r_selfhosted | Unsorted

Telegram-канал r_selfhosted - r/SelfHosted

820

@r_channels

Subscribe to a channel

r/SelfHosted

Is there any self hosted accounting / bookkeeping software?

I’ve started using Invoice Ninja, it does invoicing and expenses, but doesn’t do bookkeeping.

Is there any self hosted / standalone software that does all this? Ideally free or one time payment.

I have a very basic yearly accounting needs : 20 invoices, 7 income payments expected and something like 30 expenses.

https://redd.it/kq6a3k
@r_SelfHosted

Читать полностью…

r/SelfHosted

Alternative to OSX/Ios Notes

I love Notes on mac because of its workflow. You've got folders where you put notes and they are all there in sequence and in the same window. Yet I'm looking to move to an open source alternative as I got sick of apple increasing the price on its products


So

Is anybody aware of a good open source solution ?

https://redd.it/kq5oyk
@r_SelfHosted

Читать полностью…

r/SelfHosted

Sharing filesystems between two KVM's

I have a Transmission KVM & a Jellyfin KVM, is there a way to allow one KVM to access the contents of another KVM?

For example Jellyfin having access to Transmission and can stream video from the downloads folder while allowing transmission to run normally?

Thinking it's probably best to set up a 'Radarr, Sonarr, Jacket, Transmission & Jellyfin' stack but would rather stick to my simple one with KVM if I can help it.

Any advice?

https://redd.it/kpz1ev
@r_SelfHosted

Читать полностью…

r/SelfHosted

cant get nextcloud to work

Im trying to get nextcould on docker running on my server but im having issue with it. I can open the setup page but once i create an account and try to login nothing happens, the page just reloads. I stripped down everything to the most basic setup:

nextcloud:
image: nextcloud:apache
container_name: nextcloud
env_file: env/nextcloud.env
volumes:
      - /home/me/volumes/nextcloud:/var/www/html/config
ports:
      - 9081:80


in my env file i have:

TZ=America/New_York
NEXTCLOUD_TRUSTED_DOMAINS=192.168.1.101:9081 # ip of docker server


anyone know what im doing wrong? i don't want to create a public subdomain for it quite yet, just trying to play around with it first.

https://redd.it/kpzk78
@r_SelfHosted

Читать полностью…

r/SelfHosted

Keep the bad guys out

Not from me but makes a lot of sense to me. A list, updated daily, of IPs that have tried to breach other hosts or inject malware: https://github.com/stamparm/ipsum.

It uses ipset which as far as I understand is an array of IPs so it doesn't overload iptables with single entries. Today the list had 12456 IPs.

Can be considered an alternative to geo blocking.

https://redd.it/kpx6rn
@r_SelfHosted

Читать полностью…

r/SelfHosted

Working on a new flyweb-style app, for secure self-hosting without a domain name, and hyperlocal sites like cafe bulletin boards!

One of the big problems with self hosting is that it nearly always requires manual configuration, or uses a cloud service somehow, even if it's just DuckDNS. You can't just buy something like a NAS, and have it just work, with no setup, domains, self-signed certs to install, fees, or dependence on the internet.


That level of reliability and convenience is really what you want for something like a smarthome hub, or home file server, so I started this project: https://github.com/EternityForest/hardlinep2p to fix that.


The goal is basically to be "Bittorrent for servers", accessing services in a P2P manner, the same way BT accesses content.


To access a site, you go to a link like "http://e868423731872b8235a0adc9102bb45bb9e8321e.localhost:7009/", and the app running on your local device acts as a proxy to the real server, no matter where that server is physically located.


The link is based on the hash of an SSL certificate, which is a real modern TLS cert, but since the service will only connect to one exact certificate, we don't have to use any of the domain name matching features. The hash is also used to find the machine hosting the service. First through LAN multicasts, then through a web service, which is just a proxy to the OpenDHT network, and anyone can easily run their own proxy.


Actually publishing a service only takes one command line, which will expose the local webserver of your choice to the world as a HardlineP2P site. From there, you can share the link with anyone who has the app, they don't need to configure anything, and you can also search for services on the LAN.


