Heyhey everyone,

I am going to switch from my Synapse instance (back) to Continuwuity in a month. The main reason I've been using it is to chat with family who are only on Whatsapp and iMessage (Yes, I tried getting them someplace else. Whatsapp ended up being that other place). Though I'm also in groups on other Matrix instances.

The main annoyances I had with using the bridge until now are:

1. I need to open the app every two weeks on my second phone (which tends to get lost when I need it).
2. The time my server went out for a couple of days also made me unsure of self hosting a bridge. I don't mind if I can't see some support messages for a couple of days, but I do mind not being able to get texts from family.

Compared to just using the app it's a difficult proposition. But on the other hand I don't have anything proprietary installed on my phone and I'd like to keep it that way if possible.

There is technically a third option by hosting an iMessage bridge, but I don't have a spare Mac. And while my second phone is an iPhone, there is no documentation on how to bridge via a 64-bit iPhone. In this case however, there would be no two weeks access requirement.

I'd love to hear you guys' thoughts and maybe some other way to tackle this!

Cheers!

I see a lot of options for self-hosting RSS subscriptions and I don't actually understand what they are for. The very nature of RSS is that it tracks and connects to online content. It seems like having a home server track and download the content just so that you can download it on another device from your server instead of the original servers a bit redundant. Also, it seems like the clients are more limited, since it has ro connect to your personal host, as opposed to the many RSS readers available.

Sorry if this is a stupid question, but I genuinely don't get it. What am I missing?

It's been a while! Let us know what you're currently working on, what exploded, what cool stuff you found, or just brag that everything is running fine unattended.

I haven't been doing a lot, renovate auto upgrades for patches and sometimes minor updates work great so far. I got involved in my union to spin up a mastodon server soon, so there's a new project, but I already run mastodon so it shouldn't be much of a deal, I just need to get comfortable with the infrastructure. I also set up ntfy but only sent some test notifications and didn't configure any app yet - planned for Element Chat.

[Meta] I'm not sure how to apply the new tags. In the recent versions of this thread, people sometimes posted about their ollama setup or the like, but I'm not mentioning AI in the post body (except this meta thingy) and it shouldn't be much of the discussion, but it's an open post. Maybe curbstickle can chime in to let me know if I should apply one of them.

I don‘t know if this is the right place to ask, but is this an OK build for a first start in selfhosting? Is there anything obvious I could improve? I‘d mainly run Nextcloud, Immich, some Docker containers and smaller web applications and cronjobs.

Consider the following setup:

An NFS server exports the directory /srv/nfsv4 to one client. It is exported with the option "fsid=0" for use with NFSv4.

/srv/nfsv4              192.168.0.10/24(ro,sync,secure,root_squash,subtree_check,fsid=0)

The bind-mounted directory within it, foo, is exported as well. Client 192.168.0.10 can successfully mount and write to it.

/srv/nfsv4/foo          192.168.0.10/24(rw,sync,secure,root_squash,subtree_check)

"foo" has multiple subdirectories. While client 192.168.0.10 should have full read-write access to all of them, another client, 192.168.0.20, should only see a specific subset of these directories. Everything else should not only be read-only, but not mountable at all.

At first, I did it like this:

/srv/nfsv4              192.168.0.10/24(ro,sync,secure,root_squash,subtree_check,fsid=0) \
                        192.168.0.20/24(ro,sync,secure,root_squash,subtree_check,fsid=0)

/srv/nfsv4/foo          192.168.0.10/24(rw,sync,secure,root_squash,subtree_check) \
                        192.168.0.20/24(ro,sync,secure,root_squash,subtree_check)

/srv/nfsv4/foo/dir1     192.168.0.20/24(rw,sync,secure,root_squash,subtree_check)

/srv/nfsv4/foo/dir2     192.168.0.20/24(rw,sync,secure,root_squash,subtree_check)

With the effect that client 192.168.0.20 could still mount all other subdirectories of foo (even though read-only).

So, in an attempt to achieve the desired behavior, I created a second parent directory /srv/nfsv4/bar/ that has only the intended set of subdirectories bind-mounted to it:

srv/
└── nfsv4/
    ├── foo/
    │   ├── dir1
    │   ├── dir2
    │   ├── dir3
    │   └── dir4
    └── bar/
        ├── dir1
        └── dir2

And changed /etc/exports to look like this:

/srv/nfsv4              192.168.0.10/24(ro,sync,secure,root_squash,subtree_check,fsid=0) \
                        192.168.0.20/24(ro,sync,secure,root_squash,subtree_check,fsid=0)

/srv/nfsv4/foo          192.168.0.10/24(rw,sync,secure,root_squash,subtree_check)

/srv/nfsv4/bar          192.168.0.20/24(rw,sync,secure,root_squash,subtree_check)

Now, when I mount nfs-server:/bar on client 192.168.0.20, everything seems as expected. Except that I could still mount nfs-server:/ (the exported root) and have read access to foo. My understanding was that, unless I explicitly exported foo to 192.168.0.20, it should not be visible to it.

