Now that I have time for hobbies again I wanna dive right in to building up a home lab. Right now I just have a Netgear router that reached end of life, and a NAS i'd like to make accessible remotely, and a DIY router seems like the correct next step for me. I'm very interested in ad-blocking network wide and someday I'd like to host my own little webpage, but for now I'm really just barely getting started.

I'm information gathering, I don't know what I don't know and my networking skills are pretty weak anyway. But even if your needs and desires have nothing to do with mine, I also just like to hear people talk about their set ups. Please? 🌞

I called my ISP today to set up a static IP because my services keep being taken down from my IP changing. I either need a business plan or a 5-10gbps residential plan to do that...

I cannot get on the business plan without a valid Business ID so that's not an option. And no way in hell I'm paying for those speeds.

Anyone have any alternatives to stop this from happening so often? My public IP seems to change regularly every 2-3 weeks and it's getting pretty frustrating having to reconfigure things. I only have 2 ISPs in my area and they are both terrible. I assume I'm out of luck, but maybe there's some tech magic I'm unaware of.

Hi folks!

Ten months ago I started Ideon as a side project. This week it reaches v1.0, with 640 stars on GitHub. Thanks to those who have followed along from the beginning, this really means a lot.

What's new in 1.0: the canvas has become a Git artifact.

A project now syncs to a Git repository. The structure, notes and block positions are version-controlled as files inside an .ideon/ directory, with a manifest and SHA-256 checksums. The rest of your repo stays untouched.

In short: you edit the canvas, you push, and the project history sits in Git like code. Every change shows up as a file diff.

The rest of 1.0:

• Database block: typed columns, search and aggregation, all on the canvas.
• Mermaid block: live rendering, editable source, PNG export.
• Chained audit trail and sealed records: every state change is traceable and verifiable.

What's next:

• A plugin API, so the community can build its own block types.
• A desktop app. It's Docker-only for now. I'm solo and can't test every platform properly. That comes if the growth justifies it.

Where this goes next: the canvas stops being a map and starts being a system. A graph that remembers everything, connects the dots, and eventually reacts on its own 👀.

If you want to try it: a plain docker run works for the SQLite build, docker-compose if you prefer Postgres. The repo-sync guide is in the documentation.

The project: https://github.com/3xpyth0n/ideon

I'm going to be away from home for a few weeks and would like to access my computer (LMDE) while I'm away. Remote desktop connection would be ideal, just file transfer would be acceptable.

Is a VPN necessary, or can port forwarding be good enough for a one time use?

What software/networking recommendations do you have?

(Not the registrar. E.g., .com TLD is operated by Verisign.)

I wanted a domain for my e-mail. Sounds simple.
But I am a major overthinker, so over the period of past 2 weeks (damn!) I've been deciding between e-mail providers, choosing potential domain names, choosing a TLD (round 1 - by price and looks), looking through registrars, deciding whom to choose for nameservers, and now I am comparing registry operators (TLD round 2).

There are differences, such as who can register a domain, restrictions on domain privacy, and some TLDs like .dev are on HSTS preload list.

Currently, I am mostly looking at EURid with .eu TLD.
What piqued my interest is being able to transfer a domain directly through the registry. So, if a registrar locked me out or shut down, I could still transfer my domain.
From EURid:

From your registrar: Your first point of contact should be your registrar.
From the My .eu platform: You can also issue the transfer authorization code yourself on the My.eu account.
From EURid: This should be done only as a last resort. After proving you are the holder of the domain and cannot obtain an authorization code from your current registrar or via the My .eu platform, you can request an emergency transfer authorization code directly from EURid

Alright.
But I must wonder, how do I prove my ownership?

First sign that this may not be that secure is right on the same page:

Print the form, sign it and send it to us via email at authcoderequest@eurid.eu. If the requester is an organization, please print the form on company letterhead paper or add a company stamp.

OK, the form. Here's the request page. Fields are domain name, first name, last name, job title, email address, and reason for the request.

I generated the form to see what's there. So... is this the security?:

I hereby confirm that I am the rightful holder of the domain name mentioned above, or that I have obtained the legal power to represent the holder, and that all data provided is true and correct. I am fully aware that making a false statement in this matter is considered fraud and may have judicial consequences.

