1
 
 

The Lemmy.world TOS requires that any bot account be set as such in their profile, and that any community they post to requires approval first.

Generically speaking, I won't be approving any. What I mean by that is any bot request is going to need a valid and real reason for its use here, which I would then bring to the community to make that choice like I did for the rules discussion threads. I wish there were a better way than a basic upvote or downvote system for feedback, but its what we've got so its what I'll use.

I have not posted about any new bots since I took over here a few months ago, so no new bots should be considered as having community approval.

If you see them, please just report and I'll get to it as soon as possible. The current one seems to just be getting new accounts all over the fediverse, and tacking their home instance onto the end. They are banned, but I'll have to ban again as things come up. I'll bring this up to the lemmy.world admins as well. This also goes for any other new bot that begins flooding the community.

Thanks!

2
 
 

Hello everyone! Mods here 😊

Tell us, what services do you selfhost? Extra points for selfhosted hardware infrastructure.

Feel free to take it as a chance to present yourself to the community!

🦎

3
 
 

tinyfeed is a CLI tool that generates a webpage from a collection of feeds. It's dead simple: no database, no config file, just a CLI and some HTML.

This release focuses on making tinyfeed a more stable and deterministic program. A stable experience is always better for users, and it also allowed us to design a new snapshot-based test suite, so regressions are much less likely to slip through.

It also included a bunch of fixes related to the --order-by option that was added in the previous release and was, sadly, quite full of bugs 😬.

Main items on the menu today:

  • Stable ordering: Feeds and items now come out in the same order on every run.
  • Discoverable sorting: --help now lists the values --order-by accepts: publication-date, update-date, feed-name and author.
  • Lighter dependencies footprint: upgrad to gofeed v1.5, which removes 6 indirect dependencies.
  • Lots of refactoring and a brand new test suite.

And the cherry on top: tinyfeed now publishes an Atom feed, so you can follow its releases! WHY DIDN'T I THINK OF THIS EARLIER? A FEED FOR TINYFEED!

AI Disclosure:

  • Implementation - Pair: I like directing IA when I have a refectoring in mind. On new feature I prefere avoiding it. I find that using IA for feature mean I spends less time time using the software myself during dev and then I miss the bugs.
  • Testing - Hint: the new integration tests suit is 100% me, but the new unit tests are often generated by IA then reviewed / refactor by me.
  • Review - Pair: for contributions it's 100% myself, I don't have much MR but I take a lot of time to review them. For my own code, as im a solo maintenr, the IA is the only one giving me reivew.
4
 
 

Howdy self-hosters!

I've got a huge pile of eBooks flying around here: poetry, scientific literature, magazines, comics, teaching materials, RPG rule books - it's a wildly mixed bag. I'm still looking for a self-hosted solution to make it more accessible and get an overview of what I actually have. (Calibre looks promising!)

My question here is not about software, though, but about organisation at the filesystem level: what folder and file name structure have you established for your eBooks? Do you just dump everything into one single folder and let the software do the rest? Do you create sections by genre ("Crime", "Fantasy", "Young adult", like the libraries do it) or application (job-related, hobby-related, cooking, ...)? Does it matter at all?

5
 
 

I have a GLInet travel router that is a peer connected to my Netbird network, I'd like to have any client that connects to my router to have access to the peers the travel router has access to, but still be able to access the regular internet that is being passed through by my router. Is this possible?

Ultimately I'm trying to get the TV at my girlfriend's place to be able to access my Jellyfin instance over Netbird. According to the Netbird documentation, exit nodes and routes are depricated and should not be used, but I'm struggling hard with getting it to work with Networks.

  • I've created a group with my GLInet router, my Jellyfin instance, and my home server (Which hosts Jellyfin) all in the group called "Travel".
  • I've created a Network called "Home" in Netbird
  • Within the "Home" network I've created a resource called "Jellyfin" with the IP address set to it's Netbird IP address, and an access control group where all members of the "Travel" group have access to all ports of the "Jellyfin" resource.
  • I've created two routing peers within the network, one is the GLInet router and the other is my home server. Both of these are Netbird peers with Netbird installed on them.

