Oxidiko — One-tap login with privacy, serverless, and open source
I built Oxidiko, a privacy-first authentication platform that runs 100% in your browser — no servers, no tracking, no shady business. It’s like a digital vault for your identity, without the cookies (or the crumbs).
Why? Because authentication sucks. It’s slow, invasive, and half the time you’re just feeding data into some VC-backed surveillance machine. So at 17 (with help from an overworked AI), I decided to fix it — or at least make a prototype that respects people’s paranoia.
What it does:
Your profile & vault are encrypted and stay local, stored in IndexedDB.
Unlock with WebAuthn passkey + PIN — no passwords, no sketchy emails.
No cookies, no analytics, no tracking unless you explicitly choose to export.
Open source (BUSL 1.1 — free for personal/educational/internal use).
Try it:
🔗 Make your vault
🔗 Log in & test
📄 Docs
💻 GitHub
It’s still a prototype, so if you break it, congrats — you just found a bug (or feature?). Would love your feedback, questions, or even brutal roastings.
📜 Note on license:
Oxidiko is licensed under BUSL 1.1 — source-available & free for personal/self-hosted/educational/internal use. You just can’t resell it as your own SaaS. I know it’s not “pure” open source, but I wanted to keep it safe from being rebranded & sold without permission.
Thanks for checking it out!
https://redd.it/1lun0yb
@r_SelfHosted
CGNAT traversal and complicated networking with Zrok
Hello!
My public-facing IP was recently STOLEN from me by my ISP and because my current situation it's impossible to get it back.
I'm self-hosting Nextcloud and a few other services with NixOS, and I'd like them to be available to the public internet.
I recently bought a VPS and deployed a janky setup with WireGuard that forwarded some ports over to my home-server (to be more specific, my home-server reached out to the VPS and kept the connection alive forever).
This worked, but as I wanted to do more advanced things like host an email server, have a VPN-connection to my home-network, or have the VPS respond to some subdomains and my home-server to others, it became complicated and my config
didn't work anymore.
This is why I wanted to change my entire networking setup.
I looked at Headscale + Tailscale, but apparently "Tailscale Funnels" which are tunnels weren't going to be implemented in Headscale anytime soon.
Now I'm considering self-hosting Zrok that uses OpenZiti in a Docker container, but I'm not quite sure how this zero-trust architecture works.
Worth mentioning that I have a few other external home-servers without a public IP that I'd like to connect to my network-of-things and use them as exit-nodes as well.
Is Zrok good for my use-case? Can this be done in a better way?
https://redd.it/1lul7vp
@r_SelfHosted
I'm tired of self-hosting email, even if I do everything right, my provider's IP address range gets blocked
I'm well-versed in SPF, DMARC, etc. But at the end of the day, I can't do anything about OVH getting IP ranges blocked.
So, I figure I'll throw all my email at either Google or Microsoft. I'm convinced they're the only two players and block out any competitors by ensuring it's virtually impossible to stay deliverable to their IPs if you're not Google or Microsoft.
Or maybe it takes more effort than I'm willing to put in.
Can anyone point me at the process for migrating to either of these, and maybe a suggestion on which is better (if one stands out)?
I will only use them for email. I'll host my DNS records and point them to MS/Google etc. Previously I used imap2imap to migrate historical email, is it possible to use that?
https://redd.it/1luk33a
@r_SelfHosted
I built a SCIM 2.0 server in Go for small teams
Hey Reddit! 👋
I built GoSCIM \- an open-source SCIM 2.0 server designed for small to medium teams that need user provisioning without enterprise complexity.
# What is SCIM?
SCIM (System for Cross-domain Identity Management) is the protocol that automates user provisioning/deprovisioning across systems. When someone joins your company, SCIM automatically creates their accounts in various applications. When they leave, it disables access everywhere.
# Why I built this:
Working at a company with under 100 users, we needed SCIM but enterprise solutions felt like overkill
Existing open-source options were often complex Java applications
Wanted something lightweight that starts quickly
Dynamic schema loading without code changes
# What makes it practical:
Lightweight Go implementation
Works well for small to medium teams
Simple configuration and deployment
Efficient resource usage
# Cool features:
# Dynamic schemas - just drop JSON files
/config/schemas/employee.json → instant new endpoints
# Smart filtering that actually works
GET /Users?filter=name.familyName co "Garcia" and active eq true
# Role-based access control
"$reader": "admin", "hr"
"$writer": "admin"
# Architecture:
Your Apps → GoSCIM → External Systems
(The Hub)
Built on Go + Couchbase + ANTLR parser. Stateless, containerized, Kubernetes-ready.
