Wireguard is blocked in my country, so I no longer can use Tailscale or other Wireguard-based solutions. My home server is behind a NAT. What other ways of secure private connection can I use?

Floppy seems cool. I am curious about how/why people use these types of tracking services for their media.

didn't see it mentioned here, so a brief YSK.

stefano marinelli is working on #littleFedi, a self-hosted, single-binary activitypub/fediverse peer that hosts a mastodon-like instance with, in my mind, three killer features.

one, the thing can run on your premises completely, no need for paying for a VPS, domain name, nothing, bypasses NAT/CGNAT, encrypted comms to other instances by way of lighthouses that do the initial intros.

dos, the thing runs on something as light as a Pi zero 2W, with a miniscule memory footprint and immense CPU optimizations due to running on the weakest hardware there is (also running off SD storage).

finally, a blog-like view of your long-format tweets/toots/posts, naturally with replies appearing as comments.

original post introing the thing: https://littleone.littlefedi.social/@stefano/4252ae6f-b949-42f8-a021-fd2b698f8b37

no code available atm (coming soon) same goes for binaries. the first instance is at https://littleone.littlefedi.social/ if you want an invite code to check things out (the settings page's got a lot of cool stuff), hit up stefano.

I am beyond stoked, this clears the two biggest hurdles for selfhosting your shit - the VPS/domain expense and hassle, and the hardware requirements for running it.

edit: missed that the website is up, explaining everything way better: https://littlefedi.org/

tl;dr- my favorite container is the firefox browser. My work browser is seriously locked down, so I just go to my Homer page and click firefox and a firefox instance opens inside my edgelord browser with all my bookmarks and extensions. It's a simple thing, but easily the service I use more than any other.(compose pasted at bottom)

Anyway, I started with docker desktop on winblows 11. I learned the ropes and then when docker desktop inshittified in an update, I switched to Rancher. All my services are picked up on their local ports by nginx-proxy-manager and then sent through a cloudflared tunnel to the domain I bought, with a customized homer page and strict access controls. Because the VM on windows was running my poor little refurbished Thinkstation too hard, I recently deleted winblows (such a good feeling) and moved over to a headless Debian server, which I run through SSH on my refurbished thinkcenter. 97% usage down to 13% (seriously). I'm only in this computer game for about $500 total and I have more than a few TBs of storage (used SAS drives were really cheap a little while ago and the hardware/learning curve is worth it). If you don't game, old stuff works just fine for pennies on the dollar (I have unplugged backups of all my really important stuff).

I use AI for the CLI stuff I down have memorized. Linux is still frustrating- File ownership is foreign and super irritating to me, being my most recent source of frustration. My Filebrowser instance broke itself and I haven't gotten it back, and of the 30 times I've tried to get Nextcloud to work, I've been successful zero times.

Anyway, it has been hours of my life arguably wasted but it has been fun and educational, and I get to give the finger to big data for the most part. I don't like the cloudflared thing, but free is hard to beat and unless I start torrenting again, I really don't need or want to pay for a VPS. I search this forum and others for new containers to spin up. I marvel at other folks' setups and the money they have spent. I'm a rusty and recycled guy, not a new and shiny guy, but man some of this custom-built, laser-cut, 3d printed stuff is cool.

I just wanted to share my experience and hopefully encourage anyone who is just starting or is on the fence.

firefox: image: jlesage/firefox container_name: firefox ports: - "5808:5800" environment: - TZ=America/Chicago - PUID=1000 - PGID=1000 #- VNC_PASSWORD=${VNC_PASSWORD} - DARK_MODE=1 - WEB_AUDIO=1 - WEB_FILE_MANAGER=1 - WEB_FILE_MANAGER_ALLOWED_PATHS=ALL - WEB_HOST_CLIPBOARD_SYNC=1 volumes: - ./firefox/config:/config:rw - /SWAP:/downloads shm_size: "2gb" restart: unless-stopped networks: - web

So...I was wondering. Is there any backup tape system that would be advisable to use for backing up some TBs? I guess I need it to be USB, as the server is a micro PC, one of those tiny ones you can hang from behind a monitor. It's an HP ProDesk.

