) + RPI OS + Docker + Portainer and 3 containers and it is snappy/fast.
Looking for guidance around:
1. Best way to manage remotely? I have an Eero Router and Gig Fiber to the house. I was thinking of opening ports for Portainer.
2. any other tools I need to use or check out?
3. Best learning tool for Containers?
​
thanks!
https://redd.it/1avvsoz
@r_SelfHosted
Setting Up a Local PC to Host a Web Application for Study Purposes
Hi,
I'm a complete newbie in the world of self hosting and networking, and I'm reaching out for some guidance on a project that's close to my heart. I want to set up a PC to host a web PHP application that I believe will greatly assist my kids with their studies. The catch is, I want this application to be accessible over Wi-Fi on their phones, but without providing them access to the wider internet to minimize distractions.
The idea is to create a distraction-free, study-focused environment where they can access educational content and tools I'll be hosting locally. I've heard about using old PCs for self-hosting web applications, and I have a decent spare PC at home or I can buy one that I think could serve this purpose. However, my knowledge of how to actually get this up and running is pretty limited.
Here's what I'm working with:
- A spare PC (not the latest, but it works well)
- A home ISP router Wi-Fi network
- A strong desire to learn and set this up
- Limited experience with local hosting and networking
My questions for you wonderful selfhosters are:
1. What software or tools do I need to install on my PC to turn it into a server for hosting a web application?
2. How can I configure the server so that it's accessible over Wi-Fi network, but strictly not providing internet access to the connected devices?
3. Are there any recommended tutorials or resources for absolute beginners like me to understand the basics of what I'm trying to do?
4. Any tips or advice on managing and securing this setup, considering it will be used by my kids?
I appreciate any help, advice, or pointers you can give. I'm eager to learn and make this project a success for my kids' sake. Thank you in advance for your time and assistance!
Best,
A Newbie Parent on a Mission
https://redd.it/1avs0oq
@r_SelfHosted
Immich v1.95.0 has breaking changes, please be careful before updating
https://github.com/immich-app/immich/releases/tag/v1.95.0
https://redd.it/1avp6x9
@r_SelfHosted
Should I be better with VM separation? Discussion
Hey guys! Running a P520 with Proxmox. This has been a tremendous learning experience for me, but the more I learn, the more I think that the way I've set stuff up is not the best...
The first VM I made was set up to host a Minecraft server. It is still running, but it has its own VM. I then was interested in learning Docker, so I created a VM solely for that. It kinda started spiraling out of control there, as I've now been using Docker for everything. I have Jellyfin, Cloudflared, Gluetun, Nginx, and QBitTorrent all running on Docker.
The only other addition I made was I wanted to test out making a container, so I made a Tailscale LSX container. With how simple that was, I am wondering if it would've been better to focus more on making LSX containers vs Docker containers.
The reason I am concerned now is I am at the point where I want to start focusing on regular backups. However, I do not want to back up my Jellyfin library as that would be expensive. Since I made a container in Docker for Jellyfin, it won't be as simple as just using Proxmox's built in backup feature.
​
I am wondering if it is worth the time to restructure everything and move stuff around accordingly? It would be a considerable undertaking but if it leads to better performance and organization, I reckon it's worth it.
https://redd.it/1avmdph
@r_SelfHosted
[docker] macvlan doesnt seem to work
I have installed docker on Debian 12, i am trying to get adguard docker on macvlan.
I have used this command:
docker network create -d macvlan --subnet=172.16.20.0/24 --gateway=172.16.20.1 --ipv6 --subnet=2\*\*\*:\*\*\*\*:\*\*\*\*:20::/64 --gateway=2\*\*\*:\*\*\*\*:\*\*\*\*:20:250:56ff:feb3:5149 -o parent=ens192 dockermacvlan
But when i go into the adguard docker via console (portainer) i cannot ping google, so it seems the docker doesnt have a working networking connecting. I also cannot ping the 172.16.20.230 from my workstation i get no reply.