I mean, it doesn't even sound like they collect your signature during the verification, not that a picture provides much security. This is one of the methods:

You can receive a small bank payment (less than one euro) from EURid, which includes a 10-character code that starts and ends with “EU”, with six digits in between (EUXXXXXXEU). After receiving this payment, the domain holder logs in to the My .eu platform and enters the code to verify their registration data.

Either way, it seems this might be mitigated by registry lock:

The Registrar Lock Service will also protect your domain name from accidental changes, but the difference from Registry Lock is that a locked domain name can still be transferred with an authorisation code sent to your My .eu account or an emergency authorisation code received from EURid.

Enough about safety. What about privacy?
The T&C [PDF] prohibits the domain having info of the registrar:

Your registration data must be your own data and must not be that of your Registrar, or of a proxy holder or a representative of a natural person or legal entity who does not meet the eligibility criteria. You may at any time check your registration data via the web-based WHOIS or the secure registrant portal available on our Website.

But it gets a bit better in the WHOIS policy [PDF]:

When the Registrant is a natural person the Registry publishes the Registrant´s e-mail address and language.

Alright. I hope there's someone else who took a similarly overcomplicated route in choosing a domain name.

Selfhosters what is the power draw of your entire setup? And have you done anything special to manage it you'd like to share?

Including all network equipment I use around 110kWh of good ol' 120V 60Hz USA juice per month. Averaging about 215 watts of power draw for my systems. Nothing amazing, but I like to think that it's a conservative setup for everything I accomplish with it. I'm paying around $25 a month for my setup. None of that includes my work PC or personal PC, just hosting infrastructure.

Other than trying to make sure all power states are available on my server I haven't done a lot of power conservation.

I'm curious what you all have.

At work I was asked by a different team how we can deal with bots, because someone in my team remembered that I knew how to do it.

I reluctantly suggested Anubis because I got shit for it last time, This is the URL https://anubis.techaro.lol/

This is the 2nd and last time I will ever recommend Anubis anywhere at work to deal with bots because of how unprofessional, un-serious and weird others perceive it.

The mascot being a ~10 year old "cutsie" anime cat girl is weird in a work setting.
I will never put myself in a situation again where I have to explain that it's not weird to anyone again, same for that URL.

What is a professional looking open-source alternative to Anubis?

Edit: No I can't just send my colleges here https://anubis.techaro.lol/docs/admin/botstopper The issue is they find the Mascot and domain weird, they will still run into both.

My Goal: Recommend a Open-Source bot protection tool

The Issue: When I send my coworkers to https://anubis.techaro.lol/docs/admin/botstopper they find the mascot and URL weird.

Result: They don't see Anubis as a serious tool and turn away from it

What is a professional looking open-source alternative to Anubis?

Possibly it would make more sense to ask on the 196 community based on the company's energy.

Anyway, I was browsing EURid's list of registrars, and this company's logo took my attention. However, I can't find any experiences online.

I've checked through their websites, and so far my feelings are a bit mixed. Although most of it is just outdated or somewhat inconsistent bits across their websites.

Things that make me unsure

First and least important is info about one of the people behind the company, "Alfie". Links on the about page are just completely outdated and dead. Website link in docs is at least alive, but also outdated, as can be seen by navigating in manner of URL in docs -> keybase -> GitHub -> newer website.

Second, the "Email us" button on the contact page redirects to a contact form, which really contradicts the text below:

If you want to send us a PGP encrypted email, please use the below key. Remember to attach your own key (as application/pgp-keys), so we can encrypt our reply to you.

That sounded so cool when I've seen it, but what e-mail address?
The contact form is on a "support" subdomain of their other website. This seems to be centered around the contact form, but there is also a "Manage PGP keys" button which redirects to a login page.
Maybe they migrated to that?
But then going to contact page on the domain's second level does show an email, as well as linking to the same contact form.

Third, in the list of services, there's also "Email"... which presents a self-signed certificate. Ignoring that, there's just an "Unknown URL" error page.

We're probably not responsible for this domain.

Lastly, and most importantly, right on ther main page it says:

Proxy registration for .eu

And that's the only mention of that feature. But what is it? If following ICANN's definition...

