1
312
submitted 2 years ago* (last edited 2 years ago) by [email protected] to c/[email protected]

Hello everyone! Mods here 😊

Tell us, what services do you selfhost? Extra points for selfhosted hardware infrastructure.

Feel free to take it as a chance to present yourself to the community!

🦎

2
43
submitted 7 hours ago by [email protected] to c/[email protected]

I went to https://selfh.st/ because someone posted a link to a github repo that had some tracking appended to the URL (?ref=selfh.st). OK your marketing worked on me I'm a mark.

I still have an aversion to this kind of tracking. Maybe considering how old-fashioned it it compared to the undetectable and nearly impossible to evade tracking methods currently deployed, that's wrong. Maybe this is just charming and quaint.

Disregarding the above, I liked the site enough to subscribe to their RSS feed https://selfh.st/rss/. Well that was pointless, as there is no content in the feed. Each entry like this:

Self-hosted news, updates, launches, and content for the week ending Friday, August 1, 2025

Continue reading on selfh.st...

I kind of expect a meaningful RSS feed these days. It sign of participating in the Libre internet.

Workaround: I have used Kill the Newsletter! (which kicks ass) to convert the email newsletter to an Atom feed which appears to work. Got the confirmation email, now need to wait for a post to be made.

What do you all think?

  1. Link tracking: yay or nay?

  2. Placeholder RSS: Rude or acceptable?

3
27
submitted 11 hours ago by [email protected] to c/[email protected]

So, for the last couple decades, I've been lucky enough to be a professional geek doing server support for what is essentially an MSP. Every few years when they cycle their servers, I get a free upgrade from the e-cycling pile. That's worked great, but the third utility price increase in the as many years has me looking to rightsize my home server.

I'm currently running a Dell 720 which was a VDI server in its previous life, meaning 384G of memory and 40 cores of Xeon E5-2680, but I'm only using 20G of memory running about a dozen Docker containers, including Jellyfin; my load average is less than 1. I've been using Debian on that server, but I'm comfortable in any distro.

Unfortunately, the iDRAC says this is running between 200 and 250 watts at base. The hardware is vastly overspec'ed and I'd like to lower my power usage, if possible, as I'm certain it's not going to get any cheaper as time passes.

I also need to retire an old W10 box running BlueIris and migrate to a Frigate Docker container before October, because I'm not buying a Windows 11 machine just for that.

So I need a sanity check for my plan, as I've been on the server-side so long that my knowledge of desktop technology is sorely lacking, and I suspect some people here are running the EliteDesk 800 as a server.

I want to pick up an HP EliteDesk 800 5g SFF with an i9-9500 or i7-9700, such as: https://www.amazon.com/HP-EliteDesk-800-G5-Desktop/dp/B0BZ9J54WK

I'm not beholden to buying from Amazon, it was just the first link I found at a reasonable price.

I've chosen the EliteDesk because of the AMT KVM, and the SFF to add 3 1/2 HDDs.

I have DIMMs I can borrow or buy to get it to 48 or 64 gigs.

I'm using less than a TB of local storage on the 720, as it uses expensive 10k SAS drives, so most storage is NFS from the NAS. As a result I'm looking at a 1TB NVME for local OS storage.

I plan to use a couple 4TB spinning rust SATA drives for Frigate storage in the new system.

Are any of the M.2 slots on the board compatible with the Coral M.2 accelerators for Frigate? Preferably the Dual Edge variety? I'm having a hard time finding what kind of slots they are. I know I can get a PCI-E adapter, but native is better.

Is the i5-9500 enough, or should I pay the extra $150 for the i7-9700?

Is the i5/i7 iGPU strong enough for Jellyfin or should I be looking for a discrete GPU?

Those of you running one, what does your power consumption look like?

Am I going about this completely wrong?

Thanks in advance for any help.

4
11
luneasea alternative (feddit.online)
submitted 13 hours ago by [email protected] to c/[email protected]

Is there a FLOSS alternative to lunasea for android? I'm aware of nzb360, but it's not FLOSS. I found ruddarr in my searchimg but the dev says android support isn't planned.