What did I do wrong?

sorry for the strange request. just want to test if things (jellyfin media) load okay. As anyone knows upspeed on my end doesn't mean play theirs.

Ping me if your willing to test, thanks a lot!

• Fixed issues in the RUDP library: memory leaks when using shutdownHook, deadlocks, handling of corrupted UDP packets, and many other issues that were identified during testing.
• Added the display of the connection protocol to the peer list.
• Added an experimental build that compiles a .jar file into an executable using native-image in GraalVM. For now, this is for the headless version of the application on Linux x86_64. To avoid running Lanemu as root, you also need to do

sudo setcap cap_net_admin=eip Lanemu-headless

• Updated dependencies.

Just wanted to share this Youtube video (Invidious link here) that explains how to configure Openwrt VLANs for your Wifi network! I was struggling for hours today trying to configure VLANs on my Openwrt AP when I found an old Reddit thread linking to this guy's channel!

He seems to have a whole series on Openwrt, so if you need a complete beginner guide he sounds great!

[AIP] Disclosure: https://github.com/Supernova3339/changerawr/blob/master/AI-DECLARATION.md

Hello c/selfhosted! I'm Nova (known as Supernova3339 online) and was told to post here by my friend fccview. Admittedly, I have made this post before (apologies for not noticing the rule) and hope my second attempt will be much more favorable for all of you. I'm just facing constant rejection and hate on Reddit, it's not like it used to be anymore unfortunately, and I'm hoping you’re willing to give me a chance :)

You can find Changerawr's source code here
With that out of the way, let's get started with the release notes!

Features

• Extensions – Extend the functionality of Changerawr's beloved Markdown editor. Comes with four extensions installable from the get-go thanks to the official Changerawr Extension Store! If you'd like to make your own, download the official Changerawr CLI!
• Spellchecker – Adds Spellchecker functionality to the editor via integrating with the LanguageTool API! You can configure all related functionality in system configuration. This feature is disabled by default
• Editor History – Provides a git-like editor history for your changelog entries! You can make them memorable as well by assigning icons, titles, and color!
• RSS Feed Extension – Full control over RSS feed content, layout, and styling!
• Maintenance Mode – Put any public changelog into maintenance mode. You can also set your own message
• More Project Personality – You can now set an accent color and icon that will be used throughout the application to identify a project!

Improvements

• Moving some functionality to local AI – Tagging with AI has been moved to a brand-new Tag AI service that runs alongside Changerawr. Also introduces some improvement to the tag selector itself with a redesigned UI. Please note that the model has training, it is, however, fully local and transparent and will never leave your device!
• Request System Enhancements – You can now attach comments to a request as well as request changes! Updated the design of the staff-side requests page as well
• API Page Redesign - Redesigned the API page to make better usage of screen-space and improved accessibility
• Better mobile support – Improved mobile support by separating the project and main sidebar
• Overhauled API Documentation – Improved API documentation generation to be easier to consume and understand
• Administration UI Spacing – Improved screen-space usage and cut out unnecessary clutter. Also added some badges to the sidebar that show up if you have pending actions for certain pages
• Import Tool Rewrite – Improved the import tool to support more options, platforms, and ways of importing. I'll try to add to the next release where you can fully export ALL of your Changerawr instance's data! I honestly hate vendor lock-in, you should be able to choose your software and not be forced to keep using it.
• Content Editor Improvements – Improved mobile support in the content editor, the renderer, as well as a lot of internal components to provide an overall better user experience. (v2.0.0 of Changerawr Universal Markdown)
• Slight Settings Redesign for Projects – Made some slight improvements to the UI, as well as adding more deletion controls and hinting at an upcoming feature

Bug Fixes

• Bug Fix Extravaganza – Fixed a bunch of bugs in this release, way too many I can't remember all of them.
• Fixed development-leaving of false-secure in project email configuration – No matter what you set, it would always send as unsecure due to hardcoding false instead of respecting user-input

Other

• Dependency Updates – Standard update of dependencies, npm audit, the usual maintenance
• Rewrite of a Secret - Rewrote a secret completely to be a much better experience. Also added another one, best of luck in finding it! I will most likely redo the sprite-sheet in 1.0.8/1.0.9 to better fit Changerawr. If you'd like to make it, please reach out!