It's all written in pure Python3(Aside from requiring opendht for the server side, Kivy, and a few common libs), and has been tested on both Linux and Android(Android is client only). So it could easily be embedded as a plugin for something like Home Assistant, for out-of-the-box remote access.


This is all still alpha, but I submitted my application to the Play store for open testing, and you can check out the code on github if you want to try it.

https://redd.it/kpxpit
@r_SelfHosted

Читать полностью…

r/SelfHosted

minimal, simple, secure file hosting (self hosted of course!)

I've searched across selfhosted and other places, and can't seem to find something that fits exactly what I'm looking for. I can meet my requirements using common solutions (nextcloud, VPN, 2FA, or even SFTP) but wondering if there's something simpler...

Looking for a file hosting solution that is (1) easy to use, (2) ideally clientless, and (3) secure. Use case is my family (like many of yours) has a few small but critical documents (e.g., past tax filings, PDFs of important docs like birth certificates, etc.). I want to put all these docs (let's just say it's <1gb <100 files of PDFs and text files) in a secure place. My parents (not so tech savvy) will want to upload the files there, access them when needed, etc. I want them to be able to access this from anywhere (i.e. open to the internet) and with little fuss (want to avoid a VPN based solution).

I have nextcloud setup and it pretty much works, but is much more involved than what I need, so looking for something simpler. Filebrowser seems close, but not sure how to lock it down (maybe authentication through a reverse proxy?). I don't even need support for multiple users (3 or 4 people can all share the same credentials for this purpose).

Basically: not-tech savvy person goes to secure.example.com from any web browser, types in a password and uses some kind of 2FA/MFA, then gets to a simple web UI to upload, view, and download a few PDF and TXT files. Ideally it's dead simple from an admin/maintenance perspective. Would be great if it ran easily on a single pi or similar.

Note - will be handling backup of these files separately, this is more for the "live" usage.

Any thoughts?

Thanks in advance!!!

https://redd.it/kpuza3
@r_SelfHosted

Читать полностью…

r/SelfHosted

Got my first NAS, a DS220+. It has 2 LAN ports. I have a quick question about setting up a media server.

I got my first NAS and got it all setup to stream to my Raspberry Pi which has been my media player for about a year, using Kodi.

The DS220+ has 2 LAN ports. One is of course connected to the home network. The other is empty. Am I able to use the 2nd LAN port to connect to the Pi to stream content quicker/more efficiently?

https://redd.it/kpt0oi
@r_SelfHosted

Читать полностью…

r/SelfHosted

Cant get Docker + Cloudflare + Traefik + Domain to work!!

I have been following DBTech's very helpful tutorial with video.

https://dbtechreviews.com/2020/03/how-to-install-and-setup-traefik-with-cloudflare-using-your-own-domain-name/

After following through I am now quite stuck. I am not able to get the traefik dashboard running on the domain. It runs fine via local ip ( 192.168.x.x:8080 ), I have made sure the ports are open, and within Cloudflare SSL is set to Flexible with HTTPS on.

However, when I try the domain it fails with Error 522, Connection Timed Out.

Any ideas??

https://redd.it/kpmblz
@r_SelfHosted

Читать полностью…

r/SelfHosted

Best identity management?

I'm looking for a great identity management system based on LDAP that I can connect to everything (samba shares, jellyfin, traefik, …). I really want something with a great web UI.

In the past, I used OpenLDAP with phpLDAPAdmin and Keycloack but I didn't really like phpLDAPAdmin UI and I'm not sure I'm going to need Keycloack this time. I saw LDAP Account Manager but it seems like I have to pay a license for all features so it doesn't seem to be the best option.

Does anyone have anything great to recommend and why?

Thanks!

https://redd.it/kpor94
@r_SelfHosted

Читать полностью…

r/SelfHosted

What and how to backup things of my phone to Nextcloud?

Can someone give me advice on how would I backup important things from my phone to Nextcloud(I am not asking you the official Nextclud way but the way you found it convenient/secure/easy/etc.)

https://redd.it/kpn1tp
@r_SelfHosted

Читать полностью…

r/SelfHosted

"Converting" Excel spreadsheet calculators into static webpages - suggestions?

Not sure if this really belongs in /r/selfhosted but I figure if it doesn't directly belong here, someone can point me in the right direction.

