I don‘t know if this is the right place to ask, but is this an OK build for a first start in selfhosting? Is there anything obvious I could improve? I‘d mainly run Nextcloud, Immich, some Docker containers and smaller web applications and cronjobs.

sorry for the strange request. just want to test if things (jellyfin media) load okay. As anyone knows upspeed on my end doesn't mean play theirs.

Ping me if your willing to test, thanks a lot!

• Fixed issues in the RUDP library: memory leaks when using shutdownHook, deadlocks, handling of corrupted UDP packets, and many other issues that were identified during testing.
• Added the display of the connection protocol to the peer list.
• Added an experimental build that compiles a .jar file into an executable using native-image in GraalVM. For now, this is for the headless version of the application on Linux x86_64. To avoid running Lanemu as root, you also need to do

sudo setcap cap_net_admin=eip Lanemu-headless

• Updated dependencies.

[AIP] Disclosure: https://github.com/Supernova3339/changerawr/blob/master/AI-DECLARATION.md

Hello c/selfhosted! I'm Nova (known as Supernova3339 online) and was told to post here by my friend fccview. Admittedly, I have made this post before (apologies for not noticing the rule) and hope my second attempt will be much more favorable for all of you. I'm just facing constant rejection and hate on Reddit, it's not like it used to be anymore unfortunately, and I'm hoping you’re willing to give me a chance :)

You can find Changerawr's source code here
With that out of the way, let's get started with the release notes!

Features

• Extensions – Extend the functionality of Changerawr's beloved Markdown editor. Comes with four extensions installable from the get-go thanks to the official Changerawr Extension Store! If you'd like to make your own, download the official Changerawr CLI!
• Spellchecker – Adds Spellchecker functionality to the editor via integrating with the LanguageTool API! You can configure all related functionality in system configuration. This feature is disabled by default
• Editor History – Provides a git-like editor history for your changelog entries! You can make them memorable as well by assigning icons, titles, and color!
• RSS Feed Extension – Full control over RSS feed content, layout, and styling!
• Maintenance Mode – Put any public changelog into maintenance mode. You can also set your own message
• More Project Personality – You can now set an accent color and icon that will be used throughout the application to identify a project!

Improvements

• Moving some functionality to local AI – Tagging with AI has been moved to a brand-new Tag AI service that runs alongside Changerawr. Also introduces some improvement to the tag selector itself with a redesigned UI. Please note that the model has training, it is, however, fully local and transparent and will never leave your device!
• Request System Enhancements – You can now attach comments to a request as well as request changes! Updated the design of the staff-side requests page as well
• API Page Redesign - Redesigned the API page to make better usage of screen-space and improved accessibility
• Better mobile support – Improved mobile support by separating the project and main sidebar
• Overhauled API Documentation – Improved API documentation generation to be easier to consume and understand
• Administration UI Spacing – Improved screen-space usage and cut out unnecessary clutter. Also added some badges to the sidebar that show up if you have pending actions for certain pages
• Import Tool Rewrite – Improved the import tool to support more options, platforms, and ways of importing. I'll try to add to the next release where you can fully export ALL of your Changerawr instance's data! I honestly hate vendor lock-in, you should be able to choose your software and not be forced to keep using it.
• Content Editor Improvements – Improved mobile support in the content editor, the renderer, as well as a lot of internal components to provide an overall better user experience. (v2.0.0 of Changerawr Universal Markdown)
• Slight Settings Redesign for Projects – Made some slight improvements to the UI, as well as adding more deletion controls and hinting at an upcoming feature

Bug Fixes

• Bug Fix Extravaganza – Fixed a bunch of bugs in this release, way too many I can't remember all of them.
• Fixed development-leaving of false-secure in project email configuration – No matter what you set, it would always send as unsecure due to hardcoding false instead of respecting user-input

Other

• Dependency Updates – Standard update of dependencies, npm audit, the usual maintenance
• Rewrite of a Secret - Rewrote a secret completely to be a much better experience. Also added another one, best of luck in finding it! I will most likely redo the sprite-sheet in 1.0.8/1.0.9 to better fit Changerawr. If you'd like to make it, please reach out!

