didn't see it mentioned here, so a brief YSK.

stefano marinelli is working on #littleFedi, a self-hosted, single-binary activitypub/fediverse peer that hosts a mastodon-like instance with, in my mind, three killer features.

one, the thing can run on your premises completely, no need for paying for a VPS, domain name, nothing, bypasses NAT/CGNAT, encrypted comms to other instances by way of lighthouses that do the initial intros.

dos, the thing runs on something as light as a Pi zero 2W, with a miniscule memory footprint and immense CPU optimizations due to running on the weakest hardware there is (also running off SD storage).

finally, a blog-like view of your long-format tweets/toots/posts, naturally with replies appearing as comments.

original post introing the thing: https://littleone.littlefedi.social/@stefano/4252ae6f-b949-42f8-a021-fd2b698f8b37

no code available atm (coming soon) same goes for binaries. the first instance is at https://littleone.littlefedi.social/ if you want an invite code to check things out (the settings page's got a lot of cool stuff), hit up stefano.

I am beyond stoked, this clears the two biggest hurdles for selfhosting your shit - the VPS/domain expense and hassle, and the hardware requirements for running it.

So...I was wondering. Is there any backup tape system that would be advisable to use for backing up some TBs? I guess I need it to be USB, as the server is a micro PC, one of those tiny ones you can hang from behind a monitor. It's an HP ProDesk.

Thanks!

DISCLAIMER: This is pretty much 100% AI generated. The project is kept really simple. Before you downvote, make me a generic webui for printers. 😉

I made this project to fill a need I had. I am not collecting internet points here, I don't care if you don't like it.

I found Akronae's repo laying half broken on github, made it work, and thought it was a simple enough project that it could have a rewrite (it needed). I can not participate in Github so here you go, full new repo on an unreliable self-hosted forgejo instance. If you are interested, take it before my hardware fails again. :)

What is it?

It's a web UI to upload documents and print them. I wanted that to print from any device in my home with zero config on device (think guests, family...). It pairs very nicely with scanserv.js.

It looks like this:

Remarks are welcome, but I do not guarantee maintenance. As we have seen the trend of AI projects not being maintained in time, I don't expect this project to escape that fate.

And now an attempt to tag: @Shimitar@downonthestreet.eu

Edit: added one screenshot here and 2 other to the repo/readme and added the license GNU AGPLv3.

So, I've got a homelab thing going, with NextCloud and Immich and other things... using Docker. But the one thing I can't seem to wrap my head around is how to get my calendar needs met behind the scenes. I'm hoping there's some sort of calendar syncing server I can use.

The problem: I use NextCloud and another android app to use my calendar. Easy. Historically, my household has used a single Google Calendar shared amongst members.

The real problem: They won't ditch Google. But I need a solution so that I can:

1. Sync their calendar events to my NextCloud calendar.
2. Sync my calendar events to their Google Calendar. I think that the issue here is, the share links that the calendars give, can only be used to list a new separate calendar on each of the respective platforms - not sync the events between the existing calendars...

I'm hoping that there's maybe a syncing solution out there that can play middle man and sync the two calendars directly, rather than having separate calendars for the two environments?

My payment processor just terminated my account and i am reminded once again too self host literally everything.

I already have a self hosted crypto rail but for many people that is not an option, bank transfer is quite easy to do with just checking against my bank's API, but remembering from the data before i got terminated it was around 40% transfer, 40% ideal, 20% card.

Is there anyway to self host those other payment ways outside transfer?

Does anyone have experience with this?

If you do thank you very much!

...and this is why

1. pihole ain't enough
2. you dont buy skeezy shit off aliexpress
3. if your pirate box isn't self hosted, it's a prostitute :P

.

Honestly.... I'm kind of impressed at the level of fuckery that vSeeBox goes into. This is not just a random crypto mining bot... someone with real skills went to a fair bit of trouble to obfuscate things.

Impressive. Most impressive.

PS: don't buy vSeeBox - or do, with eyes wide open.

I run a quite large vps. now and i want to monitor it ive been using beszel an uptime kuma, does anyone know a better solution ive tried grafana an prometheous. but it was not as good as i was hoping. i saw netdata on selfh.st does anyone have expierance with that.