I've created a couple of Excel spreadsheets that I use in work. The spreadsheets are designed to do some temporary calculations (nothing is saved) and are hosted on a Sharepoint where they need to be downloaded. My main problem is partly that they look ugly (I'm not particularly good at using Excel) and partly that they're confusing (the people using them are even less adept at Excel and there are a lot of visible calculation fields that they don't really need to see). The second problem is that because they need to be downloaded to use, I've noticed that it's not uncommon for old versions to still be in use.

So I'm wondering if it's possible to convert them into some form of static page where only the input fields and the results are visible (i.e. calculations are hidden in the background). I could obviously just look at embedding the spreadsheets in a website but that doesn't resolve the ugliness/confusion aspect.

The speadsheets are fairly straight forward and I've been able to convert some of them (that only use IF and SUM) to Calculated Field Forms on a Wordpress blog but they're quite slow. The other uses a combination of MATCH, OFFSET and VLOOKUP to return results based on an input from a drop-down menu which obviously doesn't work with CFF.

So yeah, any ideas?

https://redd.it/kpl2vh
@r_SelfHosted

Читать полностью…

r/SelfHosted

Website through Nginx PM works without access list, but with it I only get a 403 error.

To preface, I want to mention that everything is working and I am able to access portainer.site.com when I don't use an access list.

Once I add an access list which allows my public ip, portainer.site.com then gives me a "403 Forbidden" error.

Any suggestions?

https://redd.it/kpim03
@r_SelfHosted

Читать полностью…

r/SelfHosted

Any good guides on network security, port forwarding, ect.?



https://redd.it/kphwtc
@r_SelfHosted

Читать полностью…

r/SelfHosted

App to Add DNS Records to Cloudflare?

Question everyone!

I can't be the only one that finds it annoying when I see an awesome new microservice I want to host, then need to create a new record in Cloudflare's Portal, then add to my DDClient to monitor for IP changes as well as need to add to Caddy to forward/SSL the new microservice.

Is there a tool that does all in one? Will automatically create the new A record, monitor for IP changes, and also be a proxy? If not, that would be a neat script to make if you have everything running in docker...

https://redd.it/kpf7yf
@r_SelfHosted

Читать полностью…

r/SelfHosted

How To Build A Cloud-Based Application
http://cloudbasedapplication.club/

https://redd.it/kq6k5z
@r_SelfHosted

Читать полностью…

r/SelfHosted

Cups printing over the internet via ddns is a thing or not?

I recently installed cups and sane on my media server (an old desktop), it works fine, but I wanted to print with my phone, and since my router sucks, the WiFi connection isn't great. So I wanted to print over the internet and if I use an app like Let's print droid with the public IP of my server it works fine, but I don't have a static IP and the app doesn't accept ddns links in the "CUPS server import" thing.

So is there an app that accepts ddns for printing with CUPS (and maybe one that supports SANE)?

https://redd.it/kpx3mh
@r_SelfHosted

Читать полностью…

r/SelfHosted

Detect humans, vehicles, animals etc using machine vision from a RTSP video feed

Anyone else here do this?

I use UniFi NVR at home. It works well enough for my requirements so I’m not looking to change NVRs (although I will if there is something significantly better).

I can get an RTSP feed out of my cameras - to use for machine vision. If needed I can use ffmpeg to dump thumbs to disk as well.

So anyone here do anything like this?

https://redd.it/kq31te
@r_SelfHosted

Читать полностью…

r/SelfHosted

Android cloud / android remote access / Genymotion alternative / Virtualbox

1) scrcpy works but scrcpy-android doesn't so using a real phone isn't an option AFAIK

2) Rpi4 is x86 but maybe there's an ARM device that can run QEmu or similar?