# Quick start:
git clone https://github.com/arturoeanton/goscim.git
cd goscim
go run main.go
# Visit http://localhost:8080/ServiceProviderConfig
# What I'm excited about:
Complete documentation in 7 languages: English, Spanish, Chinese, Japanese, German, French, and Portuguese! 🌍
Because identity management challenges are universal, and language shouldn't be a barrier.
GitHub: https://github.com/arturoeanton/goscim
Would love your feedback! What identity management challenges do you face in smaller teams?
Edit: Thanks for the interest! For those asking about deployment, it's just a Go binary or Docker container.
Edit 2: Someone asked about Active Directory integration - it's designed to work with any SCIM-compatible system.
Edit 3: The multilingual docs thanks claudecode!!!
# Common Questions:
Q: How does this compare to enterprise solutions? A: It's designed for smaller teams that need SCIM functionality without enterprise complexity or pricing. Less features, but much simpler to deploy and maintain.
Q: Production ready? A: I'm using it at my company (under 100 users) successfully. It's stable for small to medium deployments, but I wouldn't claim it's enterprise-ready yet.
Q: Windows support? A: Yes! Cross-platform Go binary. Also Docker containers for easy deployment.
Q: Contributing? A: Always welcome! Check out the issues labeled "good first issue" on GitHub.
https://redd.it/1luf8k5
@r_SelfHosted
My wide ride from building a proxy server to a data plane for AI —and landing a $250K Fortune 500 customer.
Hello - wanted to share a bit about the path we’ve been on with our open source project. It started out simple: we built a proxy server to sit between apps and LLMs. Mostly to handle stuff like routing prompts to different models, logging requests, and managing the chaos that comes with stitching together multiple APIs.
But that surface area kept on growing —things like needing real observability, managing fallback when models failed, supporting local models alongside hosted ones, and just having a single place to reason about usage and cost. All of that infra work added up, and it wasn’t specific to any one app. It felt like something that should live in its own layer, and ArchGW continued to evolve into something that could handle more of that surface area— an out-of-process and framework-agnostic infrastructure layer —that could become the backbone for anything that needed to talk to models in a clean, reliable way.
Around that time, we started working with a Fortune 500 team that had built some early agent demos. The prototypes worked—but they were hitting real friction trying to get them production-ready. What they needed wasn’t just a better way to send prompts out to models—it was a better way to handle and process the prompts that came in. Every user message had to be understood to prevent bad actors and routed to the right expert agent - each one focused on a different task—and have a smart, language-aware router that could send prompts to the right one. Much like how a load balancer works in cloud-native apps, but designed for natural language instead of network traffic.
If a user asked to place an order, the router should recognize that and send it to the ordering agent. If the next message was about a billing issue, it should catch that change and hand it off to a support agent—seamlessly. And this needed to work regardless of what stack or framework each agent used.
So Arch evolved again. We had spent years building Envoy, a distributed edge and service proxy that powers much of the internet—so the architecture made a lot of sense for traffic to/from agents. This is how it looks like now, still modular, still lightweight and out of process but with more capabilities.
https://preview.redd.it/xmjkfodb6jbf1.png?width=1974&format=png&auto=webp&s=085f8734d70231ba04ad681c8cc06f747defcb74
That approach ended up being a great fit, and the work led to a $250K contract that helped push Arch into what it is today. What started off as humble beginnings is now a business. I still can't believe it. And hope to continue growing with the enterprise customer.
We’ve open-sourced the project, and it’s still evolving. If you're somewhere between “cool demo” and “this actually needs to work,” Arch might be helpful. And if you're building in this space, always happy to trade notes.
https://redd.it/1lu8j9k
@r_SelfHosted
After much cursing at my screen, I've finally got dashboards for my automated Plex stack that I'm happy with!
https://i.imgur.com/pkwouSz.png
https://redd.it/1lu4vl2
@r_SelfHosted
Which self hosted apps you find have the best UI? (Themes are also welcomed)
For me:
App flowy
Ghost
Glance
Hoarder
https://redd.it/1ltrv85
@r_SelfHosted
LuCI Mobile: Manage Your OpenWrt Router From Your Phone (Beta + Seeking Testers!)
https://redd.it/1ltuc46
@r_SelfHosted
Homelab Visualiser
I built this application to help me understand the physical layout of my homelab (@ https://github.com/pradt/homelab-visualiser).