Thanks!

DISCLAIMER: This is pretty much 100% AI generated. The project is kept really simple. Before you downvote, make me a generic webui for printers. 😉

I made this project to fill a need I had. I am not collecting internet points here, I don't care if you don't like it.

I found Akronae's repo laying half broken on github, made it work, and thought it was a simple enough project that it could have a rewrite (it needed). I can not participate in Github so here you go, full new repo on an unreliable self-hosted forgejo instance. If you are interested, take it before my hardware fails again. :)

What is it?

It's a web UI to upload documents and print them. I wanted that to print from any device in my home with zero config on device (think guests, family...). It pairs very nicely with scanserv.js.

It looks like this:

Remarks are welcome, but I do not guarantee maintenance. As we have seen the trend of AI projects not being maintained in time, I don't expect this project to escape that fate.

And now an attempt to tag: @Shimitar@downonthestreet.eu

Edit: added one screenshot here and 2 other to the repo/readme and added the license GNU AGPLv3.

Edit2, 20260822: After many headaches, I started hosting also a registry (that thing needed to host container images ready to be pulled) and made prebuilt images for amd64/arm64 and started a proper release. You are welcome. Professional stuff, I tell you 😂.

So, I've got a homelab thing going, with NextCloud and Immich and other things... using Docker. But the one thing I can't seem to wrap my head around is how to get my calendar needs met behind the scenes. I'm hoping there's some sort of calendar syncing server I can use.

The problem: I use NextCloud and another android app to use my calendar. Easy. Historically, my household has used a single Google Calendar shared amongst members.

The real problem: They won't ditch Google. But I need a solution so that I can:

1. Sync their calendar events to my NextCloud calendar.
2. Sync my calendar events to their Google Calendar. I think that the issue here is, the share links that the calendars give, can only be used to list a new separate calendar on each of the respective platforms - not sync the events between the existing calendars...

I'm hoping that there's maybe a syncing solution out there that can play middle man and sync the two calendars directly, rather than having separate calendars for the two environments?

My payment processor just terminated my account and i am reminded once again too self host literally everything.

I already have a self hosted crypto rail but for many people that is not an option, bank transfer is quite easy to do with just checking against my bank's API, but remembering from the data before i got terminated it was around 40% transfer, 40% ideal, 20% card.

Is there anyway to self host those other payment ways outside transfer?

Does anyone have experience with this?

If you do thank you very much!

...and this is why

1. pihole ain't enough
2. you dont buy skeezy shit off aliexpress
3. if your pirate box isn't self hosted, it's a prostitute :P

.

Honestly.... I'm kind of impressed at the level of fuckery that vSeeBox goes into. This is not just a random crypto mining bot... someone with real skills went to a fair bit of trouble to obfuscate things.

Impressive. Most impressive.

PS: don't buy vSeeBox - or do, with eyes wide open.

I've been setting up my first nas and set up DNS routing from my router to adguard home, which then routes traffic to nginx-proxy-manager, which then routes to the docker container for the intended service. I've spent days pulling my hair out, trying to figure out what the issue was - why all my services behind NPM were periodically unreachable on my browser. after a wifi reset on my laptop they'd come back online, but why? today I found out that although my router correctly had the DHCP setting correctly set up to route IPv4 traffic to adguard, there was a separate section in the router settings that handles IPv6 settings, and that this was set up to look for my ISP's assigned DNS provider. Just posting on the off chance anyone finds this helpful or entertaining. I am extremely tired (I have a 3 month old baby) so please bare with the poor formatting of the post!

I have a headless raspberry PI 4 8GB connected to my TV setup with Kodi and the Jellyfin add-on. Now I would like to have a convenient option to watch Youtube in a privacy-friendly way on the TV.

The experience should be similar to Freetube: creating playlists, search videos, follow subscribed channels. I don't mind running it either directly on the PI or install it on my server.

Thanks for any recommendations of what you folks use!