My compose file looks this:
services:
adguardhome:
image: adguard/adguardhome
container_name: adguardhome
restart: unless-stopped
networks:
dockermacvlan:
ipv4_address: 172.16.20.230 # IP address inside the defined range
ipv6_address: 2***:***:****:20::230
volumes:
- ./config:/opt/adguardhome/work
- ./config:/opt/adguardhome/conf
- /home/nick/NPM/letsencrypt:/opt/adguardhome/ssl
# ports:
# - 53:53/udp
# - 53:53/tcp
# - 784:784/udp
# - 853:853/tcp
# - 3333:3000/tcp
# - 80:80/tcp
# - 443:443/tcp
networks:
dockermacvlan:
external:
name: dockermacvlan
​
https://redd.it/1avl336
@r_SelfHosted
Alternative to Audiobookshelf on iOS?
I am running Audiobookshelf on Android, it is great
However, I also want iOS users to be able to listen to the audiobooks and Audiobookshelf has a full beta on iOS.
Any alternatives I can host (until Audiobookshelf becomes available)?
https://redd.it/1avfgon
@r_SelfHosted
[docker] Macvlan network with adguard seems to work, how to reach adguard?
I have created a macvlan network via portainer, that seems to work (ish). I created adguard with this docker-compose file. According to portainer it has got the right IP addresses. But i cannot seem to open the adguard dashboard plus i cannot ping adguard on either IP address.
172.16.20 subnet is the subnet i use for my (v) LAN.
I have tried to # all the ports but then i get any error "ports must be in an array".
Any ideas?
​
version: "3"
services:
adguardhome:
image: adguard/adguardhome
container_name: adguardhome
restart: unless-stopped
networks:
dockermacvlan:
ipv4_address: 172.16.20.230 # IP address inside the defined range
ipv6_address: 2***:****:****:20::230
volumes:
- ./config:/opt/adguardhome/work
- ./config:/opt/adguardhome/conf
- /home/nick/NPM/letsencrypt:/opt/adguardhome/ssl
ports:
- 53:53/udp
- 53:53/tcp
- 784:784/udp
- 853:853/tcp
- 3333:3000/tcp
- 99:80/tcp
- 459:443/tcp
networks:
dockermacvlan:
external: true
​
https://redd.it/1avf1kg
@r_SelfHosted
Announcing Backrest: the missing WebUI and automator for restic backup
Backrest is a self-hosted and FOSS WebUI for backup automation and browsing that is built on restic. I built Backrest because I wanted a backup tool with the reliability and openness one gets from restic (e.g. it's entirely possible to understand the backup format and failure modes) but with the ease of use features one finds in many commercial backup options (e.g. broswing snapshots, easily scheduling operations, etc). The major difference here being that Backrest is fully open source (GPL3) now and forever.
The common complaint with restic is that it's a cli tool which makes it great for scripting but can be hard to approach. Backrest fills a hole in the restic ecosystem in that it is an all-in one solution that tackles both scheduling and browsing backups and in that it is compatible with most systems: Backrest runs on both headless systems (e.g. a web accessible UI for your NAS) as well as interactive devices (e.g. on a personal laptop). Backrest runs on Linux (headless and interactive), in docker, MacOS, and Windows (experimental).
Philosophically Backrest is a fairly thin wrapper around restic. It aims to create snapshots that are easy to view in the UI but that can also be easily manipulated out-of-band with the restic cli (without breaking anything!). Each operation Backrest performs on your behalf will be presented in the UI with visible status information and detailed error messages to help diagnose problems if any occur.
Backrest’s WebUI features:
Creating restic repositories
Creating backup schedules (backrest orchestrates backup operations, no need to configure cron jobs, systemd timers, or launchd agents)
Browsing backup operation history (backrest keeps a log of every command run on your behalf)
Browsing snapshot contents and restoring files from the UI (e.g. no need to fiddle with the cli in a high-stress moment when you've lost data!)