I aim for a Changerawr release every month or so due to my unavailability with work and other projects. The goal is to ship one major feature per-release until I'm at a point where I can focus on smaller, generalized improvements. Apologies for such a late release, I hope all the effort is worth it! :D

What is Changerawr?

Changerawr is changelog management software. Changerawr lets you write down what you changed, then share those changes with people. You write entries about updates you made, and Changerawr gives you ways to display them - like widgets for your website, public pages people can visit, or APIs to use however you want.

Have a rawrsome day!

If you aren't able to click the link, copy-paste the below URL:

https://github.com/Supernova3339/changerawr

If your looking for screenshots, you can find them here - as well as a rotating gallery on the project README!

https://github.com/Supernova3339/changerawr/tree/master/screenshots

Just wanted to share this Youtube video (Invidious link here) that explains how to configure Openwrt VLANs for your Wifi network! I was struggling for hours today trying to configure VLANs on my Openwrt AP when I found an old Reddit thread linking to this guy's channel!

He seems to have a whole series on Openwrt, so if you need a complete beginner guide he sounds great!

Hi good people... just looking for some feedback ...

I have a couple of Raspberry Pi 3 with audio amp outputs (one has a touchscreen as well).

They're currently running Volumio (v2) which we can control remotely with our phones, but that software is old, insecure, and could really do with an update...

Volumio (v4) doesn't inspire me much, plus, it's good to check out the alternatives.

So, I'm looking at replacing the local-audio playback with perhaps Moode ... or maybe piCorePlayer and perhaps adding Navidrome for remote access??

I'd need to be able to play radio streams too, with a sleep timer / wakeup function, so not sure if that's a deal breaker (it's hard to find these features on their websites)

Any alternatives that others can suggest (rAudio?) or other feedback?

Or am I ahead of the curve and I have found the Best Solution™️?

TIA

Original post here [redlib link].

Written by deluan

The next release normalizes every ID in the database into a single format. It runs a one-time migration on first start. The PR with this change will be merged this weekend: https://github.com/navidrome/navidrome/pull/5824

If you run develop or auto-update, this lands soon (this weekend) and without warning. Make a backup of navidrome.db now. The migration is one-way, so rolling back (if needed) means restoring that backup.

The short version:

• Takes ~30s to ~1m20s on my 96k-track library (QNAP Celeron). Scales with library size.
• Everyone gets logged out once. Web UI and clients using the Navidrome API need to log in again. Subsonic clients authenticate per request, so they are unaffected.
• Song IDs change, album and artist IDs do not. Clients that cache song IDs (offline downloads, cached playlists) may need a re-sync.
• Cover art gets re-fetched, so the first browse after upgrading is slower.
• Share links keep working.
• Nothing is lost: favorites, ratings, play counts, bookmarks, play queues, scrobble history and Last.fm / ListenBrainz links all survive. No rescan needed.
• One manual fix: .nsp smart playlists using inPlaylist or notInPlaylist keep the old playlist ID on disk and need updating by hand.

Full write-up: https://gist.github.com/deluan/917ebc243c8b486101de857ffae6739b

If you can, please test it with your favourite client once it is merged, and reply here (or on our Discord) if anything looks off.

EDIT: For app/client developers: I'll merge the topSongsByArtistId PR at the same time as this ID migration. This means that you'll be able to detect if a server is migrated by checking the getOpenSubsonicExtensions response and looking for the topSongsByArtistId extension.

After years of breaking things, I think I'm finally at a point where I'm genuinely proud of my setup -so naturally, I have to share it with you all.

This is my single-server do-everything box. The whole point was to kick as many big-tech cloud services out of my life as possible. Photos, passwords, code, chat, even ML -all running in my closet/corner.

The guts:

• Ryzen 7 3800X (8 cores, 16 threads)
• 48GB of RAM (Channel A: 16GB+8GB, Channel B: 16GB+8GB | still dual channel with stock timings and clocks.)
• RTX 3050 8GB (handles GPU-accelerated processing with GPU passthrough to said LXC's)
• A couple of storage pools (Fast-Thin-LVM (Nvme) for stuff that needs speed, TB-Thin (Sata) for the bulk)
• Proxmox 9.2.5, kernel 7.0.14

Nothing crazy by today's standards, but honestly? It handles everything I throw at it without breaking a sweat.