There were multiple occasions where I needed to answer:
What is running on a specific IP?
Is that service running on bare metal, in a Docker container, or inside an LXC?
Where exactly is this application deployed?
So I created Homelab Visualizer — a tool that lets you visually organize and map your servers, VMs, containers, and applications. It started as a small personal project just so I can quickly understand where things were and overtime I added some features in there to enable it to be a dashboard (just a links page), this is what I primarily use as my dashboard now. I'm opening this up to everyone if anyone has a use for something like this -
[Example of the dashboard](https://preview.redd.it/f94vdp405fbf1.png?width=1263&format=png&auto=webp&s=28a8b2e08a1b5f8b773d02b7b7ac8c957aed6bd8)
While this may not exactly look attractive compared to some of the dashboard's I've seen around - it is very customisable (there are style edits that you can do to personalise this).
Some of the key features :
Visual container-style layout for representing servers, apps, VMs, etc.
Two view modes: box layout and hierarchical tree
Locate apps by IP and trace them back to their physical host
Deep customization of icons, layout, and styling
Edit in-place - you don't need to get to the backend edit config/yaml, build it etc...
It also supports a wide range of icon sources (emoji, Font Awesome, Material Icons, Simple Icons, Homelab-specific icons, favicons, and custom URLs). You can view the icons and select the appropriate ones without having to remember codes etc...
Try it out!
Quick docker-compose.yml or docker run commands are available. The full README with setup instructions, configuration, and usage is here: https://github.com/pradt/homelab-visualiser
Please note that this has been working in a specific usecase for me without any issues - but you may face issues - for that reason this should be considered alpha release.
If you use this, I'd appreciate some feedback (via github issues) - or let me know how you are using it in the comments. Appreciate any suggestions or thoughts. Thanks in advance.
https://redd.it/1ltpgkq
@r_SelfHosted
Does anyone run an open source MDM on their networks.
So I have been looking at mdms recently and have had a few demos for paid mdms. What I really wanted to know was if there were any open source ones and if people used them.
Are there any reliable ones is open source there yet?
https://redd.it/1ltnhli
@r_SelfHosted
Successfully installed Nexctloud via Docker with Cloudflare tunnel and custom domain
Yeah. I did but I'm not proud. Really tried understanding which I somehow did. I want to say I understand it enough to run/install it but no. I feel stupid.
I was able to install it with help of Chatgpt and Grok. This is my second install. The reason I reinstalled it is because I want the data to be is home folder rather than filesystem root.
The first time is quite easy-- just followed instruction and I kind of get the idea.
The second time is a real mess. Lots of troubleshoot which I really don't know. I think some of the files I installed before is messing what I'm trying to do in the second install.
I asked AI for a complete clean, remove, purge and whatever it's called.
I came to the point that I just copy and paste every error and hurdles I encounter until I get it to work.
I accomplished my goal but I feel terrible. I feel dirty.
I'm new to Linux and docker. I was able to install Arch but I ended up with Zorin to avoid frequent troubleshooting. I just want to slowly leave Windows.
Anyways, maybe I'll be familiar with this system in the future. Wish me luck.
https://redd.it/1ltn53s
@r_SelfHosted
I made a one-page comprehensive dashboard using Fitbit API, influxdb, and Grafana. Code and setup instructions are available in the comments.
https://redd.it/1awreht
@r_SelfHosted
Share As QR code
So was recently in a weird situation where I wanted to share a YouTube video I was watching with my coffee barista, but I didn't have ( or want to get ) his number. To my surprise there was no easy way to do this.
So I went home and coded ShareAsQRcode.com.
Insructions are simple:
visit site.
Install PWA on your phone.
Use most any app; like youtube, click share and then share as qr code ( might be under more ) icon.
Let sudo friend scan phone.