Pre and post backup hooks for running commands (e.g. shell scripts) and sending notifications (e.g. on success, error, etc) supporting discord, slack and gotify (with more to come).
Darkmode and lightmode theme supported matching system settings.
You can find the project and releases on github: https://github.com/garethgeorge/backrest
https://redd.it/1avbxp0
@r_SelfHosted
Single point of failure concern
I'm considering using virtual machines on a single home server to replace multiple barebone PCs, which seems like a common and efficient practice. However, the idea of the server being a single point of failure is concerning. What's the general consensus or best practices regarding this? How do you address or mitigate the risks associated with relying on a single home server for virtualization?
I'm currently running:
* Home Assistant (HAOS) running on a Lenovo ThinkCentre M93p Tiny PC
* If this HW brakes, I can run a VM momentarily
* Openmediavault + Docker on a more robust PC with 3 WD RED HDD
* Arrs, Plex, Backup, Pi-hole
* Dahua NVR which I want to replace with Frigate (VM or on a Lenovo as HAOS)
TIA
https://redd.it/1auyis8
@r_SelfHosted
Help connecting Cloudflare Tunnel connect to NGINX Proxy manager
Hi All,
What I have completed so far:
External access:
1. Created tunnel and ran the docker command it shown to create secure tunnel between my server and cloudflare.
2. I access my services via internet using subdomains I created in cloudflare.
I installed tunnel as
"docker run cloudflare/cloudflared:latest tunnel --no-autoupdate run --token mykey_asdasdqweqweqweqweqweasdasdasd"
If i open https://home.domainname.com it connects to my server using tunnel outside of my home network.
Internal access:
1. Installed Adguard home dns server and created dns re-write to my server using local ipaddress and domain. This way i can access my server using domain name instead of IP and also it connects via local network instead of going via internet
2. Configured NGINX proxy manager to redirect submain request in my local network to connect to respect services
If i open https://home.domainname.com it connects to 192.168.0.88:3000. I also confirmed this is working via dns query log that shows rewritten to local IP entry. And nginx also creates log that i accessed the local ip with 3000 port URL.
​
Help needed on the following:
1. Instead of connecting via tunnel for each ports/services in my server, I want to direct everything to NGINX in the tunnel.
2. Nginx is running on 443 porta and 81 for dashboard. I tried both of these IP address in the tunnel and tried to access https://home.domainname.com . It didn't connect to the service running in 3000 port to show my home screen. Also no log in my nginx log folder.
Why I am doing:
1. SOmeone suggested nginx is good & secure compare to direct tunnel. I don't know if this is all worth. But at least in my local network, I don't have to connect via internet. Rather local dns+ngix takes care of re-directing it as local connection.
2. Crowdsec is another tool someone suggested. I saw it could be used to ban bad bots/connection by making it to talk to nginx(i haven't figured it out yet)
​
https://redd.it/1av5d8r
@r_SelfHosted
hosting my own resume website.
I am hosting a website that I wrote from scratch myself. This website is a digital resume as it highlights my achievements and will help me get a job as a web developer. I am hosting this website on my unraid server at my house. I am using the Nginx docker container as all I do is paste it in the www folder in my appdata for ngx. I am also using Cloudflare tunnel to open it to the internet. I am using the Cloudflare firewall to prevent access and have Cloudflare under attack mode always on. I have had no issue... so far.
​
I have two questions.
​
Is this safe? The website is just view only and has no login or other sensitive data.
​
and my second question. I want to store sensitive data on this server. not on the internet. just through local SMB shares behind my router's firewall. I have been refraining from putting any other data on this server out of fear an attacker could find a way to access my server through the Ngnix docker. So, I have purposely left the server empty. storing nothing on it. Is safe to use the server as normal? or is it best to keep it empty so if I get hacked they don't get or destroy anything?
https://redd.it/1av1qb5
@r_SelfHosted