I aim for a Changerawr release every month or so due to my unavailability with work and other projects. The goal is to ship one major feature per-release until I'm at a point where I can focus on smaller, generalized improvements. Apologies for such a late release, I hope all the effort is worth it! :D

What is Changerawr?

Changerawr is changelog management software. Changerawr lets you write down what you changed, then share those changes with people. You write entries about updates you made, and Changerawr gives you ways to display them - like widgets for your website, public pages people can visit, or APIs to use however you want.

Have a rawrsome day!

If you aren't able to click the link, copy-paste the below URL:

https://github.com/Supernova3339/changerawr

If your looking for screenshots, you can find them here - as well as a rotating gallery on the project README!

https://github.com/Supernova3339/changerawr/tree/master/screenshots

After years of breaking things, I think I'm finally at a point where I'm genuinely proud of my setup -so naturally, I have to share it with you all.

This is my single-server do-everything box. The whole point was to kick as many big-tech cloud services out of my life as possible. Photos, passwords, code, chat, even ML -all running in my closet/corner.

The guts:

• Ryzen 7 3800X (8 cores, 16 threads)
• 48GB of RAM (Channel A: 16GB+8GB, Channel B: 16GB+8GB | still dual channel with stock timings and clocks.)
• RTX 3050 8GB (handles GPU-accelerated processing with GPU passthrough to said LXC's)
• A couple of storage pools (Fast-Thin-LVM (Nvme) for stuff that needs speed, TB-Thin (Sata) for the bulk)
• Proxmox 9.2.5, kernel 7.0.14

Nothing crazy by today's standards, but honestly? It handles everything I throw at it without breaking a sweat.

The services:

Everything runs in LXC containers. If a service needs Docker, I run Docker inside the LXC - so each service gets its own dedicated container with its own Docker install. A couple of other things (like OpenWrt and DSM) live in VMs instead.

I've got the usual suspects - Immich for photos (goodbye Google Photos), Vaultwarden for passwords, and Matrix Synapse for chat. Networking side is Nginx Proxy Manager, WireGuard, Pi-hole, and OpenWrt routing traffic as well as DDNS-Updater to keep my domain up to date. Also running Gitea for my little coding projects, Kiwix for offline Wikipedia (because why not), Trilium for my scattered notes, homarr as the dashboard and of course lemmy, your reading this on it haha.

On the heavier side, I've got Ollama + Open WebUI running locally with GPU acceleration - the 3050 gets the job done.

Snapotter is in there too - it's an open-source, self-hosted file toolkit with 200+ tools for images, video, audio, PDF, and document processing. I use it so I don't have to rely on sketchy file conversion sites anymore. Convert, compress, OCR, strip metadata - all happens on my own hardware, files never leave my network. The GPU helps with some of the heavier image tasks too.

And yes - I'm running DSM (Arc Loader) in a VM with PCIe passthrough for the NAS. It's a bit overkill, but I wanted proper storage virtualization with direct hardware access.

I also will not lie- the GPU sits idle most of the time, but it's nice to have the acceleration.

Why LXC + Docker instead of just Docker?

I just like having each service in its own isolated container with its own Docker daemon. It makes backups and snapshots stupidly easy in Proxmox - when I inevitably screw something up at 1 AM (and I will), rolling back takes two clicks. Plus, it keeps dependency hell contained.

Dive into the Details

If you're curious about the configs, the philosophy, or just want to see the messy reality behind the setup, head over to organic-server.org. You'll find some more of my ramblings there.

Or, if you have a specific question, I'm always happy to chat here.

edit: I also forgot to mention I have degoog running. oops.

Original post here [redlib link].

Written by deluan

The next release normalizes every ID in the database into a single format. It runs a one-time migration on first start. The PR with this change will be merged this weekend: https://github.com/navidrome/navidrome/pull/5824

If you run develop or auto-update, this lands soon (this weekend) and without warning. Make a backup of navidrome.db now. The migration is one-way, so rolling back (if needed) means restoring that backup.