This website made me reconsider if 99.9999% SLA and always online is really that important for lots of websites. I used to self-host my own server in my own apartment, but gave up on that after my internet provider had their first major outage that lasted almost a week. Also I didn't want to worry about the fire hazard, or the server going down when I was traveling etc.

But a solar powered server seems interesting, if the batteries could be made fire safe.

I run a quite large vps. now and i want to monitor it ive been using beszel an uptime kuma, does anyone know a better solution ive tried grafana an prometheous. but it was not as good as i was hoping. i saw netdata on selfh.st does anyone have expierance with that.

The mouse did not survive interrogation.

Also mouse not pictured.

I got into self hosting almost a year ago. Since then, I bought (low) hundreds of dollars worth of hardware, but I've never used any of my services outside of testing. My server is left unused since may (I think).

Now I've found a use for my server, but my HDD, (which I bought for a good price ($150 for HC530 14TB, 10k POH) for european standards in last November) isn't really being used. To be frank, I never really used it, I don't need a NAS, I always preferred (pirated) streaming services over local streaming, so I mostly had it just to have it.

I kinda know what I can do with it. I could set up a proxmox backups on it or run a nix cache (I run NixOS on my desktop PCs, I would be using the cache, but it would be annoying to set up and cachix free tier is enough for now).

I'm also anxious to use it, because I'm scared to wear it down, but, at the same time, I know that it will degrade if I don't use it. I might want to sell it, but my previous sales on online marketplaces were abysmal and I know I might regret it if I change my mind and decide I need so much storage.

What would you suggest? If I want to keep it, how should I treat it?

Wanted to share a quick blog post (see link) playing around with a couple methods of validating data origin and integrity without blindly relying on public CAs.

It's sort of a follow-up-to-a-follow-up on an earlier post about using Cloudlfare proxies to selfhost personal sites or services, but it really applies more to TLS and public CAs in general.

Hello guys so I installed jellyfin on termux. It ran fine few hours ago. I turned it off and got running few times. Now when I'm trying to start jellyfin I'm getting this error

You must install .NET to run this application.
App: /data/data/com.termux/files/usr/lib/jellyfin/jellyfin
Architecture: arm64 App host version: 9.0.18
.NET location: Not found
Learn more:
https://aka.ms/dotnet/app-launch-failed
Download the .NET runtime:
https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=arm64&rid=linux-bionic-arm64&os=linux-bionic&apphost_version=9.0.18
Failed to resolve libhostfxr.so [not found]. Error code: 0x80008083
Any suggestion to fix it ?

I think it would be nice if my guests could easily print and scan when they are visiting.

Printing should be relatively easy nowadays with the printer on the same network. Scanning is another story. I found this nice project which works very nicely.

However, I would love to have the same but for printing, that way I would not have to do device specific troubleshooting/helping when trying to print something from guests' devices.

There is this project, which has a screenshot of what seems to be exactly what I'm looking for, but the issues are unanswered, there is no release, the building of the project is lacking.

Dockerfiles are incomplete, they are lacking copy yarn.lock and api lacks db initialization. The ports seem to be hardcoded. And once built, it doesn't work or at least I didn't manage yet. I got the frontend finally up but can't login. My knowledge is very limited so I'm checking with you if there is anything similar in the landscape or anyone willing to help on that project. Unfortunately I am locked out of github.

CUPS didn't work for me as I can't see an upload option on the web UI.

edit: So I spent time on tweaking the akronae repo, and after a few corrections, adding CUPS and improvements, I managed to get something functional. If I have more time I might publish it. It's fully vibe coded though 'cause I couldn't be arsed learning TypeScript and shit, and the original repo has plenty of outdated dependencies which, same, I won't update because I don't have the skills.

Hi there, I am hosting a service for mainly me and also some family members. I want it to become more.

Currently the chain just as follows: interwebz <-> UDM <-> npm <-> services. The services are mostly run in VMs or LXCs, npm runs in docker, accompanied by one Adguard home instance and another AGH instance in an LXC.