The services:

Everything runs in LXC containers. If a service needs Docker, I run Docker inside the LXC - so each service gets its own dedicated container with its own Docker install. A couple of other things (like OpenWrt and DSM) live in VMs instead.

I've got the usual suspects - Immich for photos (goodbye Google Photos), Vaultwarden for passwords, and Matrix Synapse for chat. Networking side is Nginx Proxy Manager, WireGuard, Pi-hole, and OpenWrt routing traffic as well as DDNS-Updater to keep my domain up to date. Also running Gitea for my little coding projects, Kiwix for offline Wikipedia (because why not), Trilium for my scattered notes, homarr as the dashboard and of course lemmy, your reading this on it haha.

On the heavier side, I've got Ollama + Open WebUI running locally with GPU acceleration - the 3050 gets the job done.

Snapotter is in there too - it's an open-source, self-hosted file toolkit with 200+ tools for images, video, audio, PDF, and document processing. I use it so I don't have to rely on sketchy file conversion sites anymore. Convert, compress, OCR, strip metadata - all happens on my own hardware, files never leave my network. The GPU helps with some of the heavier image tasks too.

And yes - I'm running DSM (Arc Loader) in a VM with PCIe passthrough for the NAS. It's a bit overkill, but I wanted proper storage virtualization with direct hardware access.

I also will not lie- the GPU sits idle most of the time, but it's nice to have the acceleration.

Why LXC + Docker instead of just Docker?

I just like having each service in its own isolated container with its own Docker daemon. It makes backups and snapshots stupidly easy in Proxmox - when I inevitably screw something up at 1 AM (and I will), rolling back takes two clicks. Plus, it keeps dependency hell contained.

Dive into the Details

If you're curious about the configs, the philosophy, or just want to see the messy reality behind the setup, head over to organic-server.org. You'll find some more of my ramblings there.

Or, if you have a specific question, I'm always happy to chat here.

edit: I also forgot to mention I have degoog running. oops.

• Immich always asks for confirmation when deleting an image on android. How can I disable that behavior?
• why is there no delete button for images/videos that are not yet uploaded? It's annoyng to upload a huge video just to delete it. Why does the UI change dependent on the local/server status?

OS: grapheneos

I've been self hosting a few services on a raspberry pi-based NAS and decided I was ready to up my game. I got on eBay and found myself a decent deal on an old Supermicro dual-cpu board with an EATX form factor. Now I need a case for it.

I could rack mount it, but I'd rather have it be a standalone. I also have several HDDs in a RAID for storage, and would love something that has room for those internally. I was going to get a Darkrock Classico Max, but figured out it won't fit an EATX board without removing the HDD cages.

Do I'm wondering: anyone out there have a recommendation for a good EATX case with ample HDD space? Anyone else got a setup like this you are happy with?

Hello everyone! I'm kinda curious about the services you self-host, and I would love to see what do y'all use!

I'll start, and list the services I self-host:

Thanks for reading, and thanks to anyone who participate!

Crossposted from https://thebrainbin.org/m/linux@lemmy.ml/t/1840283

Which approach do you think is better, and why?

1. FIDO2
2. HMAC-SHA1
3. OpenPGP (alternative guide)

Or do you think there is an even better way to use a hardware security token to unlock drives having LUKS full disk encryption?

I've been trying to upgrade from 10.10 to 10.11 for a while now, as the Android TV app keeps nagging me, and every attempt ended with impossibly long library scan times.

After some thorough investigation, it appeared that a Home Videos type collection causes unending scan (yet to be solved), but also that Jellyfin does a lot of writes to the config directory (either database or metadata or both). Mine's on spinning media part of a ZFS pool. I tried a few performance tuning options, such as testing the config dir with recordsize (similar to block size) of 4K, 8K, 64K, 128K and library scans fell from 30-40 minutes down to 8-13min with 4K-64K. The ZFS tuning wiki suggest 64K recordsize with LZ4 compression for SQLite workloads such as Jellyfin. That seems to work as well as 4K and 8K but likely is faster when reading thumbnails and such.

Note that upgrading to 12-rc3, which is supposed to speed up library scans did not improve scan times for me. Optimizing config/database write speed did. I cross-checked the culprit by experimenting with moving the config dir to NVMe and RAM. Both of those got the scan times down to 8-9 minutes compared to the optimized spinning media's 12-13.