I am very confused overall, and could use a hand if anyone wanted to walk me through what I'm doing wrong.

6
 
 

From the blog post

obtaining an ARIN ASN and a portable /24 IPv4 block for a home networkI’ve wanted my own Internet address space for a long time. Not “my ISP gave me some statics” space which I’ve had for well over a decade now, but a block that belongs to me, announced into the global routing table by equipment I own, and ideally sitting in the rack in my house. Type the prefix into bgp.tools and see my own ASN sitting there as the origin. How cool! (ok, cool for some, but not most)

7
 
 

My Jellyfin config has some YAML like this.

# Sometimes work  
devices:  
- /dev/dri/renderD128:/dev/dri/renderD128  
- /dev/dri/card0:/dev/dri/card0  

Occasionally when I reboot my server, I end up with no card0 and instead I have /dev/dri/card1. This breaks my Jellyfin server...

I noticed there is also dri/by-path, which I'm guessing is a more stable path than a card index... however, doing this doesn't work for me.

# No work  
devices:  
- /dev/dri/by-path/pci-0000:00:02.0-render:/dev/dri/renderD128  
- /dev/dri/by-path/pci-0000:00:02.0-card:/dev/dri/card0  

I tried with and without quotes and the result is the same. Error to start. I'm guessing Docker is failing to correctly parse the string because of the colons in pci-0000:00:02.0-card...

How's everyone else handling this problem? I've been updating my compose.yaml every time the index switches, card0 to card1 to card0... but this is getting annoying now. (This is a worse problem now that I'm running Fedora IoT!)

Any thoughts?

8
 
 

Hello everyone.

I'm getting a hard time with Qualcomm Atheros AR8151 onboard LAN with Debian. It usually drops to 100Mb/s and freezes the network altogether

Settings for enp1s0: Supported ports: [ TP ] Supported link modes: 10baseT/Half 10baseT/Full 100baseT/Half 100baseT/Full 1000baseT/Full Supported pause frame use: No Supports auto-negotiation: Yes Supported FEC modes: Not reported Advertised link modes: Not reported Advertised pause frame use: No Advertised auto-negotiation: Yes Advertised FEC modes: Not reported Speed: 100Mb/s Duplex: Full Auto-negotiation: on Port: Twisted Pair PHYAD: 0 Transceiver: internal MDI-X: Unknown Supports Wake-on: pg Wake-on: d Current message level: 0x0000003f (63) drv probe link timer ifdown ifup Link detected: yes [ 3.004591] atl1c 0000:01:00.0 enp1s0: renamed from eth0

[ 37.754972] atl1c 0000:01:00.0: atl1c: enp1s0 NIC Link is Up<100 Mbps Full Duplex> [ 45.071291] atl1c 0000:01:00.0: atl1c: enp1s0 NIC Link is Up<100 Mbps Full Duplex> [ 45.799689] atl1c 0000:01:00.0: atl1c: enp1s0 NIC Link is Up<100 Mbps Full Duplex>

any tips of what can be done around here? I'm using kernel 6.12.111+deb13-amd64

9
Backup (lemmy.world)
submitted 21 hours ago by to c/selfhosted@lemmy.world
 
 

I view my photos using immich, historically I used photo prism with photosync to back them up.

My photos are stored on my nas (omv), immich is on my android and I access it through wireguard.

My nas is raidz1 with 4 drives, so it is relatively resilient. The photos are backed up to a separate external hard drive too using borgbackup.

What i'd like to do is the following: Back up my photos externally - at a family members house with a pi zero connected to a hard drive, which would be connected to their WiFi or via an ethernet cable to the router.

Ideally, the first backup should be done at home before, I don't want to backup 100's GB over the internet.

Would a simple wireguard tunnel be ok here? Should a different method be used?

Has anyone done such a thing? I read a lot about vps, but I don't what the ongoing commitment in cost when I have a free option.

One of my worries is that I don't want a compromised device on the family member's network to compromise mine, would the wireguard tunnel be enough to secure it? Would WiFi be more secure than ethernet cable?

10
 
 

Does anyone run their own AI service?

If so,

Which one?

What hardware?

Do you have a way to access it from outside or from a phone?