What's the most economical solution if you've no home server already in place?

https://redd.it/kq1koa
@r_SelfHosted

Читать полностью…

r/SelfHosted

Server OS with HA with docker

So I have a project coming up in a couple weeks where I have to run a map tiler server for an Android app that my father developed. I currently self-host the typical stuff (Plex, Nextcloud, Bitwarden, Matrix, Mastodon, PixelFed, a slew of Wordpress/Joomla sites, etc.) across 4 Poweredge servers all running UnRaid. I love UnRaid, but one thing it lacks is any form of high-availability...and lately I have been battling call traces when assigning my pihole dockers.....which after a day cause my servers to completely crash. With that said, I am having a hard time finding an easy to use (preferably with a GUI) server OS with high availability for docker containers. I was originally looking at TrueNAS Scale (obviously I know they are still in Alpha) but found out that HA will only be for the Enterprise version. Setting up HA in RancherOS with kubernetes seems really complicated on top of I don't have any experience with kubernetes. Proxmox seems to only have HA with VM's...which I really don't want to run any VM's nor run a VM to host docker. I looked into docker swarm but I can't tell if it's on it's death bed or not. Anyone else have experience with a high availability docker system?


Edit: I've got three physical servers to throw at this.

https://redd.it/kpxek4
@r_SelfHosted

Читать полностью…

r/SelfHosted

certbot / letsencrypt gave up the ghost?

Hey all,


I've had a lovely server stack running behind an nginx / let's encrypt setup (linuxserver/swag docker image) for some time. Earlier today, I attempted to add a domain, and now when certbot issues acme challenges it fails with this error:


To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address. Additionally, please check that
your computer has a publicly routable IP address and that no
firewalls are preventing the server from communicating with the
client. If you're using the webroot plugin, you should also verify
that you are serving files from the webroot path you provided.


This has left me high and dry without a reverse proxy. I've read through some docs (and many forums) and have addressed all the most common pitfalls (despite this working previously):


* I double checked my server had ports 443 and 80 open:


sudo iptables -A INPUT -p tcp --dport [443 or 80] -j ACCEPT


* I double checked my port forwarding on my home router (443, 80 correctly addressed to server)
* I double checked my dns records with namecheap (all pointing to the correct public / outward facing ip)
* I checked to see if my ISP was blocking ports 80 or 443 (they're not)
* I checked to see if it were an issue with the docker network (e.g. through --network_mode=host rather than the usual bridge)


I'm a bit stuck, because I've been able to run and access simple, non-SSL nginx containers through the domain:

docker run --rm -p 80:80 --network=network_proxynet nginx


Last tidbit of info: I'm on debian 10:

Linux hostname 4.19.0-13-amd64 #1 SMP Debian 4.19.160-2 (2020-11-28) x86_64 GNU/Linux


No matter what I try, the http acme validation challenge fails and throws that error. What am I missing? Could it be something related to namecheap? I attempted to do a dns verification with them (which also failed). Has anyone else had similar troubles?

https://redd.it/kpwubn
@r_SelfHosted

Читать полностью…

r/SelfHosted

Using certs for hosting server

I have a setup where I have a NGiNX reverse proxy that performs SSL termination and then routes the request to the correct server. Currently the hosting server only listens to HTTP. I want to set it up so I can use an already trusted CA for both the reverse proxy and the local host server. So a setup like this:

62ntgEp.jpg (745×972) (imgur.com)

So the INTERNET => REVERSE PROXY => HOSTING SERVER but when a LOCAL COMPUTER connects to HOSTING SERVER using it's direct IP address, I want it to use a Let's Encrypt cert. Is this possible? If so, how can I do this with certbot?

https://redd.it/kps4gs
@r_SelfHosted

Читать полностью…

r/SelfHosted

Follow up on Nextcloud...

I recently wrote a post asking why everyones always recommends Nextcloud, explaining that I had problems with poor performance - despite various optimizations on the server - and for that I had switched to Seafile with better pertformance.

Well.... I am back to using Nextcloud :D So I think it's fair to give some credit back to it.

Even with Seafile, I was still using a small Nextcloud instance for Talk, which I love. In the end I didn't like that I had to use Nextcloud just for that and something else for syncing. Also you are right that Nextcloud's value goes beyond syncing, because I am now using other plugins/apps too.

Besides, I was suspecting that perhaps I was having some problems with the desktop client also because I was on Big Sur 11.2 beta. The latest stable release of the desktop client didn't work at all, and I had to use a recent daily build that worked, but resulted in frequent conflicts due to mismatching checksums.

Since I bought another M1 Mac Mini (with 16GB, I am going to sell the 8GB), I decided to give Nextcloud another try for the syncing as well.