So if you had upgraded (or about to) to 10.11 your library scans are (about to get) dog slow and your Jellyfin's config dir resides on spinning media, optimize its write performance for SQLite.

Hi everyone,

I am the original author of Searx. I started Hister with a similar motivation: reducing our dependence on external search engines while keeping searches and personal data under our control.

Searx is a metasearch engine that forwards queries to other search providers. Hister takes a different approach. It builds a private full text index from content you choose, then searches that index entirely on your own infrastructure.

Hister can automatically index pages through its Firefox and Chrome extensions. It can also watch local directories, import browser history and bookmarks, index individual URLs, and crawl complete documentation sites.

The feature I find most useful is offline previews. Hister stores the readable content and HTML of indexed pages locally. You can open a result in a clean and sanitized preview beside the search results without visiting the original website again.

Some other features:

1. Full text search across web pages, PDFs, docx files, Markdown, OrgMode and text files
2. Phrase searches, field filters, date filters, wildcards, negation, aliases, labels, facets, and result priorities
3. Optional semantic search using an embeddings endpoint you configure
4. Persistent website crawls
5. Imports from browser history, Linkwarden, Karakeep, Shaarli, Wallabag, and Linkding
6. Web, terminal, command line, HTTP API, and MCP interfaces
7. SQLite and PostgreSQL support, plus optional multiple user hosting

Hister cannot replace a global search engine (yet) for subjects you have never encountered because it only searches what you have indexed. My workflow is to search Hister first, then use its shortcut to fall back to traditional search when I need broader web results.

The project is free software under the AGPLv3+ license. It can be installed as a standalone binary or with Docker.

Project: https://github.com/asciimoo/hister

Website and documentation: https://hister.org/

Small read-only demo: https://demo.hister.org/

I'd appreciate feedback, questions, and suggestions as well as joining our growing community.

AI disclosure: AI assisted contributions are not strictly prohibited, but all contributions should be made by humans. More details: https://github.com/asciimoo/hister/blob/master/CONTRIBUTING.md#ai-policy

Im in the market for a NAS solution. By NAS I don't mean running Jellyfin and some homepage thing for vibes, I mean your old-style "it just provides network attached storage".

I love the Jonsbo cases but I don't want to drop as much coin as building out a NAS based on one of them entails. I'm looking for an older office/home/gaming PC or case that has room for atleatst 4 3.5" HDD’s. Something around ten years old with maybe an i5 7th+ gen CPU. I don't need hardware RAID as I prefer ZFS anyway.

Ideas?

12 years and 11 months of powered-on time for this SSD... I should definitely turn it on for another month lol

10 years powered-on time for this HDD. Who says HDDs aren't reliable? 😂

Anyone got better numbers than these?

With v0.63, audio streamer Navidrome finally got full lyrics support. I just wanted to try it out and fell flat on my face because... well, not even the official docs say anything about lyrics. Also, I'm not too familiar with how lyrics are added to songs in general. So my questions are these:

1. How can I add any lyrics to my songs so the web client will display them?
2. What formats would you recommend sticking with? (TTML, ELRC, SRT, YAML, LRC, or even TXT)
3. Is there a way to automate adding lyrics in bulk (instead of tedious manual work)?

https://github.com/Xyphyn/photon

you should know - photon selfhosted lemmy client is absolutely nice.
You can login from multiple acounts on differnet instances and effortlessly switch between them.
UI is just so much nicer than default lemmy UI.

you can run it in docker, or just use this instance: https://phtn.app/

For $600 the Minisforum MS-R1 gives you 64GB DDR5 ECC, 12 cores, dual 10GbE, a real PCIe 4.0 x8 slot, M.2 NVMe, Pi-compatible 40-pin GPIO, and actual UEFI boot. It runs Debian and Proxmox/KVM.

I've read that the CPU is trash compared to intel/amd in performance and in TDP, but you can't build a mini pc/server on intel/amd right now for thaf price with that amount of RAM.

Even just buying the 64GB ddr5 RAM as sticks will be like over 800$...

In the low budget range you can go with a Pi 5 16GB which is now ~$300. Add PSU, case, NVMe HAT, PCIe HAT and you're at $500+. It's way too expensive for what you get, compared to spending a bit more and going with minisforum.