I've been setting up my first nas and set up DNS routing from my router to adguard home, which then routes traffic to nginx-proxy-manager, which then routes to the docker container for the intended service. I've spent days pulling my hair out, trying to figure out what the issue was - why all my services behind NPM were periodically unreachable on my browser. after a wifi reset on my laptop they'd come back online, but why? today I found out that although my router correctly had the DHCP setting correctly set up to route IPv4 traffic to adguard, there was a separate section in the router settings that handles IPv6 settings, and that this was set up to look for my ISP's assigned DNS provider. Just posting on the off chance anyone finds this helpful or entertaining. I am extremely tired (I have a 3 month old baby) so please bare with the poor formatting of the post!

I have a headless raspberry PI 4 8GB connected to my TV setup with Kodi and the Jellyfin add-on. Now I would like to have a convenient option to watch Youtube in a privacy-friendly way on the TV.

The experience should be similar to Freetube: creating playlists, search videos, follow subscribed channels. I don't mind running it either directly on the PI or install it on my server.

Thanks for any recommendations of what you folks use!

This website made me reconsider if 99.9999% SLA and always online is really that important for lots of websites. I used to self-host my own server in my own apartment, but gave up on that after my internet provider had their first major outage that lasted almost a week. Also I didn't want to worry about the fire hazard, or the server going down when I was traveling etc.

But a solar powered server seems interesting, if the batteries could be made fire safe.

The mouse did not survive interrogation.

Also mouse not pictured.

Wanted to share a quick blog post (see link) playing around with a couple methods of validating data origin and integrity without blindly relying on public CAs.

It's sort of a follow-up-to-a-follow-up on an earlier post about using Cloudlfare proxies to selfhost personal sites or services, but it really applies more to TLS and public CAs in general.

Hello guys so I installed jellyfin on termux. It ran fine few hours ago. I turned it off and got running few times. Now when I'm trying to start jellyfin I'm getting this error

You must install .NET to run this application.
App: /data/data/com.termux/files/usr/lib/jellyfin/jellyfin
Architecture: arm64 App host version: 9.0.18
.NET location: Not found
Learn more:
https://aka.ms/dotnet/app-launch-failed
Download the .NET runtime:
https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=arm64&rid=linux-bionic-arm64&os=linux-bionic&apphost_version=9.0.18
Failed to resolve libhostfxr.so [not found]. Error code: 0x80008083
Any suggestion to fix it ?

I got into self hosting almost a year ago. Since then, I bought (low) hundreds of dollars worth of hardware, but I've never used any of my services outside of testing. My server is left unused since may (I think).

Now I've found a use for my server, but my HDD, (which I bought for a good price ($150 for HC530 14TB, 10k POH) for european standards in last November) isn't really being used. To be frank, I never really used it, I don't need a NAS, I always preferred (pirated) streaming services over local streaming, so I mostly had it just to have it.

I kinda know what I can do with it. I could set up a proxmox backups on it or run a nix cache (I run NixOS on my desktop PCs, I would be using the cache, but it would be annoying to set up and cachix free tier is enough for now).

I'm also anxious to use it, because I'm scared to wear it down, but, at the same time, I know that it will degrade if I don't use it. I might want to sell it, but my previous sales on online marketplaces were abysmal and I know I might regret it if I change my mind and decide I need so much storage.

What would you suggest? If I want to keep it, how should I treat it?

I think it would be nice if my guests could easily print and scan when they are visiting.

Printing should be relatively easy nowadays with the printer on the same network. Scanning is another story. I found this nice project which works very nicely.

However, I would love to have the same but for printing, that way I would not have to do device specific troubleshooting/helping when trying to print something from guests' devices.

There is this project, which has a screenshot of what seems to be exactly what I'm looking for, but the issues are unanswered, there is no release, the building of the project is lacking.

Dockerfiles are incomplete, they are lacking copy yarn.lock and api lacks db initialization. The ports seem to be hardcoded. And once built, it doesn't work or at least I didn't manage yet. I got the frontend finally up but can't login. My knowledge is very limited so I'm checking with you if there is anything similar in the landscape or anyone willing to help on that project. Unfortunately I am locked out of github.

