I've been setting up my first nas and set up DNS routing from my router to adguard home, which then routes traffic to nginx-proxy-manager, which then routes to the docker container for the intended service. I've spent days pulling my hair out, trying to figure out what the issue was - why all my services behind NPM were periodically unreachable on my browser. after a wifi reset on my laptop they'd come back online, but why? today I found out that although my router correctly had the DHCP setting correctly set up to route IPv4 traffic to adguard, there was a separate section in the router settings that handles IPv6 settings, and that this was set up to look for my ISP's assigned DNS provider. Just posting on the off chance anyone finds this helpful or entertaining. I am extremely tired (I have a 3 month old baby) so please bare with the poor formatting of the post!

I have a headless raspberry PI 4 8GB connected to my TV setup with Kodi and the Jellyfin add-on. Now I would like to have a convenient option to watch Youtube in a privacy-friendly way on the TV.

The experience should be similar to Freetube: creating playlists, search videos, follow subscribed channels. I don't mind running it either directly on the PI or install it on my server.

Thanks for any recommendations of what you folks use!

This website made me reconsider if 99.9999% SLA and always online is really that important for lots of websites. I used to self-host my own server in my own apartment, but gave up on that after my internet provider had their first major outage that lasted almost a week. Also I didn't want to worry about the fire hazard, or the server going down when I was traveling etc.

But a solar powered server seems interesting, if the batteries could be made fire safe.

The mouse did not survive interrogation.

Also mouse not pictured.

Hello guys so I installed jellyfin on termux. It ran fine few hours ago. I turned it off and got running few times. Now when I'm trying to start jellyfin I'm getting this error

You must install .NET to run this application.
App: /data/data/com.termux/files/usr/lib/jellyfin/jellyfin
Architecture: arm64 App host version: 9.0.18
.NET location: Not found
Learn more:
https://aka.ms/dotnet/app-launch-failed
Download the .NET runtime:
https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=arm64&rid=linux-bionic-arm64&os=linux-bionic&apphost_version=9.0.18
Failed to resolve libhostfxr.so [not found]. Error code: 0x80008083
Any suggestion to fix it ?

Wanted to share a quick blog post (see link) playing around with a couple methods of validating data origin and integrity without blindly relying on public CAs.

It's sort of a follow-up-to-a-follow-up on an earlier post about using Cloudlfare proxies to selfhost personal sites or services, but it really applies more to TLS and public CAs in general.

I think it would be nice if my guests could easily print and scan when they are visiting.

Printing should be relatively easy nowadays with the printer on the same network. Scanning is another story. I found this nice project which works very nicely.

However, I would love to have the same but for printing, that way I would not have to do device specific troubleshooting/helping when trying to print something from guests' devices.

There is this project, which has a screenshot of what seems to be exactly what I'm looking for, but the issues are unanswered, there is no release, the building of the project is lacking.

Dockerfiles are incomplete, they are lacking copy yarn.lock and api lacks db initialization. The ports seem to be hardcoded. And once built, it doesn't work or at least I didn't manage yet. I got the frontend finally up but can't login. My knowledge is very limited so I'm checking with you if there is anything similar in the landscape or anyone willing to help on that project. Unfortunately I am locked out of github.

CUPS didn't work for me as I can't see an upload option on the web UI.

I got into self hosting almost a year ago. Since then, I bought (low) hundreds of dollars worth of hardware, but I've never used any of my services outside of testing. My server is left unused since may (I think).

Now I've found a use for my server, but my HDD, (which I bought for a good price ($150 for HC530 14TB, 10k POH) for european standards in last November) isn't really being used. To be frank, I never really used it, I don't need a NAS, I always preferred (pirated) streaming services over local streaming, so I mostly had it just to have it.

I kinda know what I can do with it. I could set up a proxmox backups on it or run a nix cache (I run NixOS on my desktop PCs, I would be using the cache, but it would be annoying to set up and cachix free tier is enough for now).

I'm also anxious to use it, because I'm scared to wear it down, but, at the same time, I know that it will degrade if I don't use it. I might want to sell it, but my previous sales on online marketplaces were abysmal and I know I might regret it if I change my mind and decide I need so much storage.

What would you suggest? If I want to keep it, how should I treat it?