5
21
submitted 16 hours ago by [email protected] to c/[email protected]

Hello! I'm evaluating tools to track changes in:

  • Government/legal PDFs (new regulations, court rulings)
  • News sites without reliable RSS
  • Tender portals
  • Property management messages (e.g. service notices)
  • Bank terms and policy updates

Current options I've tried:
• Huginn — Powerful but requires significant setup, no unified feed • Changedetection-io — good for HTML, limited for documents

Key needs:
✓ Local processing (no cloud dependencies)
✓ Multi-page PDF support
✓ Customizable alert rules
✓ Trying to reduce manual monitoring overhead — looking for robust, offline-first approaches

What's working well for others? Especially interested in:

  1. Solutions combining OCR + text analysis
  2. Experience with local LLMs for this (NLP, not just diff)
  3. Creative workarounds you've built

(P.S. Testing a deep scraping + LLM pipeline — if results look promising, will share.)

6
40
submitted 20 hours ago by [email protected] to c/[email protected]

Hi everyone, excited to present Postiz v2.

Postiz is a social media scheduling tool supporting 23 social media channels.

It allows you to schedule posts in advance and track them in your calendar.

https://github.com/gitroomhq/postiz-app/

(Any star will be super appreciated ❤️)

What's new:

  • Completely new design - better UX / UX and finally, looks professional 😂 https://share.cleanshot.com/lvv549fY
  • Media - Request by a few members, I added media to the menu. You can manage your media from there.
  • Switched to TipTap editor - it feels much better, and outputs HTML, which allows us to easily convert the code into the respective platform, for example, Telegram supports HTML, and Discord supports Markdown.
  • New platforms - You can now schedule posts to WordPress, DEV, Medium, and Hashnode!
  • Mentions - You can use "@" to mention accounts in the editor, currently supporting: LinkedIn, X, BlueSky, and Discord.
  • Saving state: When you move between views (Month / Week / Day), it will save it, and will open it again next time.
  • N8N nodes - I have created an n8n node for easier automation - here. We have seen tons of Postiz cool automation lately, so try to look them up online :)
  • Postiz SDK - Similar to N8N, just with an SDK for Node.js - here
  • AI Features - Added many AI features, such as generating slides/videos with VEO3, also available in the API.
  • Errors in notifications - Usually, if the post failed, you would get just "error occurred"; I have now mapped many of the errors, and you will see them both in email and in the in-app notification.

In general, the system becomes a lot more stable. I added small features, such as a concurrency limit between requests on platforms, Sentry for error detection, a 'Today' button to access the current date quickly, and a cron job to re-add items to Redis in case they were removed for any reason.

As always, everything is 100% open-source :)

7
60
submitted 22 hours ago by [email protected] to c/[email protected]

hi everyone,

I was just about to self-host a Ghost blog but then was warned that my ISP might change my external IP address at any time, so I would need to pay for a static IP address.

Is that true?

(I'd not seen much about that in stuff I've looked up so far about self hosting)

8
77
submitted 1 day ago by [email protected] to c/[email protected]

Hello c/selfhosted,

GameVault is a free, self-hostable gaming platform for organizing, browsing, downloading, installing, and playing your DRM-free game files stored on your home servers. It’s a full-featured alternative to platforms like Steam, designed for users who want complete control over their infrastructure and share their gaming library with friends and family.

With GameVault, you get:

  • A native Windows client with full offline gaming support
  • A beautiful library to browse your game collection
  • Fully automated game installations
  • Game progress tracking
  • Rich metadata and cover art
  • Cloud save functionality for seamless play across devices
  • Multi-user architecture with role-based access control

Check it out here if you haven’t had a chance to set it up yet!

We’re excited to announce a major new release: The Identity Update

Why This Update Matters

Until now, GameVault used Basic Auth and supported one user per user device. This simple approach worked when the platform was just a side project for two friends.