Proxy Services – Proxy services allow a domain name to keep certain identity and contact details from appearing in public Whois information. The proxy service becomes the registered name holder of record, and its identity and contact information is displayed in Whois data.

...it might be a problem. Because, let's take a look at T&C of EURid (PDF):

Throughout the Term of your Domain Name registration, you must: [...] b. keep your registration data accurate, complete and up-to-date at all times. Your registration data must be your own data and must not be that of your Registrar, or of a proxy holder or a representative of a natural person or legal entity who does not meet the eligibility criteria. [...]

There's also an annoying requirement for tax reasons, but that's not their fault:

In short things are about to get a lot more complicated. We will need to collect at least two pieces of non contradictory evidence about which country you’re resident in, so we can pay the correct tax authority.

And what caught my attention (in a good way)

As I've said, I checked them based on their logo. That's not a usual company logo.

Pricing for .eu TLD is OK.

Their ToS is short.

One button on bottom says "there's no ai here!".

Looking at the about page, this seems to be a small company operated by 2 people.

Looking at their mailing list archive, they've used to have a VPS service, gave shutdown information in advance (though less than 2 months), and set-up a migration route with another provider.
They've also informed about a security incident at one of their registries.

WHOIS privacy includes email forwarding from a funny domain name:

If you do not select it we will generate an anonymous @owowhosth.is email and publish that instead.

On their Mastodon, they describe themselves with

On a mission to make interneting a little easier, join us at http://glauca.digital/. Possibly anarchist, definitely antifascist.

Oh, and speaking of Mastodon, that is listed as one of their services. Based on this disclaimer...

MOBILE APP USERS: if you're trying to sign up with a mobile app go back and select login to authenticate with our SSO.

...it does indeed sound like being their customer includes account on their Mastodon instance. Pretty cool if true.

Also, try whois with their ASN:

aut-num:        AS207960
as-name:        AS-TRANSRIGHTS
descr:          Trans Rights! Hell Yeah!
[...]
remarks:        ----------------------------
remarks:        Hmmmmm tasty routing policies...
remarks:        ----------------------------

Hello everyone!

I have been having a hard time finding a solution to my problem of sorting music from both Youtube music and Bandcamp. I have tried Picard and while it is good I have had problems with it. For example it has made songs shorter (they now end to soon.). So far the only solution I have found is to use Picard and manually review every song I own, and since I have thousands of songs It would take quite long.

I'm using Jellyfin with Finamp to play my music, and sometimes add lyrics via the Jellyfin app when they are missing.

How have you people solved this or similar issues? Does someone have a automated setup that works well?

cross-posted from: https://discuss.online/post/46782639

Goatcounter is so minimal that it takes a minute to wrap the brain around, but the good news is that it tracks all access anonymously, which is all I ever wanted (and why I simply have never made real use of Matomo over the years). It is the digital equivalent of a step counter, and acts like those counting clickers they use at concerts to track number of attendants.

It is good to confirm people are actually able to access tooling. That is all I need.

Have been working on my Grafana dashboard recently and am thinking about what else I could add. So far, I have:

• CPU usage and temperature
• Memory usage
• Network usage
• Backrest daily backup status
• SMART status of drives
• CPU and memory usage of containers

Anything else that you find useful? I have a few other ideas, but am curious what others have up. Is everything on one scrollable dashboard, or do you have it organized across multiple?

My new-this-year MS-02 crashed tonight, so I'm going through journalctl -b -1 -p warning -r and I see a bunch of this repeated over and over going back for days:

Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: AER:   TLP Header: 0x34000000 0x00000052 0x00000000 0x00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:    [21] ACSViol                (First)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:   device [8086:7f44] error status/mask=00200000/00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: PCIe Bus Error: severity=Uncorrectable (Non-Fatal), type=Transaction Layer, (Receiver ID)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: AER:   TLP Header: 0x34000000 0x00000052 0x00000000 0x00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:    [21] ACSViol                (First)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:   device [8086:7f44] error status/mask=00200000/00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: PCIe Bus Error: severity=Uncorrectable (Non-Fatal), type=Transaction Layer, (Receiver ID)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: AER:   TLP Header: 0x34000000 0x00000052 0x00000000 0x00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:    [21] ACSViol                (First)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:   device [8086:7f44] error status/mask=00200000/00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: PCIe Bus Error: severity=Uncorrectable (Non-Fatal), type=Transaction Layer, (Receiver ID)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: AER:   TLP Header: 0x34000000 0x00000052 0x00000000 0x00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:    [21] ACSViol                (First)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:   device [8086:7f44] error status/mask=00200000/00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: PCIe Bus Error: severity=Uncorrectable (Non-Fatal), type=Transaction Layer, (Receiver ID)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: AER:   TLP Header: 0x34000000 0x00000052 0x00000000 0x00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:    [21] ACSViol                (First)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:   device [8086:7f44] error status/mask=00200000/00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: PCIe Bus Error: severity=Uncorrectable (Non-Fatal), type=Transaction Layer, (Receiver ID)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: AER:   TLP Header: 0x34000000 0x00000052 0x00000000 0x00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:    [21] ACSViol                (First)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:   device [8086:7f44] error status/mask=00200000/00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: PCIe Bus Error: severity=Uncorrectable (Non-Fatal), type=Transaction Layer, (Receiver ID)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: AER:   TLP Header: 0x34000000 0x00000052 0x00000000 0x00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:    [21] ACSViol                (First)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:   device [8086:7f44] error status/mask=00200000/00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: PCIe Bus Error: severity=Uncorrectable (Non-Fatal), type=Transaction Layer, (Receiver ID)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: AER:   TLP Header: 0x34000000 0x00000052 0x00000000 0x00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:    [21] ACSViol                (First)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:   device [8086:7f44] error status/mask=00200000/00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: PCIe Bus Error: severity=Uncorrectable (Non-Fatal), type=Transaction Layer, (Receiver ID)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: AER:   TLP Header: 0x34000000 0x00000052 0x00000000 0x00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:    [21] ACSViol                (First)
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4:   device [8086:7f44] error status/mask=00200000/00000000
Oct 12 23:59:50 proxmox-06 kernel: pcieport 0000:80:1b.4: PCIe Bus Error: severity=Uncorrectable (Non-Fatal), type=Transaction Layer, (Receiver ID)
Oct 12 23:59:49 proxmox-06 kernel: pcieport 0000:80:1b.4: AER:   TLP Header: 0x34000000 0x00000052 0x00000000 0x00000000
Oct 12 23:59:49 proxmox-06 kernel: pcieport 0000:80:1b.4:    [21] ACSViol                (First)
Oct 12 23:59:49 proxmox-06 kernel: pcieport 0000:80:1b.4:    [20] UnsupReq              
Oct 12 23:59:49 proxmox-06 kernel: pcieport 0000:80:1b.4:   device [8086:7f44] error status/mask=00300000/00000000
Oct 12 23:59:49 proxmox-06 kernel: pcieport 0000:80:1b.4: PCIe Bus Error: severity=Uncorrectable (Non-Fatal), type=Transaction Layer, (Requester ID)
Oct 12 23:59:49 proxmox-06 kernel: aer_ratelimit: 119 callbacks suppressed
Oct 12 23:59:49 proxmox-06 kernel: pcieport 0000:80:1b.4:    [15] HeaderOF              
Oct 12 23:59:49 proxmox-06 kernel: pcieport 0000:80:1b.4:   device [8086:7f44] error status/mask=00008000/00002000
Oct 12 23:59:49 proxmox-06 kernel: pcieport 0000:80:1b.4: PCIe Bus Error: severity=Correctable, type=Transaction Layer, (Receiver ID)
Oct 12 23:59:49 proxmox-06 kernel: aer_ratelimit: 119 callbacks suppressed

Does this mean one of the SSDs is failing already? I have 1 Crucial P310 4TB SSD for the main drive and another for backups.