And, if you're open to sharing, what do you do with it?

I know AI-enabling hardware is insanely expensive right now, but some of the smaller (<32GB) more efficient models (think deepseek- or qwen-based) don't absolutely need specialized hardware to run and perform well enough for many purposes.

I am so aware of the absolutely abysmal privacy practices of basically all AI companies that I'm not comfortable using them to help me with web searches and the such, because there's no way that all this information won't be going into a profile. This makes me want to have my own "helper" service.

11
 
 

So I'm relatively new to server hosting. (But experienced with remote web hosting from providers.) After about a year of fighting to run Nextcloud on a hosting company and finally losing everything from the cPanel vulnerability a few months ago, I broke down and launched my own home server. I'm looking for advice to maximize security.

CachyOS Linux with ClamAV Docker via Portainer Nextcloud (E2EE), Immich, DocuSeal and NoteTrace Routed through a domain and subdimains via Zero Trust Cloudflare Tunnel and Cloudflare DNS.

I have regular redundant backups both onsite and offsite with Duplicati.

My passwords for OS and all admin dashboards are extremely long, unique, random strings managed by Bitwarden.

I know just enough about this stuff to get into trouble. What else should I setup? I have little to no monitoring going on and don't know much about that direction.

12
13
submitted 1 day ago by to c/selfhosted@lemmy.world
 
 

I'm looking for advice on setting up kiosks for a smart home.

I'd like to have 2-3 touch screens setup to control devices from.

I've decided on the following:

  • preferably plug in devices/screens (with no battery)
  • e-ink screens would be preferable but not a must
  • cost is a factor

Anyone had success in setting up something similar?

14
Home server (thelemmy.club)
submitted 1 day ago* (last edited 1 day ago) by to c/selfhosted@lemmy.world
 
 

Built when Netflix first took away password sharing. Thanks for the heads up Netflix! Would not want to start this project now 😂

Edit: adding temp and specs

I9 11900k Z590I Vision D ITX mobo 64gb memory The 16x lane is bifurcated to run: Intel a310 & Lsi 9305 16e into a hp dl380

Drives are 10x 14 tb wdd in raidz1, 6 256gb sata ssds in a pair of 3 wide mirrors for special vdev metadata, a 512gb nvme for read cache, and a 64gb optane for slog

15
 
 

Right now I'm creating a nightly restic snapshot of my server on borgbase and on some spare drives, and keeping the snapshots forever. There's a ton of daily churn in my data though, between databases and logs and other files that don't constitute 'real data' but might be needed to restore the app.

16
 
 

I've had several occasions in my life where I've tried to switch to Linux only to run into hardware incompatibilities that would have taken me man-months to solve. Thanks to GPT my primary personal PC, home media and project server is now running Linux and fully functional. I've got Jellyfin, NextCloud, Navidrome and Joplin all happy. I've also been able to wipe an obsolete MacOS off my 2017-era Macbook Pro and it's happily running Mint.

There's a deep irony in Windows being enshittified by AI, while the same AI makes Linux about a billion times more usable. Now I have a leftover Windows micro-PC running a local LLM model, so I can be less dependent on GPT, as long as time isn't a factor...

17
 
 

I've been using Duck DNS happily for years but it's been down more than up for the last month for me and I think it's time to switch.

18
 
 

Hi selfhosters,

I'm considering improving the security of my homelab/server setup and I'd love to hear some more experienced opinions on my plans.

Like most self-hosters, I started out with a single-server setup: I cobbled together some old hardware, slapped on a NAS-style OS, bolted on Docker and started experimenting. As things go, my setup has grown a lot over the years. I'm running a lot on that machine - NAS capability, local DNS via pihole, a Wireguard VPN endpoint (so I can tunnel into the LAN from outside), many private services (accessible only from inside the LAN), but also some public ones accessible from the open web.

Although I've tried to do my homework in terms of security (various hardening measures for SSH and Docker, reverse proxy, proper SSL termination for everything), I realise I've put a lot of eggs in that one basket and I might want to introduce some network segmentation.