But GameVault has grown, thousands of users, more setups, and higher expectations. This update lays the foundation for secure, scalable identity management and multi-user capabilities. We’ve shipped several great features with this release, including:

🔐 Modern Authentication & SSO Support

SSO support has been one of the oldest and most requested features on our issue tracker. Reworking the entire auth system was no small task, it took over five months to implement and test. But it’s done, marking a major step forward.

GameVault now uses OAuth 2.0 and OpenID Connect as its authentication foundation. This enables secure, modern login flows while staying flexible: traditional username and password login still works, but now runs on token-based authentication with session-based access and refresh tokens instead of basic auth.

If you want to use an identity provider, GameVault can integrate directly with providers like Keycloak, Authentik, Authelia, Google, Microsoft, Discord, or virtually any other RFC-compliant OAuth 2.0 or OIDC service.

This overhaul not only improves security and user experience, but also opens new possibilities for the platform, like web-based clients.

👥 Multi-Profile Support (GameVault+)

Need to support multiple users or connect to multiple servers on the same machine? GameVault+ now offers fully separated user profiles, each with its own server connection, game library, save data, preferences, and more. Whether you’re sharing a PC with family or housemates or just want to stay organized, profiles keep everyone’s games and progress completely separate.

💾 Installing Games Across Multiple Drives

Long overdue: GameVault now supports multiple root install directories, letting you choose where each game is installed. Whether you’re splitting your library across SSDs and HDDs or just organizing games, GameVault manages paths and indexing automatically.

How to Update

Due to the massive changes older clients and servers are not compatible with the newer infrastructure anymore, so you will probably need to update:

Thank You

Reaching so many regular users and GameVault+ subscribers is something we never imagined when we started this project. Thank you for trying it, testing it, using it and most of all, supporting it.

We still enjoy spending all our free time on this project, and as long as you keep us going, we won’t stop.

Thank you, from the bottom of our hearts,

The Phalcode Team

9
168
submitted 1 day ago* (last edited 1 day ago) by [email protected] to c/[email protected]

Hey guys, version 3.0.0 of Tasks.md just got released. This is the largest update so far and includes several new features. I'll list the most important ones below.

Tasks.md is a self-hosted, Markdown file based task management board. It's like a kanban board that uses your filesystem as a database, so you can manipulate all cards within the app or change them directly through a text editor, changing them in one place will reflect on the other one.

The latest release includes the following:

  • Added support for checkboxes;
  • Added different view modes (extended, regular, compact, tight);
  • Added due date;
  • It now uses tree structure from root path for multiple boards;
  • Syncs UI with filesystem changes done outside the app;
  • Ignores lanes and cards whose names start with dot;
  • Added copy button to code blocks;

Inspired by this blog post, I included a "This is a low maintenance project" segment in the README, which means that this was the last big update the project will receive and I'll no longer work on new features, expect for maybe some that were already previously discussed in the issues page.

If you decide to try the app, feel free to open new issues in the repo for any problem you may encounter, this release came with a lot of new stuff so there is always a chance that it introduced new bugs (but hopefully it didn't, I tested it a lot before pressing the "new release" button).

10
36
submitted 1 day ago by [email protected] to c/[email protected]

Hi everyone,

I’m just getting started in the world of selfhosting and wanted some advice.

I’m currently using a 2015 MacBook Pro (i7 with 16gb of RAM) running Sonoma as a small Jellyfin Server. I’ve got an externally powered 4TB HDD connected for media storage. It’s been going fine, and I use it to access Jellyfin on several devices across my house, I don’t have remote access set up.

I’m planning to move home in the next year and I’m thinking about long-term solutions which will allow me to self host more than just Jellyfin, so I wanted some advice. I have some experience using Linux on laptops, and I can troubleshoot networking stuff using ChatGPT. I don’t work in IT/ software but I’m a decent end-user.