I am staying on 11.1 stable, and apparently the latest release of the Nextcloud desktop client is working perfectly fine, with no issues at all. I didn't even have to install a more recent daily build.

I am now using Hetzner's managed Nextcloud ("Storage Share"), which is only 4.90e/mo for 500GB of storage, so it's also quite a bit cheaper than the block storage I was using with Seafile. The initial syncing of my 180GB of data took a few hours longer than Seafile, but to be fair it wasn't much longer, or not as much longer as I was expecting.

Done the initial sync, it's working fine. When I edit code and documents, the files are synced reasonably/acceptably quickly. And I am not having any weird errors with mismatching checksums and whatever like last time. So I am not sure what happened there.

But I thought it would be fair to say that perhaps the issues I was having with mainly the desktop client were due to my particular setup. Boh. I haven't deleted Seafile yet, I will keep an eye on Nextcloud for a week or so to see if it's stable. But so far with 4 users it's working well. Fingers crossed! :)

https://redd.it/kpren9
@r_SelfHosted

Читать полностью…

r/SelfHosted

Why is rabbitmq_server on my Ubuntu Server?

Hi there,

i rented a virtual Server with Ubuntu 18.04.5 LTS and Plesk Obsidian on it.I am running several services on it:

* several Wordpress-Websites, configured by Plesk, using Apache and nginx as reverse Proxy
* a important installation of Nextcloud, configured by Plesk, using Apache and nginx as a reverse Proxy
* a Teamspeak-Server
* a Minecraftserver within a Docker Container
* a Teamspeak-Musicbot (Sinusbot) within a Docker Container
* a Installation of Photoprism within a Docker Container
* a Installation of Onlyoffice for Nextcloud within a Docker Container

Suddenly I experience a very bad performance on my webpages and also it takes a long time to login to the server via SSH. So I started htop to look for reasons of bad performance.

I found a process, which I cannot classify: It is `/usr/lib/erlang-9.2/bin/beam.smp` which runs `/usr/lib/rabbitmq_server-3.6.10/ebin`

I cannot remember, that I installed rabbitmq. I googled it, I can not understand what it is for. Is some of my Services up there using rabbitmq? Is it safe to kill and delete? Where does it come from? Is my Server hijacked?

Thank you for your help!

https://redd.it/kppqzb
@r_SelfHosted

Читать полностью…

r/SelfHosted

Document management on Pi

Hi guys, I'm planning to install a DMS system on my Pi 3b+, which is already running Home Assistant and Owntracks, but should be able to handle an occasional additional task. I only need a simple service with OCR and tagging. I've found paperless, paperless-ng, papermerge and teedy, which all seem to offer what I'm looking for.

What're your experiences with these apps? Which would you recommend to run on a Pi?

https://redd.it/kpndax
@r_SelfHosted

Читать полностью…

r/SelfHosted

Teedy - can multiple users share an instance?

I know that multi user is supported, but how can we keep our documents separate?

It seems like overkill to have to spin up a separate docker container for another user.

Many thanks!

https://redd.it/kpkcnf
@r_SelfHosted

Читать полностью…

r/SelfHosted

Is there a self hosted GitBook alternative?

I'm over WordPress, I think they have gone too far with trying to make an editor that is all things to all people and I find editing to be very distracting. I am writing technical documentation and need it to be precise rather than fancy.

I really like GitBook, but I want to retain creative and hosting control.

Is there a self hosted version of something like GitBook?

Many thanks.

https://redd.it/kphfbl
@r_SelfHosted

Читать полностью…

r/SelfHosted

SMTP with port forwarding vs reverse proxy

For this post, please assume that (1) I encrypt all traffic via SSL/TLS, (2) My e-mails work fine even if self-hosted (no flame), (3) I do not want to use a VPN for the following, for several reasons (so please do not suggest it).

Context: I self-host several HTTP- and TCP-based services on my Synology. So far, I was able to avoid opening any port on my router thanks to DNS validation for Letsencrypt and reverse proxy systems (say, ngrok and similar) on a VPS.

I have recently started self-hosting e-mails. For setting up e-mails, I went with my usual workflow to reverse proxy all relevant ports on my VPS. So, no port forwarding and the public-facing side of SMTP and IMAP is my VPS IP. So far, so good.