Please enjoy, but keep feedback to yourself I made this for me for a very specific reason :)
https://redd.it/1awmra5
@r_SelfHosted
Today I joined the ranks
https://redd.it/1awl6pv
@r_SelfHosted
⚡Edgen now supports Vulkan, CUDA and Metal | Open Source and local GenAI server alternative to OpenAI's API. Supports all GGUF models, across Windows, Mac and Linux with one 30MB download.
Our goal with⚡Edgen is to make privacy-centric, local GenAI app development accessible to more people.
It is compliant with OpenAI's API and built in 🦀 Rust so it can be natively compiled into Windows, Linux and MacOS (with a 30MB executable).
We'd love for this community to be among the first to try it out and provide feedback!
Check out⚡Edgen on GitHub: GitHub - edgenai/edgen: ⚡ Edgen: Local, private GenAI server alternative to OpenAI.
And keep an an eye out for future releases:
Speech to Text
Embeddings Endpoint
Multimodal Endpoint
Text to Image Endpoint
​
https://redd.it/1awe0w5
@r_SelfHosted
Kan.bn – An open source Trello alternative, now with Docker Compose, localisation, rich text editing & more
https://github.com/kanbn/kan
https://redd.it/1lumqsl
@r_SelfHosted
State of self hosted Android TV
The last time it was discussed (about 4 month ago) we decided that there was no proper alternative to apple tv / nvidia shield pro for a smart TV replacement.
Either it's graphene OS that intentionally dodges google play services while the duchebags at FANG woldn't provide you with F-Droid clients for e.g. Netflix, or the boxes lack features like proper USB for controllers or encoding capabilities.
Whats the current state? Did anyone happily replace their TV with a KonstaKANG or Graphene image without making their children cry because they cannot wath their fav shows or losing their 5.1 sound?
https://redd.it/1lul8ir
@r_SelfHosted
From Task to Table: How I Finally Got to the Korean Burger
chrisveleris/from-task-to-table-how-i-finally-got-to-the-korean-burger-01245a14d491" rel="nofollow">https://medium.com/@chrisveleris/from-task-to-table-how-i-finally-got-to-the-korean-burger-01245a14d491
https://redd.it/1lugwk7
@r_SelfHosted
Why is no one talking about Yamtrack? It’s what Trakt should have been
Just wanted to shout out a project I came across (and tested) recently which is Yamtrack.
It’s a self-hosted media tracker that lets you manage your watchlist, track history, and organize shows/movies with ease. It supports manual tracking, and also has impressive integrations with services like Plex, Emby, Trakt, Simkl, MyAnimeList, AniList, Kitsu, etc..
I imported my entire library from Trakt and Simkl without any issues perfectly matched all. The UI is clean and fast, and everything works. Easy Docker deployment, user accounts, etc...
I've tried most of the other self-hosted trackers like Movary, MediaTracker, Watcharr, etc. Yamtrack hits the sweet spot between simplicity and powerful features. It’s clear a lot of thought went into its design.
With Trakt getting more restrictive for free users lately, this is honestly the best alternative I’ve seen — and it gives you full control over your data.
Definitely feels like one of those hidden gems in the self-hosted space that deserves way more attention.
Would be great if other great apps (like Cinexplore for movie discovery), would start using Yamtrack for their backend.
Anyways, I feel people should give it a try:
GitHub: https://github.com/FuzzyGrim/Yamtrack
Would be great to see more people use it and maybe even contribute, as the dev has been active and responsive! Thanks u/haumeaparty
https://redd.it/1lu8f36
@r_SelfHosted
Sprout Track, a self-hostable baby tracker has been updated with multi-family support - now you can host for friends without multiple instances or sharing data.
Several months ago I released Sprout Track, a self-hosted baby activity tracker I built as an alternative to the subscription-based apps on the market. The response from the community has been fantastic, with many of you deploying it for your own families.
Sprout track is still pretty new and the main requested features have been multi-family support and pre-built Docker images. Many of you wanted to host the app for friends and family members while keeping each family's data completely separate, and others wanted an easier deployment option. Version 0.92.0 delivers both - a proper multi-tenant architecture where each family operates in their own isolated environment with unique URLs and independent user management, plus official Docker images so you don't have to build from source.