=== START OF INFORMATION SECTION ===
Model Number:                       CT4000P310SSD8
Serial Number:                      25465454F087
Firmware Version:                   V8CR010
PCI Vendor/Subsystem ID:            0xc0a9
IEEE OUI Identifier:                0x00a075
Controller ID:                      0
NVMe Version:                       1.4
Number of Namespaces:               1
Namespace 1 Size/Capacity:          4,000,787,030,016 [4.00 TB]
Namespace 1 Formatted LBA Size:     512
Namespace 1 IEEE EUI-64:            00a075 015454f087
Local Time is:                      Tue Oct 13 00:30:43 2026 EDT
Firmware Updates (0x14):            2 Slots, no Reset required
Optional Admin Commands (0x0017):   Security Format Frmw_DL Self_Test
Optional NVM Commands (0x00d7):     Comp Wr_Unc DS_Mngmt Sav/Sel_Feat Timestmp Verify
Log Page Attributes (0x1e):         Cmd_Eff_Lg Ext_Get_Lg Telmtry_Lg Pers_Ev_Lg
Maximum Data Transfer Size:         64 Pages
Warning  Comp. Temp. Threshold:     86 Celsius
Critical Comp. Temp. Threshold:     88 Celsius
Namespace 1 Features (0x18):        No_ID_Reuse NP_Fields

Supported Power States
St Op     Max   Active     Idle   RL RT WL WT  Ent_Lat  Ex_Lat
 0 +     6.30W       -        -    0  0  0  0        0       0
 1 +     2.40W       -        -    1  1  1  1        0       0
 2 +     1.50W       -        -    2  2  2  2        0       0
 3 -   0.0300W       -        -    3  3  3  3     1500    5000
 4 -   0.0025W       -        -    4  4  4  4     5000   30000

Supported LBA Sizes (NSID 0x1)
Id Fmt  Data  Metadt  Rel_Perf
 0 +     512       0         0
 1 -    4096       0         0

=== START OF SMART DATA SECTION ===
SMART overall-health self-assessment test result: PASSED

SMART/Health Information (NVMe Log 0x02, NSID 0xffffffff)
Critical Warning:                   0x00
Temperature:                        41 Celsius
Available Spare:                    100%
Available Spare Threshold:          5%
Percentage Used:                    1%
Data Units Read:                    428,281,946 [219 TB]
Data Units Written:                 44,641,186 [22.8 TB]
Host Read Commands:                 15,033,643,064
Host Write Commands:                1,728,938,256
Controller Busy Time:               25,445
Power Cycles:                       24
Power On Hours:                     3,255
Unsafe Shutdowns:                   18
Media and Data Integrity Errors:    0
Error Information Log Entries:      0
Warning  Comp. Temperature Time:    0
Critical Comp. Temperature Time:    0
Temperature Sensor 1:               41 Celsius

Error Information (NVMe Log 0x01, 16 of 255 entries)
No Errors Logged

Self-test Log (NVMe Log 0x06, NSID 0xffffffff)
Self-test status: No self-test in progress
No Self-tests Logged

=== START OF INFORMATION SECTION ===
Model Number:                       CT4000P310SSD8
Serial Number:                      2545543AD7B7
Firmware Version:                   V8CR010
PCI Vendor/Subsystem ID:            0xc0a9
IEEE OUI Identifier:                0x00a075
Controller ID:                      0
NVMe Version:                       1.4
Number of Namespaces:               1
Namespace 1 Size/Capacity:          4,000,787,030,016 [4.00 TB]
Namespace 1 Formatted LBA Size:     512
Namespace 1 IEEE EUI-64:            00a075 01543ad7b7
Local Time is:                      Tue Oct 13 00:28:48 2026 EDT
Firmware Updates (0x14):            2 Slots, no Reset required
Optional Admin Commands (0x0017):   Security Format Frmw_DL Self_Test
Optional NVM Commands (0x00d7):     Comp Wr_Unc DS_Mngmt Sav/Sel_Feat Timestmp Verify
Log Page Attributes (0x1e):         Cmd_Eff_Lg Ext_Get_Lg Telmtry_Lg Pers_Ev_Lg
Maximum Data Transfer Size:         64 Pages
Warning  Comp. Temp. Threshold:     86 Celsius
Critical Comp. Temp. Threshold:     88 Celsius
Namespace 1 Features (0x18):        No_ID_Reuse NP_Fields