My nameserver hosting service (DNSmadeEasy) includes a nice, cheap package that adds mail forwarding and backup MX. I know I could have done this on my VPS, but I feel better to know that there is a failsafe by a 3rd party.

Current situation: E-mails sent to me go this route: DNSmadeEasy:25 ---forward---> VPS:25 ---reverse proxy---> Synology:25. Of course there is a router here in the mix, but virtually it does not matter. My home IP is never exposed and ports on the router are closed.

What I am considering to do: For e-mail only, I would open some random port on my router, port forward to the Synology's port 25, and cut my VPS out of this: DNSmadeEasy:25 ---forward---> (router:12345) ---port forward---> Synology:25.

The advantage of having the service with the nameserver provider would be that DDNS works out of the box (and Synology provides one, too, so no worries for this). My home IP is also never exposed, as the MX entries are about DNSmadeEasy anyway. I also think that my router provides a firewall, so I might be able to allow traffic only from DNSmadeEasy (have to check this).

Why I would do this: For e-mail, only my Synology needs to be up instead of my Synology AND my VPS. For the other services I host public-facing, I do not really care if there is a bit of downtime while my VPS is down.

What are my questions:

1. Does this change make sense from a reliability point of view, or is having the Backup MX sufficient and I am just paranoid?
2. Does this change matter much from a security point of view?
3. Suppose I decide to port forward IMAP, too. Would this change much from a security point of view?

Many thanks in advance for your help!

https://redd.it/kpimsv
@r_SelfHosted

Читать полностью…

r/SelfHosted

Nginx reverse proxy via VPN

Hello all,
For reasons that are not overly important, I am going to be living for a while in a place where I have a internet connection provided, but I don't have access to configure the router to setup port forwards and static IP etc. The static IPs I should be able to deal with manually from the client side, but the inability to set up port forwarding and static routing significantly limit my ability to access my self hosted services as I normally would.

My intent is to spin up a Digital Ocean equivalent server and have my servers at home VPN into the DO droplet, with Nginx on the DO droplet running as a reverse proxy. Does anyone have any experience with configuring Nginx to run as a reverse proxy via a VPN? I can't find any guides and its not something I've tried before, is it as simple as using the VPN IP addresses in the Nginx config and running everything else as per a normal reverse proxy, or is there other steps to make nginx run over the VPN tunnel rather than a normal network interface.

While I can move some of the things I self host to a digital ocean equivalent, the storage requirements of some of the things I host (ie: file storage) makes those things cost prohibitive, so this is the method that seems to make sense. If I've missed another way of doing it that would be simpler, please by all means point me in a different direction.

Cheers!

https://redd.it/kphfd3
@r_SelfHosted

Читать полностью…

r/SelfHosted

Need Solution How to access a terminal through web with account username and private key of any setup. (Single source of deployment but can connect with multiple setups)

Hello,

I am in search of a package (written in Node/Python/Go etc) which will give a SSH terminal through web to access setups and we can execute any linux commands through web. Also, it must be very easy to deploy the binary. We prefer installing/deploying it at a single source and that would just be used to connect to all the setups available.

What we have \- We store IP address, username and private key of the setup. This is generated through our custom ssh python package. We do not store passwords, obviously.

What we want \- There are many setups which we want to monitor. For each setup, we do store username and private key. So, from our web application, for a particular setup, user can click and there would a check to see if the user is allowed to access that setup or not. If the user is authorized for the access, then a web terminal would be shown automatically based on the username and private key of the setup. Now, the user can just interact with the web terminal like he/she would in linux.

PS - There should be no user interaction involved in this. NO alert box for login etc. It MUST automatically login with username and private key of setup.

Tools/Packages tried -

1. WebSSH2 package, it works great but it doesn't have support of login with just username and private key. Also, it asks for username and password.
2. webssh python package, but still private key not supported
3. web-console php package. This package needs to be installed on the each setup and then can we connect (Big No)
4. Any many others like gutty etc.

Can somebody please suggest something? Please?

https://redd.it/kpfxd0
@r_SelfHosted

Читать полностью…
Subscribe to a channel