I now want to add f2b to this whole chain. I've installed f2b in the OS which runs docker (and therefore npm) (VM1) and also in the OS of my existing service (VM2). Both VMs use Ubuntu as their OS.

What I already figured out thru testing and reading is, that f2b in VM2 acts as expected when the jail is triggered, and sets the block. But nftables/ufw don't block connections coming from external, as they are coming thru npm. f2b sees and uses the public IP for the checks/bans.

So now I am thinking how to solve that.

1. Keep f2b on VM2 and let it set the bans on VM1 over SSH. That's what some people do or so I've read.
2. Use f2b on VM1, let it check logs on VM2 and then set the bans. That would also be possible over SSH, I'd guess. But I didn't read up on it yet.

So, what's your opinion? How do you fine folks handle that in your environment? Option 2 seems to be more elegant, as it would be "at the entry" and let's me easily add additional services later. But I don't know, if that's a path worth digging in to.

Morning all,

Quick question, how do y'all handle big "unofficial" collection torrents with weird folder/file names that were manually added to the download client?

Is there a nice tool to use or are manual scripts the only way?

Also, how can I tell my *arr stack to look for files inside collection torrents too? Say I want Iron Man 1, but the only torrent with sufficient seeds is e.g. Phase-1.MCU.1080x720p or some weird ass name like that, that contains Iron Man 1 along with all the other files. How can I tell Radarr to use that torrent?

Thanks! Have a good one

EDIT: Apologies, should have specified, I did get this working before posting here. Ran a bash script to create subfolders for each *.mkv in the parent folder, and cleaned up the names with regex. Then went to Wanted -> Manual Import and Radarr could successfully identify the movies. But the name cleanup was the most important I think.

So a tool would have to rely on something other than the name to identify the movie like a fingerprint or somesuch

I have noticed that my home server is strangely using lots of swap (~5 GB), despite having only a few lightweight processes running and loads of RAM installed (32 GB).

Upon configuring Grafana + Prometheus, I noticed a trend where cache + buffer will progressively increase until swap starts to be used. My system and services combined will use ~8 GB RAM. Upon rebooting, the cache + buffer will start anywhere from 3--10 GB, progressively ramp up to ~25 GB in 1--2h, where swap will start to be needed (~3 GB). See the image attached for reference.

My swap filesystem is on an expensive (to me) SSD, and I would like to reduce its wear by as much as possible. I understand that swap can introduce only minimal wear on SSDs depending on its nature and that it can be harmless, but I am still not sure what is causing this behavior (and why) and whether I should worry about it or not. So I figured I should investigate what is happening here.

My main question is, how can I figure out what is causing this behavior? Is it expected? I am looking for guidance from others who are more experienced than me in the topic.

A little bit about my system:

I am running Debian 12 on an NVMe SSD containing the root partition (btrfs) and docker services. I also have two HDDs, one with persistent data (ext4), and the other with backups (ext4). This is majoritarily a single-user machine. I tried using the following kernel parameters, but it hasn't helped:

vm.swappiness=10
vm.vfs_cache_pressure=200

My docker services are:

• *arr stack
• jellyfin
• nextcloud
• immich
• open-webui + ollama
• pi-hole
• invidious
• romm
• nginx proxy manager
• grafana + prometheus
• other minor services that I don't think are doing much (uptime-kuma, stirlingpdf, vaultwarden, etc)

There are some services that I expose to the internet (using Apache reverse proxy) that really should be accessed by only a small set of devices. Requiring client certificates seems like a great way to reduce the attack surface and prevent brute force attacks (since the attacker doesn't even get a chance to attempt a login).

I wonder about the difficulty on the client side as well as other practical implications. The clients are smartphones of various makes.

edit:
I needed to edit ~/.config/qui/config.toml and bind the host to "0.0.0.0"

I'm running Debian (12) and I just installed qui, a single binary dropped in /usr/local/bin. When I fire it up, I can access the web interface on the local machine via localhost:7476, but I cannot access it over the LAN via the server's IP. Firefox just says 'Unable to connect'.
I can access a dozen other services over the LAN, and as far as I'm aware there's no firewall enabled by default.
What gives?