CUPS didn't work for me as I can't see an upload option on the web UI.

edit: So I spent time on tweaking the akronae repo, and after a few corrections, adding CUPS and improvements, I managed to get something functional. If I have more time I might publish it. It's fully vibe coded though 'cause I couldn't be arsed learning TypeScript and shit, and the original repo has plenty of outdated dependencies which, same, I won't update because I don't have the skills.

Hi there, I am hosting a service for mainly me and also some family members. I want it to become more.

Currently the chain just as follows: interwebz <-> UDM <-> npm <-> services. The services are mostly run in VMs or LXCs, npm runs in docker, accompanied by one Adguard home instance and another AGH instance in an LXC.

I now want to add f2b to this whole chain. I've installed f2b in the OS which runs docker (and therefore npm) (VM1) and also in the OS of my existing service (VM2). Both VMs use Ubuntu as their OS.

What I already figured out thru testing and reading is, that f2b in VM2 acts as expected when the jail is triggered, and sets the block. But nftables/ufw don't block connections coming from external, as they are coming thru npm. f2b sees and uses the public IP for the checks/bans.

So now I am thinking how to solve that.

1. Keep f2b on VM2 and let it set the bans on VM1 over SSH. That's what some people do or so I've read.
2. Use f2b on VM1, let it check logs on VM2 and then set the bans. That would also be possible over SSH, I'd guess. But I didn't read up on it yet.

So, what's your opinion? How do you fine folks handle that in your environment? Option 2 seems to be more elegant, as it would be "at the entry" and let's me easily add additional services later. But I don't know, if that's a path worth digging in to.

Morning all,

Quick question, how do y'all handle big "unofficial" collection torrents with weird folder/file names that were manually added to the download client?

Is there a nice tool to use or are manual scripts the only way?

Also, how can I tell my *arr stack to look for files inside collection torrents too? Say I want Iron Man 1, but the only torrent with sufficient seeds is e.g. Phase-1.MCU.1080x720p or some weird ass name like that, that contains Iron Man 1 along with all the other files. How can I tell Radarr to use that torrent?

Thanks! Have a good one

EDIT: Apologies, should have specified, I did get this working before posting here. Ran a bash script to create subfolders for each *.mkv in the parent folder, and cleaned up the names with regex. Then went to Wanted -> Manual Import and Radarr could successfully identify the movies. But the name cleanup was the most important I think.

So a tool would have to rely on something other than the name to identify the movie like a fingerprint or somesuch

I have noticed that my home server is strangely using lots of swap (~5 GB), despite having only a few lightweight processes running and loads of RAM installed (32 GB).

Upon configuring Grafana + Prometheus, I noticed a trend where cache + buffer will progressively increase until swap starts to be used. My system and services combined will use ~8 GB RAM. Upon rebooting, the cache + buffer will start anywhere from 3--10 GB, progressively ramp up to ~25 GB in 1--2h, where swap will start to be needed (~3 GB). See the image attached for reference.

My swap filesystem is on an expensive (to me) SSD, and I would like to reduce its wear by as much as possible. I understand that swap can introduce only minimal wear on SSDs depending on its nature and that it can be harmless, but I am still not sure what is causing this behavior (and why) and whether I should worry about it or not. So I figured I should investigate what is happening here.

My main question is, how can I figure out what is causing this behavior? Is it expected? I am looking for guidance from others who are more experienced than me in the topic.

A little bit about my system:

I am running Debian 12 on an NVMe SSD containing the root partition (btrfs) and docker services. I also have two HDDs, one with persistent data (ext4), and the other with backups (ext4). This is majoritarily a single-user machine. I tried using the following kernel parameters, but it hasn't helped:

vm.swappiness=10
vm.vfs_cache_pressure=200

My docker services are:

• *arr stack
• jellyfin
• nextcloud
• immich
• open-webui + ollama
• pi-hole
• invidious
• romm
• nginx proxy manager
• grafana + prometheus
• other minor services that I don't think are doing much (uptime-kuma, stirlingpdf, vaultwarden, etc)

There are some services that I expose to the internet (using Apache reverse proxy) that really should be accessed by only a small set of devices. Requiring client certificates seems like a great way to reduce the attack surface and prevent brute force attacks (since the attacker doesn't even get a chance to attempt a login).