Here’s what I’d like to self-host: More robust Jellyfin setup - I’d like access to my media outside of my home, so probably using tailscale or similar. An NAS with a cloud storage solution which will eventually allow me to move away from iCloud. Home security server - a small setup, I’m thinking 2 ip cameras and easy access to footage on my phone. I want to ditch ring for multiple reasons / don’t want to rely on a subscription service. A pi-hole to block adds across my home network.

Moving home is going to be expensive so I’m not trying to spend a tonne of money. Which leads me to ask. What kind of setup would you guys recommend I invest in? I can spend about €500-600. Ideally, I’d like to be at a point where everything I run is open source. I assume I can’t expect to scale up using my 2015 MacBook Pro? Is is possible to install something like proxmox on these machines? my other option would be a small mini pc, perhaps running proxmox. Do I need to buy a dedicated NAS in your opinion? I have 10tb in external hdds that could serve as a makeshift setup.

Any advice would be greatly appreciated. Thanks

11
5
submitted 20 hours ago by [email protected] to c/[email protected]

I host my own Discord Red bot for a (relatively) small discord server (~50 people total, ~20 who actively participate, ~10 who login weekly/daily).

I currently use Redbot as a glorified music bot, but I know it is capable of much, much more. Are there any suggestions on cogs I should install for it for our server?

12
121
submitted 1 day ago by [email protected] to c/[email protected]

What’s up, what’s down and what are you not sure about?

Let us know what you set up lately, what kind of problems you currently think about or are running into, what new device you added to your homelab or what interesting service or article you found.

Personally I'm finally reaping the fruits of my labour and enjoy my stable homelab without doing much. One node went down recently and the other took over until I restarted so I was not in a hurry to fix things. Enjoying family time and only running updates that aren't automated (yet). I'm about to dig a bit deeper into logging, probably setting up central log collection like Loki at some point, but not yet.

13
31
submitted 1 day ago* (last edited 1 day ago) by [email protected] to c/[email protected]

I tried to find a more applicable community to post this to but didn't find anything.

I recently set up a NAS/server on a Raspberry Pi 5 running Raspberry Pi OS (see my last post) and since then I've got everything installed into a 3D printed enclosure and I've got RAID set up (ZFS RAIDz1). Prior to setting up RAID, I could transfer files to/from the NAS at around 200MB/s, but now that RAID is seemingly working things are transferring at around 28-30 MB/s. I did a couple searches and found someone suggesting to disable sync ($ sudo zfs set sync=disabled zfspool). I tried that and it doesn't seem to have had any effect. Any suggestions are welcome but keep in mind that I barely know what I'm doing.

Edit: When I look at the SATA hat, the LEDs indicate that the drives are being written to for less than half a second and then there's a break of about 4 seconds where there's no writing going on.

14
-29
submitted 14 hours ago by [email protected] to c/[email protected]

Manifest now supports nested groups: reusable sets of properties you can include in your entities.

You can define them as multiple (like testimonials, FAQs, sliders) or not (like a hero section or a call-to-action).

Useful for building clean and DRY data structures in your content models.

📘 Docs: https://manifest.build/docs/groups 🛠 GitHub: https://github.com/mnfst/manifest

Let me know what you'd build with it!

15
125
submitted 2 days ago by [email protected] to c/[email protected]
16
25
submitted 1 day ago* (last edited 1 day ago) by [email protected] to c/[email protected]

I'm having trouble automating the restic backup using systemd.

I followed the linked guide, which seems pretty straightforward. Backup works fine when I run it manually, but when I try to run systemctl status restic-backup.service I get the following error: Fatal: parsing repository location failed: s3: bucket name not found

I have triple-checked the file paths, and also added PassEnvironment=AWS_ACCESS_KEY_ID AWS_SECRET_ACCESS_KEY RESTIC_REPOSITORY RESTIC_PASSWORD_FILE B2_ACCOUNT_ID B2_ACCOUNT_KEY to the restic-backup.service file, which I saw used elsewhere. This is my first time using systemd, so I'm not sure if I am overlooking an obvious step or what.