The short version:

• Takes ~30s to ~1m20s on my 96k-track library (QNAP Celeron). Scales with library size.
• Everyone gets logged out once. Web UI and clients using the Navidrome API need to log in again. Subsonic clients authenticate per request, so they are unaffected.
• Song IDs change, album and artist IDs do not. Clients that cache song IDs (offline downloads, cached playlists) may need a re-sync.
• Cover art gets re-fetched, so the first browse after upgrading is slower.
• Share links keep working.
• Nothing is lost: favorites, ratings, play counts, bookmarks, play queues, scrobble history and Last.fm / ListenBrainz links all survive. No rescan needed.
• One manual fix: .nsp smart playlists using inPlaylist or notInPlaylist keep the old playlist ID on disk and need updating by hand.

Full write-up: https://gist.github.com/deluan/917ebc243c8b486101de857ffae6739b

If you can, please test it with your favourite client once it is merged, and reply here (or on our Discord) if anything looks off.

EDIT: For app/client developers: I'll merge the topSongsByArtistId PR at the same time as this ID migration. This means that you'll be able to detect if a server is migrated by checking the getOpenSubsonicExtensions response and looking for the topSongsByArtistId extension.

Hi good people... just looking for some feedback ...

I have a couple of Raspberry Pi 3 with audio amp outputs (one has a touchscreen as well).

They're currently running Volumio (v2) which we can control remotely with our phones, but that software is old, insecure, and could really do with an update...

Volumio (v4) doesn't inspire me much, plus, it's good to check out the alternatives.

So, I'm looking at replacing the local-audio playback with perhaps Moode ... or maybe piCorePlayer and perhaps adding Navidrome for remote access??

I'd need to be able to play radio streams too, with a sleep timer / wakeup function, so not sure if that's a deal breaker (it's hard to find these features on their websites)

Any alternatives that others can suggest (rAudio?) or other feedback?

Or am I ahead of the curve and I have found the Best Solution™️?

TIA

• Immich always asks for confirmation when deleting an image on android. How can I disable that behavior?
• why is there no delete button for images/videos that are not yet uploaded? It's annoyng to upload a huge video just to delete it. Why does the UI change dependent on the local/server status?

OS: grapheneos

I've been self hosting a few services on a raspberry pi-based NAS and decided I was ready to up my game. I got on eBay and found myself a decent deal on an old Supermicro dual-cpu board with an EATX form factor. Now I need a case for it.

I could rack mount it, but I'd rather have it be a standalone. I also have several HDDs in a RAID for storage, and would love something that has room for those internally. I was going to get a Darkrock Classico Max, but figured out it won't fit an EATX board without removing the HDD cages.

Do I'm wondering: anyone out there have a recommendation for a good EATX case with ample HDD space? Anyone else got a setup like this you are happy with?

Hello everyone! I'm kinda curious about the services you self-host, and I would love to see what do y'all use!

I'll start, and list the services I self-host:

Thanks for reading, and thanks to anyone who participate!

I've been trying to upgrade from 10.10 to 10.11 for a while now, as the Android TV app keeps nagging me, and every attempt ended with impossibly long library scan times.

After some thorough investigation, it appeared that a Home Videos type collection causes unending scan (yet to be solved), but also that Jellyfin does a lot of writes to the config directory (either database or metadata or both). Mine's on spinning media part of a ZFS pool. I tried a few performance tuning options, such as testing the config dir with recordsize (similar to block size) of 4K, 8K, 64K, 128K and library scans fell from 30-40 minutes down to 8-13min with 4K-64K. The ZFS tuning wiki suggest 64K recordsize with LZ4 compression for SQLite workloads such as Jellyfin. That seems to work as well as 4K and 8K but likely is faster when reading thumbnails and such.

Note that upgrading to 12-rc3, which is supposed to speed up library scans did not improve scan times for me. Optimizing config/database write speed did. I cross-checked the culprit by experimenting with moving the config dir to NVMe and RAM. Both of those got the scan times down to 8-9 minutes compared to the optimized spinning media's 12-13.

So if you had upgraded (or about to) to 10.11 your library scans are (about to get) dog slow and your Jellyfin's config dir resides on spinning media, optimize its write performance for SQLite.

Crossposted from https://thebrainbin.org/m/linux@lemmy.ml/t/1840283

Which approach do you think is better, and why?

1. FIDO2
2. HMAC-SHA1
3. OpenPGP (alternative guide)

Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

Hi everyone,

I am the original author of Searx. I started Hister with a similar motivation: reducing our dependence on external search engines while keeping searches and personal data under our control.

Searx is a metasearch engine that forwards queries to other search providers. Hister takes a different approach. It builds a private full text index from content you choose, then searches that index entirely on your own infrastructure.