Yeah you can get old used boxes with that amount of RAM for maybe the same price, but they'll such 200W and electricity is expensive where I live.

My current pine64 soquartz cluster over the past 5 years has been dying node by node and I can't run anything more demanding on it (like game servers or local AI). It cost me about 600$ back then with 5x blade + nvme + soquartz module, a poe switch and a case with fans. Kinda seems like a bad deal now, I'm stuck with all the docker swarm issues and the bad cpu cores and max 8gb ram per node. Oh and it draws 52W. If the minisforum 12W TDP is correct, I will save over 100$ per year on electricity costs alone.

Maybe i'm biased and trying to justify my own purchase ... let me know if I'm wrong about it being good value.

I don't really know much about M.2 slots and the different capabilities and how the key type corresponds, so I don't want to spend money on something that won't work.

There's an unused slot on the motherboard marked 'M.2 PCIe / SATA1'. I believe it's M-keyed.

Can it be used with an M+B keyed adapter like this one? Or will it physically fit, but the socket itself isn't wired to work with an ethernet adapter? Is there a command I can run to figure out the capabilities of that slot?

My plan is to use this machine as an OpenWrt router to replace the shitty Linksys one my ISP supplied, but it would obviously need a second ethernet socket. My home wifi is dealt with by a TP-Link mesh network, so I don't need it to have wifi and bluetooth. I could use the slot that the networking card is using, but if I can retain those then that would be ideal for any future flexibility I may need.

I have set up slskd in a lxd container using the binary from github

I am trying to disable logging in while I am on my local network. I have tried setting the authenticate: disabled true flag but its not working

anybody know how to do this?

I selfhost several public-facing sites, including my personal blog. I'll be needing to relocate my servers soon, though, and I wanted something more "proper" to display in their place while the servers are offline.

I won't repeat the whole post here (see link), but I ultimately set up a CF worker that I can enable with the flip of a switch whenever my server will be down.

It's a temporary, hosted solution to a common self-hosting problem, so I think it still fits here... but no hard feelings if mods decide otherwise.

Hello everyone! Daniel here, and I’m back with a new Linkwarden release across web and mobile.

For those who are wondering, Linkwarden is an open-source collaborative bookmarking tool that keeps permanent snapshot of the content of the links you save, so you can still access them even if the original content is no longer available. Linkwarden is available as a Cloud offering, or you can get the source code on GitHub and self-host it on your own server with no strings attached. If you find it useful, consider starring the repo so others can discover it too!

So let’s get into it.

What's new in mobile:

• Support for self-signed certificates and custom request headers: Android now accepts self-signed certificates, and you can add custom request headers to the app's requests. This makes the app usable with instances behind a reverse proxy or auth layer like Authelia or Cloudflare Access.
• Re-preserve link formats: You can now re-generate a link's preserved formats (screenshot, PDF, readable view) from the mobile app, useful if the original preservation failed or the page has changed since.
• Change link's banner: You can now set a custom banner image for a link when editing it.
• Access more account options in Settings: Settings now has a "More Account Settings" option that opens your full account settings inside the app, using your existing session.

(Android is out, iOS is still in review and it should be out later today.)

What's new in web:

• Refreshed, more modern design: The top navbar is removed and its functionality moved into the sidebar, plus a number of smaller UX fixes. 
• New search modal with recent search history: Press ⌘K (or Ctrl+K) anywhere to open a search modal. It also keeps your recent searches stored locally in the browser. 
• New "System" theme option: The theme can now follow your OS light/dark preference instead of being set manually. 
• PNG support for link banners: Link banners now accept PNG uploads in addition to JPEG.

There’s more…

As always, there's a long tail of smaller improvements across the web and the mobile app.

Full Changelog: https://github.com/linkwarden/linkwarden/compare/v2.15.1...v2.16.0

Thanks!

Thanks to everyone using Linkwarden, reporting bugs, suggesting improvements, contributing to the project, responsibly disclosing security issues, and supporting its development. Your contributions genuinely shape every release. 💙

If you'd like to try Linkwarden without dealing with server setup and maintenance, our Cloud offering is the easiest way to get started.

Hope you enjoy the latest updates!