I wonder about the difficulty on the client side as well as other practical implications. The clients are smartphones of various makes.

edit:
I needed to edit ~/.config/qui/config.toml and bind the host to "0.0.0.0"

I'm running Debian (12) and I just installed qui, a single binary dropped in /usr/local/bin. When I fire it up, I can access the web interface on the local machine via localhost:7476, but I cannot access it over the LAN via the server's IP. Firefox just says 'Unable to connect'.
I can access a dozen other services over the LAN, and as far as I'm aware there's no firewall enabled by default.
What gives?

Does anyone else here participate in the selfhosting hobby without a formal IT related education or a career in a similar field? I've only had one or two programming courses as part of my university education, but it was only very basic Python and C. I've never formally learned how to use containers, version control or anything else. Sometimes I regret not pursuing an education in IT/programming because there are so many things I'd like to accomplish but can't (for example if there's a feature missing in some project, or to feel safe in my abilities to harden my servers and my network in order to expose services to the open internet).

Hi!

Over the past month I've been working on a small self-hosted service which would let me auto-import, categorize and rate all my games (and make them easily explorable for family members). Think of it as a self-hosted backloggd.com. I believe it's now in a good enough shape to share, hence this post.

It all kinda started when my gf was complaining that browsing our family library on the Steam Deck is a pain, because the library view barely gives you any information on what the game is, and the store page has way too much information (and loads way too long). I then remembered how I dropped off from using Backloggd and Infinite Backlog several times right after registering (either due to the lack of autoimports, or due to the very involved process of actually going through your library to categorize stuff). So I figured I'd finally make my own thing, with blackjack etc, etc.

You can play with a read-only demo snapshot of my library here to get a feel for it: https://iri-demo.fly.dev/

It's written in Elixir with Phoenix LiveView and uses SQLite for the database. The code is licensed under AGPL and is on GitHub with a mirror on Forgejo.

It lets you automatically import your games from Steam, GOG and XBOX. For PSN it gives a JavaScript helper that you can use on PSN's web page and for EGS you'll have to use Legendary's JSON export. I know the last 2 are not ideal, but I'm not sure what would be a better way to approach this, given that everyone but Steam is incredibly API averse :^( Open to suggestions though!

It does not yet have Battle.net, Origin or Ubisoft integrations (primarily because I don't use those stores), so contributions are welcome.

Here are some of the other things that it can do:

• It has a nice bulk-edit mode, so that you can actually get through your library and mark stuff as completed, dropped, etc.
• It supports family sharing (again, my initial use-case was that I wanted my gf to have an easy way to explore my library).
• It fetches ProtonDB and time-to-beat data.
• It let's you create custom collections, which can be then exported either as .txt along with notes and store links, or even as a static HTML website.
• It has a responsive layout and it has (admittedly somewhat rudimentary) gamepad (and keyboard) support, so you can browse on mobile or on the Deck. It should also hopefully be usable with screen-readers, but I would appreciate any feedback from actual screen-reader users.
• It has an optional AI integration to automatically map ambiguously named games to IGDB entries (otherwise for ambiguous titles it will leave the mapping choice to you)
• Filters, search, private notes, probably something else I'm forgetting - the post is already too long anyway

It doesn't require credentials for any of your stores, but it does require public profiles for Steam, GOG and Xbox. You will also, of course, have to bring your API keys with you, where needed: the app heavily relies on IGDB, for Steam you need Steam Web API key, for Xbox I opted to use xbl.io, and finally for the AI integration you can bring your OpenAI-compatible or Anthropic key (or you can use a self-hosted model, though I haven't really tested that tbh).

I literally have no idea whether it's something someone besides me will find useful, but in case you do: here you go, let me know what you think.

AI disclosure: the majority of code was generated, with a lot of iteration and guidance. In my mind, if there exists a valid usecase for AI coding - it's stupid lil pet projects like these, as I never would've finished it on my own. I'm sure there's some slop left in there though, so be wary.

Design - Pair
Implementation - Generated
Testing - Pair
Documentation - Pair
Review - Me
Deployment - Pair