Hister can automatically index pages through its Firefox and Chrome extensions. It can also watch local directories, import browser history and bookmarks, index individual URLs, and crawl complete documentation sites.

The feature I find most useful is offline previews. Hister stores the readable content and HTML of indexed pages locally. You can open a result in a clean and sanitized preview beside the search results without visiting the original website again.

Some other features:

1. Full text search across web pages, PDFs, docx files, Markdown, OrgMode and text files
2. Phrase searches, field filters, date filters, wildcards, negation, aliases, labels, facets, and result priorities
3. Optional semantic search using an embeddings endpoint you configure
4. Persistent website crawls
5. Imports from browser history, Linkwarden, Karakeep, Shaarli, Wallabag, and Linkding
6. Web, terminal, command line, HTTP API, and MCP interfaces
7. SQLite and PostgreSQL support, plus optional multiple user hosting

Hister cannot replace a global search engine (yet) for subjects you have never encountered because it only searches what you have indexed. My workflow is to search Hister first, then use its shortcut to fall back to traditional search when I need broader web results.

The project is free software under the AGPLv3+ license. It can be installed as a standalone binary or with Docker.

Project: https://github.com/asciimoo/hister

Website and documentation: https://hister.org/

Small read-only demo: https://demo.hister.org/

I'd appreciate feedback, questions, and suggestions as well as joining our growing community.

AI disclosure: AI assisted contributions are not strictly prohibited, but all contributions should be made by humans. More details: https://github.com/asciimoo/hister/blob/master/CONTRIBUTING.md#ai-policy

Im in the market for a NAS solution. By NAS I don't mean running Jellyfin and some homepage thing for vibes, I mean your old-style "it just provides network attached storage".

I love the Jonsbo cases but I don't want to drop as much coin as building out a NAS based on one of them entails. I'm looking for an older office/home/gaming PC or case that has room for atleatst 4 3.5" HDD’s. Something around ten years old with maybe an i5 7th+ gen CPU. I don't need hardware RAID as I prefer ZFS anyway.

Ideas?

12 years and 11 months of powered-on time for this SSD... I should definitely turn it on for another month lol

10 years powered-on time for this HDD. Who says HDDs aren't reliable? 😂

Anyone got better numbers than these?

With v0.63, audio streamer Navidrome finally got full lyrics support. I just wanted to try it out and fell flat on my face because... well, not even the official docs say anything about lyrics. Also, I'm not too familiar with how lyrics are added to songs in general. So my questions are these:

1. How can I add any lyrics to my songs so the web client will display them?
2. What formats would you recommend sticking with? (TTML, ELRC, SRT, YAML, LRC, or even TXT)
3. Is there a way to automate adding lyrics in bulk (instead of tedious manual work)?

https://github.com/Xyphyn/photon

you should know - photon selfhosted lemmy client is absolutely nice.
You can login from multiple acounts on differnet instances and effortlessly switch between them.
UI is just so much nicer than default lemmy UI.

you can run it in docker, or just use this instance: https://phtn.app/

For $600 the Minisforum MS-R1 gives you 64GB DDR5 ECC, 12 cores, dual 10GbE, a real PCIe 4.0 x8 slot, M.2 NVMe, Pi-compatible 40-pin GPIO, and actual UEFI boot. It runs Debian and Proxmox/KVM.

I've read that the CPU is trash compared to intel/amd in performance and in TDP, but you can't build a mini pc/server on intel/amd right now for thaf price with that amount of RAM.

Even just buying the 64GB ddr5 RAM as sticks will be like over 800$...

In the low budget range you can go with a Pi 5 16GB which is now ~$300. Add PSU, case, NVMe HAT, PCIe HAT and you're at $500+. It's way too expensive for what you get, compared to spending a bit more and going with minisforum.

Yeah you can get old used boxes with that amount of RAM for maybe the same price, but they'll such 200W and electricity is expensive where I live.

My current pine64 soquartz cluster over the past 5 years has been dying node by node and I can't run anything more demanding on it (like game servers or local AI). It cost me about 600$ back then with 5x blade + nvme + soquartz module, a poe switch and a case with fans. Kinda seems like a bad deal now, I'm stuck with all the docker swarm issues and the bad cpu cores and max 8gb ram per node. Oh and it draws 52W. If the minisforum 12W TDP is correct, I will save over 100$ per year on electricity costs alone.

Maybe i'm biased and trying to justify my own purchase ... let me know if I'm wrong about it being good value.