Hi there, I am hosting a service for mainly me and also some family members. I want it to become more.

Currently the chain just as follows: interwebz <-> UDM <-> npm <-> services. The services are mostly run in VMs or LXCs, npm runs in docker, accompanied by one Adguard home instance and another AGH instance in an LXC.

I now want to add f2b to this whole chain. I've installed f2b in the OS which runs docker (and therefore npm) (VM1) and also in the OS of my existing service (VM2). Both VMs use Ubuntu as their OS.

What I already figured out thru testing and reading is, that f2b in VM2 acts as expected when the jail is triggered, and sets the block. But nftables/ufw don't block connections coming from external, as they are coming thru npm. f2b sees and uses the public IP for the checks/bans.

So now I am thinking how to solve that.

1. Keep f2b on VM2 and let it set the bans on VM1 over SSH. That's what some people do or so I've read.
2. Use f2b on VM1, let it check logs on VM2 and then set the bans. That would also be possible over SSH, I'd guess. But I didn't read up on it yet.

So, what's your opinion? How do you fine folks handle that in your environment? Option 2 seems to be more elegant, as it would be "at the entry" and let's me easily add additional services later. But I don't know, if that's a path worth digging in to.

Morning all,

Quick question, how do y'all handle big "unofficial" collection torrents with weird folder/file names that were manually added to the download client?

Is there a nice tool to use or are manual scripts the only way?

Also, how can I tell my *arr stack to look for files inside collection torrents too? Say I want Iron Man 1, but the only torrent with sufficient seeds is e.g. Phase-1.MCU.1080x720p or some weird ass name like that, that contains Iron Man 1 along with all the other files. How can I tell Radarr to use that torrent?

Thanks! Have a good one

EDIT: Apologies, should have specified, I did get this working before posting here. Ran a bash script to create subfolders for each *.mkv in the parent folder, and cleaned up the names with regex. Then went to Wanted -> Manual Import and Radarr could successfully identify the movies. But the name cleanup was the most important I think.

So a tool would have to rely on something other than the name to identify the movie like a fingerprint or somesuch

I have noticed that my home server is strangely using lots of swap (~5 GB), despite having only a few lightweight processes running and loads of RAM installed (32 GB).

Upon configuring Grafana + Prometheus, I noticed a trend where cache + buffer will progressively increase until swap starts to be used. My system and services combined will use ~8 GB RAM. Upon rebooting, the cache + buffer will start anywhere from 3--10 GB, progressively ramp up to ~25 GB in 1--2h, where swap will start to be needed (~3 GB). See the image attached for reference.

My swap filesystem is on an expensive (to me) SSD, and I would like to reduce its wear by as much as possible. I understand that swap can introduce only minimal wear on SSDs depending on its nature and that it can be harmless, but I am still not sure what is causing this behavior (and why) and whether I should worry about it or not. So I figured I should investigate what is happening here.

My main question is, how can I figure out what is causing this behavior? Is it expected? I am looking for guidance from others who are more experienced than me in the topic.

A little bit about my system:

I am running Debian 12 on an NVMe SSD containing the root partition (btrfs) and docker services. I also have two HDDs, one with persistent data (ext4), and the other with backups (ext4). This is majoritarily a single-user machine. I tried using the following kernel parameters, but it hasn't helped:

vm.swappiness=10
vm.vfs_cache_pressure=200

My docker services are:

• *arr stack
• jellyfin
• nextcloud
• immich
• open-webui + ollama
• pi-hole
• invidious
• romm
• nginx proxy manager
• grafana + prometheus
• other minor services that I don't think are doing much (uptime-kuma, stirlingpdf, vaultwarden, etc)

There are some services that I expose to the internet (using Apache reverse proxy) that really should be accessed by only a small set of devices. Requiring client certificates seems like a great way to reduce the attack surface and prevent brute force attacks (since the attacker doesn't even get a chance to attempt a login).

I wonder about the difficulty on the client side as well as other practical implications. The clients are smartphones of various makes.

edit:
I needed to edit ~/.config/qui/config.toml and bind the host to "0.0.0.0"

I'm running Debian (12) and I just installed qui, a single binary dropped in /usr/local/bin. When I fire it up, I can access the web interface on the local machine via localhost:7476, but I cannot access it over the LAN via the server's IP. Firefox just says 'Unable to connect'.
I can access a dozen other services over the LAN, and as far as I'm aware there's no firewall enabled by default.
What gives?