OS: Xubuntu

restic: installed locally following these steps

backup: Backblaze B2 bucket with s3

17
149
submitted 2 days ago by [email protected] to c/[email protected]

It looks like a massive update. Here are some excerpts, with more changes listed in the link above. I'm especially excited about the companion app:

"Calibre-Web Automated is extremely lucky and privileged to have such a large and vibrant community of people who support, enjoy and contribute to the project. The bulk of the new features and bugfixes this update brings were created by the best and brightest of our community and I want to celebrate that and their work here in the hope that our community only continues to grow!" - CrocodileStick

Major Changes 🚀

NEW: Split Library Support 💞

  • As promised, all CWA features are now fully compatible with Calibre-Web's Split Library Functionality
  • This enables users to store their Calibre Library in a a separate location to their metadata.db file
  • To configure this, in the Admin Panel, navigate to Edit Calibre Database Configuration -> Separate Book Files from Library
    • The use of Network Shares (especially NFS) with this functionality is discouraged as they sometimes don't play well with CW & CWA's SQLite3 heavy stack. Many users use network shares without issues but there aren't enough resources to support those who can't get it working on their own

NEW: Hardcover API Integration 💜📖

  • Hardcover is now officially not only available as a Metadata Provider, but using Hardcover's API, Kobo Shelves & Read Progress can now also be synced to a user's Hardcover account!

  • Current workflow is scraping a book by title, you can then use the resulting hardcover-id identifier to search for editions of that book, by searching "hardcover-id:". Edition results are filtered to exclude Audiobooks editions, and sorted by ebook then physical book.

  • If a shelf in CWA is selected for Kobo sync, when a book with id and edition identifiers is added to the shelf, it will also be added to Hardcovers want to read list. As the book is read on the Kobo device progress is synced to Hardcover as well when pushed to CWA.

  • To use Hardcover as a Metadata Provider, simply provided a Hardcover API Token in your docker-compose under the HARDCOVER_TOKEN Environment Variable

    • To enable Kobo sync, a Hardcover API Token must be provided for each user in each user's respective Profile Page
  • Thanks to demitrix! <3

NEW: Greatly Improved Metadata Selection UI 🎨

  • Demitrix was really on a roll the last couple of months and also contributed some really cool functionality to the Metadata Selection UI

CWA New Metadata Fetch UI - V3.1.0

  • Much more Elegant & Readable UI, both on Mobile & on Desktop

    • Improved CSS for the Fetch Metadata interface—making it easier and clearer for you to review and select metadata sources.
  • Individually Selectable Elements

    • Say goodbye to having to having all of your book's metadata overwritten simply becuasse you wanted a better looking cover!
    • As of V3.1.0, all metadata elements can be individually updated from multiple sources instead of the only option being to take everything for a single source!
  • Visual Quality Comparison Between the Cover Your Book Already Those Available from Metadata Providers

    • Looking for a specific cover but not sure if the image file is low quality or not? As of V3.1.0, the resolution of cover images is now displayed on the bottom right corner of the preview, the background of which is colour-coded to indicate whether the available cover is of greater, lower or equal quality to the one already attached to the ebook!
  • Thanks to demitrix for their contributions to this! <3

NEW: KoReader Sync Functionality! 📚🗘

  • CWA now includes built-in KOReader syncing functionality, providing a modern alternative to traditional KOReader sync servers!
  • Universal KOReader Syncer: Works across all KOReader-compatible devices, storing sync data in a readable format for future CWA features
  • Modern Authentication: Uses RFC 7617 compliant header-based authentication instead of legacy MD5 hashing for enhanced security
  • CWA Integration: Leverages your existing CWA user accounts and permissions - no additional server setup required
  • Easy Installation: Plugin and setup instructions are available directly from your CWA instance at /kosync
  • Provided by sirwolfgang! <3

NEW: Support for the Latest Versions of Calibre, even on devices with older Kernels! 🆕🎉