Supported Power States
St Op     Max   Active     Idle   RL RT WL WT  Ent_Lat  Ex_Lat
 0 +     6.30W       -        -    0  0  0  0        0       0
 1 +     2.40W       -        -    1  1  1  1        0       0
 2 +     1.50W       -        -    2  2  2  2        0       0
 3 -   0.0300W       -        -    3  3  3  3     1500    5000
 4 -   0.0025W       -        -    4  4  4  4     5000   30000

Supported LBA Sizes (NSID 0x1)
Id Fmt  Data  Metadt  Rel_Perf
 0 +     512       0         0
 1 -    4096       0         0

=== START OF SMART DATA SECTION ===
SMART overall-health self-assessment test result: PASSED

SMART/Health Information (NVMe Log 0x02, NSID 0xffffffff)
Critical Warning:                   0x00
Temperature:                        38 Celsius
Available Spare:                    100%
Available Spare Threshold:          5%
Percentage Used:                    6%
Data Units Read:                    2,161,355 [1.10 TB]
Data Units Written:                 154,163,444 [78.9 TB]
Host Read Commands:                 8,882,927
Host Write Commands:                610,221,348
Controller Busy Time:               2,682
Power Cycles:                       24
Power On Hours:                     3,278
Unsafe Shutdowns:                   18
Media and Data Integrity Errors:    0
Error Information Log Entries:      0
Warning  Comp. Temperature Time:    0
Critical Comp. Temperature Time:    0
Temperature Sensor 1:               38 Celsius

Error Information (NVMe Log 0x01, 16 of 255 entries)
No Errors Logged

Self-test Log (NVMe Log 0x06, NSID 0xffffffff)
Self-test status: No self-test in progress
No Self-tests Logged

So my Lenovo think center is becoming quite full this day. I already have a two Harddrive docking station with 2 Tera disk getting pretty full and the other USB port is connected to a Tera SSD.

So what are my options, other than selling one of my arm to buy one of the new 250T ?

RyanL Bitwarden Employee

Hello everyone!

Starting in the next release, the Bitwarden apps published to the various stores will be the commercially licensed builds. No action is needed, and the apps will work exactly as they do today.

Bitwarden remains committed to open source security and transparency
The GPLv3 OSS licensed version continues to be updated and published on GitHub
All current features are available in both versions
License details are on GitHub
Bitwarden remains committed to a robust, free forever plan for everyone

If you have any questions, please ask them in this thread. Thanks all!

EDIT:

Bitwarden is not going closed-source
You can still fork Bitwarden
No change to self-hosting, the licensing change affects those who are repackaging and reselling Bitwarden
The free plan is here to stay permanently

To be clear, I'm not looking to make any meaningful money off my own project (which is "just" a dashboard).

But if we want self-hosted software to become a real alternative to commercial services, we need people, especially developers, to care enough to build and maintain it.

Sure, AI is changing things. It's easier than ever to build your own software, but even with AI, I wouldn't be able to replace all the online services I use. And I doubt most people would either. Building something is one thing, maintaining it over the years is another. It's still a serious amount of free time to dedicate to something.

What actually got me thinking about this was Heaper, a self-hosted cloud alternative that uses CRDTs. I'd really like to see it succeed because it's doing something genuinely different from what's already out there.

And I think those are exactly the kinds of projects we should be supporting. Software that offers real value in everyday use and gives people a reason to move away from commercial services.

But relying on donations clearly isn't enough to sustain development for most projects. Providing a hosted version does conflict with the main idea of a service being self-hosted.

Then there are apps like Plex, which keep raising their subscription prices. At some point, you have to wonder what the financial benefit of self-hosting even is if every service comes with another subscription.

I'm not saying self-hosting always needs to be cheaper. I'm fine with paying for good software, especially if it supports the people developing it. But part of the appeal of self-hosting is having control over your own services without having to worry about a growing list of recurring bills.

Larger open-source projects can sometimes fund development through business licenses or public funding, but that doesn't necessarily work for smaller projects.

I don't really have a solution here. I just think we need better ways to financially support the developers building software we actually want to use, without turning self-hosting into another collection of subscriptions.

What do you think would be a reasonable way to fund these projects?