I'm using Frigate with these TAPO cams:

Tapo 2K+ Indoor/Outdoor Wired Security Camera, Baby Monitoring, C120

The CAMS support the RTSP protocol, which works with Frigate.

Yes the cams support audio mic and speaker when connected to the TAPO service and using the TAPO phone app.
But I do not want to use TAPO's service and their app / servers.
I keep my cams on a separate router / subnet which does not have internet access.

Only my Frigate server has a network interface on that subnet, so it can access the cams feeds via RTSP.

Now I would like audio intercom so I can listen to audio or talk through a speaker using the Frigate phone app.

I don't see such an option in Frigate.
I see there is something called "go2rtc" but I'm not sure if these cameras support this. Or even how that protocol works.
I'm willing to buy a new cam, different model or manufacturer if necessary is fine.

How can I achieve this?

Hi!

Over the past month I've been working on a small self-hosted service which would let me auto-import, categorize and rate all my games (and make them easily explorable for family members). Think of it as a self-hosted backloggd.com. I believe it's now in a good enough shape to share, hence this post.

It all kinda started when my gf was complaining that browsing our family library on the Steam Deck is a pain, because the library view barely gives you any information on what the game is, and the store page has way too much information (and loads way too long). I then remembered how I dropped off from using Backloggd and Infinite Backlog several times right after registering (either due to the lack of autoimports, or due to the very involved process of actually going through your library to categorize stuff). So I figured I'd finally make my own thing, with blackjack etc, etc.

You can play with a read-only demo snapshot of my library here to get a feel for it: https://iri-demo.fly.dev/

It's written in Elixir with Phoenix LiveView and uses SQLite for the database. The code is licensed under AGPL and is on GitHub with a mirror on Forgejo.

It lets you automatically import your games from Steam, GOG and XBOX. For PSN it gives a JavaScript helper that you can use on PSN's web page and for EGS you'll have to use Legendary's JSON export. I know the last 2 are not ideal, but I'm not sure what would be a better way to approach this, given that everyone but Steam is incredibly API averse :^( Open to suggestions though!

It does not yet have Battle.net, Origin or Ubisoft integrations (primarily because I don't use those stores), so contributions are welcome.

Here are some of the other things that it can do:

• It has a nice bulk-edit mode, so that you can actually get through your library and mark stuff as completed, dropped, etc.
• It supports family sharing (again, my initial use-case was that I wanted my gf to have an easy way to explore my library).
• It fetches ProtonDB and time-to-beat data.
• It let's you create custom collections, which can be then exported either as .txt along with notes and store links, or even as a static HTML website.
• It has a responsive layout and it has (admittedly somewhat rudimentary) gamepad (and keyboard) support, so you can browse on mobile or on the Deck. It should also hopefully be usable with screen-readers, but I would appreciate any feedback from actual screen-reader users.
• It has an optional AI integration to automatically map ambiguously named games to IGDB entries (otherwise for ambiguous titles it will leave the mapping choice to you)
• Filters, search, private notes, probably something else I'm forgetting - the post is already too long anyway

It doesn't require credentials for any of your stores, but it does require public profiles for Steam, GOG and Xbox. You will also, of course, have to bring your API keys with you, where needed: the app heavily relies on IGDB, for Steam you need Steam Web API key, for Xbox I opted to use xbl.io, and finally for the AI integration you can bring your OpenAI-compatible or Anthropic key (or you can use a self-hosted model, though I haven't really tested that tbh).

I literally have no idea whether it's something someone besides me will find useful, but in case you do: here you go, let me know what you think.

AI disclosure: the majority of code was generated, with a lot of iteration and guidance. In my mind, if there exists a valid usecase for AI coding - it's stupid lil pet projects like these, as I never would've finished it on my own. I'm sure there's some slop left in there though, so be wary.