**What's new in v0.92.0:**
· **Multi-family support** \- Each family gets their own `/family/[slug]` URL with completely isolated data
· **Enhanced authentication** \- JWT-based auth with family context
· **Backup/restore improvements** \- Import existing data during setup, automatic migration for older backups
· **Better real-time updates** \- Optimized API calls for a more responsive experience
· **Quality of life fixes** \- Pump log defaults, proper time handling, solid foods no longer affect feed timers
There are a lot more details in the ([changelog](https://github.com/Oak-and-Sprout/sprout-track/blob/main/CHANGELOG.md))
I've also setup a demo website. [Here](https://demo.sprout-track.com) is the link and the login information:
**Family Manager Access:**
* URL: [https://demo.sprout-track.com/family-manager](https://demo.sprout-track.com/family-manager)
* Password: `admin`
**Family Access:**
* URL: [https://demo.sprout-track.com](https://demo.sprout-track.com/) (select a family from the family selector)
* Available login IDs: `01`, `02`, `03` (1-3 ID's are randomly generated)
* PIN: `111222`
The demo is populated with semi-realistic 🙃 test data spanning multiple families and several days of baby tracking activities.
GitHub: [https://github.com/Oak-and-Sprout/sprout-track](https://github.com/Oak-and-Sprout/sprout-track)
Try it with Docker: `docker pull sprouttrack/sprout-track:0.92.0`
I appreciate all the feedback from the community - you're helping make this better for everyone.
https://redd.it/1lu2y45
@r_SelfHosted
Homelab Kubernetes Automation: Why I Chose K3s
https://blog.leechpepin.com/posts/homelab-2025-part-4-k8s/
https://redd.it/1ltyv5k
@r_SelfHosted
KV: a remote KVM
I am publishing the first preview version of KV, a written-from-scratch remote KVM solution.
You can use it to remotely control a server (or any computer) and it will give you a webpage where you can see the video output and emulate a keyboard and mouse. You can upload a disk image to the KVM and provide it as a USB mass storage device to the server. I suppose you can even install the operating system in the server this way.
It supports cheap and popular USB video capture devices. You need a SBC with a OTG port.
https://preview.redd.it/9130k4c8ggbf1.png?width=1543&format=png&auto=webp&s=bb98c2d1e419ff6c0053152175d71d2fcff40f67
There is a small video demonstrating the app here: https://youtu.be/\_NCVytMPW18?si=67kIt7nWbrda1uy8
And of course it's MIT-licensed and you can get the code at https://github.com/ralsina/kv
https://redd.it/1ltue2k
@r_SelfHosted
🎬 Jellyfin Poster Manager - Automatically find and upload posters from ThePosterDB
Hey r/selfhosted! 👋
I love ThePosterDB but they are still ages away from being an alternative image provider for Jellyfin unfortunately, so I build an "alternative" for that.
What it does
Jellyfin Poster Manager automatically searches ThePosterDB for high-quality movie and TV series posters and uploads them directly to your Jellyfin server. No more manual searching, downloading, and uploading!
# ✨ Key Features
🚀 Batch Operations: Process your entire library or filter by movies/TV series
🎯 Smart Filtering: Only update items without posters, or replace everything
🔍 Manual Selection: Browse multiple poster options when you want control
⚡ One-Click Setup: Simple configuration
# 🖼️ Screenshots
https://preview.redd.it/m828i5lcxfbf1.png?width=1426&format=png&auto=webp&s=39f756e70bde380b999bdb259acca0d93d67961a
https://preview.redd.it/5vvdge6txfbf1.png?width=1391&format=png&auto=webp&s=bcae602c3dc9b9ec8a01a6d17d63d9bbb3f64720
The interface shows your library with missing posters highlighted, and you can either:
Auto-process items in bulk (recommended for large libraries)
Manually select from multiple poster options for specific items
GitHub: https://github.com/TheCommishDeuce/TPDB\_JellyfinPosterManager
https://redd.it/1lts5ap
@r_SelfHosted
Pingvin Alternative
Since Pingvin is archived now, I'm looking for alternatives.
What I loved most about pingvin is the optino to disable the homepage and others not needing a login for sharing files.
I'd love to keep those features. Do you know similar alternatives? I tried Palmr but it doesn't offer an option to upload without a login.
\- Or do you think pingvin will be forked and maintained by others?
https://redd.it/1ltpxy0
@r_SelfHosted
I cut some unused services to keep my stack clean & useful.