Hi, folks! I've learned a lot these past 8-9 months in self-hosting, but I'm not sure what's going on with my reverse proxy setup. At this point, I'm only running Nginx Proxy Manager, Jellyfin, and Komga, separated from my home network via VLANs and firewall rules. My home network is 192.168.1.X and hosted services are on 192.168.10.X. Yet when I look at access logs for Jellyfin or Komga, both are reporting access from 192.168.65.1 when accessed from outside my home network. I don't have a 65 subnet, so this is strange. The reverse proxy is run on a mini PC at .10.201, and Jellyfin and Komga are hosted on a NAS at .10.202; all of them run via Docker containers.

The instructions for Jellyfin for reverse proxy just say to list the address for the reverse proxy, which I did using IPv4 and the domain, and various configurations of only one or the other, as well as the 192.168.65.1 address that manifested out of nowhere. I haven't observed any kind of change in IP address reporting after making changes here. I haven't begun to try to configure Komga for the reverse proxy, because I figure until I get it working for Jellyfin and understand how to do it, it probably doesn't matter; I only listed it here as evidence that two different services were reporting the same phantom IP address. I did ask for help on this issue on a Discord server a little while ago, and some of those folks suggested looking at the Docker networks. I left network settings on basically default for all three of these applications, and they all seem to generate something like a 172.17.0.X address, not the 192.168.65.1 that I'm seeing in logs.

I know there are supposed to be extra headers on network packets that these services can be aware of if they know it's going through a reverse proxy first, and I figure this is important for proper monitoring of folks accessing my hosted services, so i want to get this figured out before I start running a few more apps. Any help anyone can offer would be appreciated. A lot of times, the documentation for this stuff is written up with an assumption of more understanding than the person reading it might have. Or maybe I just glanced right by something obvious and stupid.

I wrote a thumbnail generator server. You give it a file, and it gives you back a thumbnail. Supports images, videos, music, 3D models, PDFs, ebooks, documents, spreadsheets, presentations, text, fonts, HTML, and more.

This is really only going to be useful to people writing their own apps. You wouldn’t use this as an end user.

If it’s missing any file types that could conceivably have a thumbnail generated for them, let me know. Maybe I can add that type too. I want it to basically be able to thumbnail everything. I know that’s a lofty goal, but the closer I can get the better. :)

AI Disclosure:

One of the scripts in this project is AI generated. It is disclosed here. It is the script that configures Blender and renders thumbnails for 3D models with it.

I have a well configured arr stack , i am sure of this because i used YAMS (Yet Another Media Server) to get it to work , but when i try to download using qbittorent the downloads don't go through like 90 % of the time . Most of them just end up getting stuck like in the picture .

Not all of them get stuck like that , i was able to download some albums from Lidarr , but really it's a hit and miss and most of the time it's a miss. :(

If you have an arr stack , have you faced this kind of problem before ? if so how did you handle it ?

EDIT:

Thanks guys , i just made the changes that were suggested in the comments and there was a significant improvement!

Hi all. I've been wondering about account separations while reviewing my SSO stuff. Do you all create a separate account for administrative tasks for your services? Or do you just give your normal account admin rights?

In my opinion, a different account is nice to separate impactful admin work (like provisioning users and groups) from general usage. Having this UX "barrier" also somewhat prevents doing dumb things like accidentally deactivating other people's accounts. But the downside is it can be quite inconvenient, especially if I need to administer or debug something quickly. I'm also not sure if my homelab expands, should I share the admin user credentials with other human admins or not.

What's the best topology to use? Or is there some other "accounts structure" that I've missed? I'm looking to replicate the same mapping between my identity provider and all dependent services as well (so that if an account is marked as admin on the IDP, it'll also be the admin for Forgejo or my Matrix server). So it'd be nice to settle on a plan right now.

Thanks for any responses!

Any idea why Lidarr can't find https://musicbrainz.org/release-group/165b34c9-6132-4632-b1f4-981f51f87235 ? It finds the other four albums but not this one.

I'm self hosting on an old laptop, and I'm a convert for life. Self-hosting is amazing. Looking for other people's weirdest examples of what they're doing as inspiration.

My example, I recently set up a grammar script, where I have a couple 8b LLMs and an html landing page. I upload a doc and it corrects grammar and highlights changes it made, or just proofreads and I make changes manually. I can upload a novel before bed, and have suggestions based on specific writing styles in the morning. All local, perfectly suited for my own work.