I don't think I'm ready for getting a hardware firewall or a router/switch capable of VLANs just yet. What I'm considering, though, is putting my services available from the open internet on a separate server inside my network - a little Pi 5 I've still got lying around. My idea is that if a container on that is breached and if an attacker manages to escape the container to gain root access, compromise would be limited to the few of publicly available services I have on the Pi, thus limiting blast radius. If combined with (software) firewall rules that make the Pi a 'pariah node' (dropping all incoming connection efforts), lateral movement to other devices on the network could be contained.

An alternative would be to finally make the move to Proxmox. Everything would still be running on one physical machine, but I'd create several VMs: there would be one for private, one for publicly available services, and I'd firewall the latter off rigorously so it cannot connect to anything else.

I'd like your opinion on these plans. Which one would you recommend? Are they both sound, or is there anything I haven't considered? Are there other (easy, non-hardware intense) things I could do to improve security even more?

19
20
 
 

I run DietPI on one of my SSDs. SSDs are inside USB adapters connected to USB hub. Recently I started from scratch.

I have tested already:

  • dockerized Navidrome music library with Tempus android APP via Tailscale. It needs some tweaks I guess for losing connection or music streaming stutters though.
  • Moonlight + Sunshine game streaming. Although I have not figured out how to handle problematic wireless bluetooth ps4 connection in RetroArch.

Starting from scratch so I guess I will stick to basics for now

  • SSH
  • dockerized Pi-Hole

Then maybe will gry to play with dockerized

  • Forgejo
  • Nextcloud
  • Obsidian (self-hosting?) abilities
  • Teamspeak and move from there.

Im more interested in development now, less in media server stuff.

Any upgrade recommendations are welcome. I thought about Thin client like wase, but will swe. I still have some empty slots for 2 more ssds ;P

21
22
 
 

I saw this and installed it but the WebBluetooth doesn't work regardless of the browser I used on Android. Can someone tell me if it's possible to use this on your phone? I can't move my desktop to where the bike is. Also I've never used Chrome on my phone and I feel raped sybernetically for being used like that to install that piece of shit data hording browser.

23
 
 

Hello selfhosters! I read here a lot, longing for the day to get back into it. I have a little plan to do so I have access to some thin clients with decent enough hardware to run a small file server. I’d like to set one up for myself and as a gift to my partner

I keep getting lost in the jungle of options and incompatibilities so I was hoping to enlist some help in selecting a stack

I’m looking for open source software in the base, maybe truenas but I prefer debian and my partner uses LMDE already.

  • On top of that should be a simple file server for backups/network storage. Some interface for managing storeage would be huge too
  • Wireguard with an interface
  • Having a simple container interface for future features like homeassistant and jellyfin et al is great too.

Open source and free is a must and I want to avoid risk for future lockins and freemium/ripe for enshitification-software as far as possible. And no or at least responsible llm use if that even exists anymore. Happy to shed featues to acheive that in combination with longevity. Is plain debian or even ubuntu the way to go or are there more optimised distros? Or am i just describing fedora with cockpit? Im not lost in linux itself, just overwhelmed with the endless options hoping someone can help me make a plan!

Would you make someone you love a home server?

24
25
 
 

Hello,

I stopped using TeamViewer a very long time ago. Since then, I’ve been using DWService and I’m quite happy with it. I like the fact that I can access to the terminal without launching any graphical component on the machine (which is handy for my headless servers, and allows me not to open SSH port). I also like the fact that it works even if my VPN server is down, as I can access remote servers that aren’t accessible via the web when they’re no longer reachable through my VPN.

However, there are a few issues that are bothering me more and more. I’ve switched my mum’s computer to Fedora and, whilst it worked perfectly under Windows, remote control is very buggy under fedora because the connection isn’t great. Furthermore, it’s impossible to access the screen if the computer isn’t unlocked.

So, I’d really like to find a solution that meets my criteria:

  • Accessible via a web browser
  • Ideally open-source
  • Free
  • Ideally self-hostable, but I’m worried that if, for example, my reverse proxy or VPN crashes, I won’t be able to access my machines to debug them?
  • Allows access to servers without a monitor
  • Allows access to computers running Fedora without the need for prior unlocking

Thanks!

view more: next ›