I’ve always been fascinated by self-hosted services, and over time, I ended up trying out tons of them—even ones I never actually used. I spent countless hours tweaking docker-compose files, debugging reverse proxies, and fine-tuning configs.
Today, I finally reviewed my setup and cleaned things up: removed a bunch of services I hadn’t touched in a while, and kept only the ones I still use.
Here’s what’s left in my stack:
https://preview.redd.it/0xb1m6m6mebf1.jpg?width=3422&format=pjpg&auto=webp&s=c048e8ba67dc8e76ae524dd421036eb369816b5e
https://redd.it/1ltnuei
@r_SelfHosted
My version of homepage dashboard. "Indentation is meaningful in YAML"
https://redd.it/1awmw3q
@r_SelfHosted
Homepage is definitely my favourite dashboard, tried a few and stuck with this one the longest!
https://redd.it/1awoasu
@r_SelfHosted
Am i dumb (kubernetes)
Hi everyone.
Am I the only one feeling dumb trying to install kubernetes on a home lab ?
For context, I tried many things and every time it ended not working.
Today alone:
- tried to install kubernetes via kubeadm on Debian 12 alongside kube-vip. First containerd didn't work. Had to follow several workaround to make it work. Then kube-vip didn't work at all following their documentation. The issue was known but no solution.
- tried DNS round robin instead of VIP. This work until I tried to install the network add-on calico. Calico never manage to install and work...
- F*** it, fresh install of Alma linux 9, tried to install RKE2 on it following the documentation... The control plane node is still in NotReady" state since...
It's infuriating and make me feel so dumb...
Just wanted to share my feeling on it.
Do you guys know good howtos to follow to learn it for an home lab enthusiast ?
https://redd.it/1awgozg
@r_SelfHosted
Are services like nextcloud still necessary?
So, I think this one might get me in a little bit of hot water, but in my ~3 years of self hosting stuff, I've had a nextcloud instance that I just feel like I haven't really used at all? I've been noticing that I've just been using services that do one thing better each and combining them with OAuth to just have a better overall experience?
For example, I used to use nextcloud and recognise as my photo storage, but now I've been using immich which is just better in almost every way. Whenever I need quick access to files, I find samba shares to be more convenient than logging into a web interface and downloading. Movies and books have their own services, filesharing has its own service, collaborative stuff uses gitea, etc. etc.
I wonder if anyone here has specific reasons for hosting nextcloud as opposed to the others (maybe aside from the complexity of setting up more stuff)? It's just been kind of a resource hog with very little in the way of utility, and I'm genuinely considering why it's still so popular to this day.
https://redd.it/1awg7t6
@r_SelfHosted
Loopback App: Prototype to Web in 60s
Happy Wednesday r/selfhosted,
We know the joy of DIY, but sometimes you just need to quickly serve up your self-hosted app with HTTPS.
You've already got `ssh` installed and your app at `http://localhost:8000`. Just run `ssh -R awesomeapp:443:localhost:8000 free.lo.app`.
Congrats! Your app is at `https://awesomeapp.free.lo.app`. Just like that. Accounts and installations? Who has time for that? [`lo.app`](https://lo.app) is there for you.
Maybe you're a web designer and your clients want to see your work on their device. Maybe you've got an ISO and a BMC that only boots to HTTPS images. Or maybe you want to share your app with the world. [`lo.app`](https://lo.app) has got your back.
Why share with this community?
* Community Feedback: We're self-hosters, too! Loopback App was born while trying to bootstrap an orchestration of [awesome-selfhosted](https://github.com/awesome-selfhosted/awesome-selfhosted)) in our homelabs. We can't wait to hear your thoughts and see what you'll do with it!
* Giving back: Self-hosting has taught us a lot and we know some of you are building the Next Big Thing. We believe that people are fundamentally good and contribute to society. Our philosophy is that if we help you learn faster or you launch your amazing project sooner, that's a win for everyone.
* Interested? Check us out at [`lo.app`](https://lo.app) (that's `lo`, as in a loopback interface) or get started using `ssh` right away!
Happy hosting,
Matterloom
*We're currently hosting this on a best-effort basis and out of our own pocket; we're providing the best experience our budget will allow; set your expectations accordingly!*
https://redd.it/1awgd8c
@r_SelfHosted