Design - Pair
Implementation - Generated
Testing - Pair
Documentation - Pair
Review - Me
Deployment - Pair

Paperless cloud backups

https://samsm.ch/paperless-cloud-backups/

Some documentation on how I setup backing up my paperless-ngx documents to dropbox using rclone and some custom code

#homelab #selfhosted @selfhosted

Does anyone else here participate in the selfhosting hobby without a formal IT related education or a career in a similar field? I've only had one or two programming courses as part of my university education, but it was only very basic Python and C. I've never formally learned how to use containers, version control or anything else. Sometimes I regret not pursuing an education in IT/programming because there are so many things I'd like to accomplish but can't (for example if there's a feature missing in some project, or to feel safe in my abilities to harden my servers and my network in order to expose services to the open internet).

Homepage is a dashboard for all your services with plenty of plugins to have the services status displayed in one place

So I asked if I was an idiot for coming up with the bright idea to start my own lemmy instance. Well I can proudly state that yes, I am an idiot, but I'm an idiot with his own lemmy instance: MopLemmy.fyi. Barebones and barely federated, but by God it's mine.

A brief summary of the issues I ran into: Lemmy Easy Deploy was absolutely the right way to go, thanks ᛒᛚᚢᛖᛇᚦᛖᚱ@no.lastname.nz for that suggestion. I've very new to several aspects of this so just understanding containers and when to use LED commands and not standard container commands ended up being the biggest hurdle to deploying the instance.

Email. Everything about getting the SMTP setup was basically terrible. Brevo won't let you make an account using an email address with a "." in it, so I ended up needing to make an email account so I could make an email account. Then I was troubleshooting a typo error for too long, and then I was troubleshooting a bad bit of info I got from the internet which had me using my account email address instead of the Brevo created one for the SMTP, so those were human error and by far the single most time consuming issue.

Second to that, a script to check if my external IP address changed. This ended up being the single most annoying thing, partly because of my newbity. I was using Remote Desktop Connection into my Linux box and copy and pasting stuff. Copy and paste was screwing up the data and kept breaking things. Once I realized that and switched to SSH things went smoother. I know, rookie mistake.

Setting up backups to my RAID that I could then access from my Samba share ended up being another issue. First it was saving to the wrong folder, then I thought I had broken my Samba share and couldn't access it from the network... and the problem ended up being UFW because I forgot to allow Samba through the frickin' firewall. Oh and then the same thing happened when I was trying to look at my Netdata but at least that time I figured it out much quicker.

Those were the major annoyances, the rest was more about the learning experiences of finding out certain things were a lot more complicated than I thought they would be. I did not expect to have to put so many different DNS records. I didn't expect to have to spend so much time deciding on white list vs black list federation, or host images local or not, or image retention, etc. But it's up and stable and working and I am very slowly federating to more communities and deciding what all I want to be able to see. Thanks to everyone on the original post with advice and suggestions, even the people who suggested things I ended up not doing, heh.

My blog is now an international success. I get like 3 hits from Google a day. That's what they call Seomaxxing. Or not. Depends who you ask.

Nevertheless, I noticed my audience comes mostly from outside Europe. My server sits in Frankfurt, so the only reasonable choice was to put a global CDN in front of my static Astro blog.

Easy, I thought.

I jumped straight in without reading anything first. What could go wrong. A lot, actually, and I can now confirm that the error pages from Bunny.net look really nice.

Got it working anyway. Full writeup on said blog, blazing fast no matter where you are:

https://hmmr.online/posts/bunny-cdn-for-a-static-blog/

I've been using Linux for decades, I've worked as a software engineer/architect/sre for around a decade, but networking has always been my biggest gap in knowledge.

I have a local server, I have caddy spun up, a glinet router running their version of openwrt, and I have a domain name purchased through porkbun.

I am looking to setup "local.domain.com" to point to my local server, ideally without exposing it publicly, and enable devices on my home network to be able to access it from that url. Id also like to be able to access containers running on that server by something like "searxng.local.domain.com" or "local.domain.com/searxng" aka without using the port suffix. Id also like to enable https.

I have read so many guides that have fragments of what I need, but nothing that ties enough together to get it working. And with all the options around different domain registers, let's encrypt, reverse proxies, etc, im struggling just a bit.

Are their any guides (prefer text over YouTube, but beggars cant be choosers) that people recommend that encompass the whole process, instead of just pieces? Id like to understand it instead of just fumble through it.