  • ABI tag from the extracted libQt6* files removed to allow them to be used with older kernels
  • Adds binutils to install strip for calibre-included Dockerfile. strip libQt6*.so files of the ABI tag so that they can work with older kernels (harmless for newer kernels). These libraries appear to still contain fallbacks for any missing syscalls that calibre might use. add .gitattributes to enforce LF checkout on .sh files (useful for those who build on windows)
  • Thanks to these changes, CWA now has much greater compatibility with a much wider range of devices & is able to keep up to date with the latest Calibre Releases! 🎉
  • Provided by FennyFatal <3

NEW: Calibre Plugin Support (WIP) 🔌

  • Users can now install Calibre plugins such as DeDRM
  • The feature is still a work in progress but users with existing Calibre instances can simply bind their existing Calibre plugins folder to /config/.config/calibre/plugins in their docker-compose file

NEW: Bulk Add Books to Shelves 📚📚📚

Contributed by netvyper, you can now select multiple books from the book list page and add them to a shelf in one go!

  • New "Add to Shelf" button in bulk actions on the book list.
  • Modal dialog lets you pick your shelf.
  • Backend checks for permissions, duplicates, and provides clear success/error feedback.

NEW: Better Docs Cometh - The Birth of the CWA Wiki 📜

  • The documentation for CWA while for many enough, could really be better in helping as many users find the answers and information they need as quickly as possible
  • Therefore We have started work on the CWA Wiki to strive towards this goal!
  • While still very much a work in progress, submissions for pages, edits ect. are open to the community so if you stumble across something that seems wrong, missing or outdated, please jump in and change it if you can or let us know if you're not sure :)

Affliated Projects 👬

  • In the spirit of community, I also wanted to give a shout out to some really great affiliate projects made by members of our community!
  • As well as being featured here in the release, affiliated projects will now also be prominently feature on the CWA GitHub page to drive as much traffic & enthusiasm to them as possible
  • If you've had an idea for a companion project for CWA, or want to get involved in helping improve CWA and/or it's affiliated projects, please just do so! We're all open-source here so you don't need anyone's permission, just go for it! :)

Calibre-Web Companion

  • Built with Flutter and using Material You, Calibre Web Companion is an unofficial companion application for Calibre Web & Calibre Web Automated that allows you to browse your book collection and download books directly on your device, providing a much more modern, mobile-friendly UX than either service can currently provide on its own

Calibre Web Companion Preview


Calibre-Web Automated Book Downloader

  • An intuitive web interface for searching and requesting book downloads, designed to work seamlessly with Calibre-Web-Automated. This project streamlines the process of downloading books and preparing them for integration into your Calibre library

Supporting the Project ❤️

If you are in a position to, donations no matter how small are really appreciated & really help to keep the project going. Currently all money that has been and will be received is going towards a Kobo device so I can finally help out with the development & testing of CWA's KoSync & Kobo specific features :)

18
36
submitted 2 days ago by [email protected] to c/[email protected]

I'm looking at some CWWK, topton, and oaknode boards online for an upcoming build. I'm throwing proxmox and OPNsense on this. There's a ryzen 8845HS board I'm curious about but there's also some intel boards I could drop an i5-14600T used CPU into that could work well too. Either way I would have an intel ARC GPU in the PCI slot for media decode/encode and a coral TPU in the E-key M2 slot for frigate object recognition.

But I get conflicting info online about these boards being a waste of time and money. I see things about them burning out, or having weird BIOS bugs that never get fixed. On the other hand, NAScompares seems to like these boards. Are these something I should avoid?

19
205
submitted 3 days ago by [email protected] to c/[email protected]

I don't usually post, but thought I'd share.

I rebuilt my homelab with OpenTofu. Now my entire setup, from containers to networking, lives in a Git repo.

The best part is that new services get published automatically. I just set a flag in the code, and it builds the Caddy proxy or Cloudflare tunnel for me. No more manual config editing.

Here's my quick write-up on it: https://yuris.dev/blog/homelab-opentofu

And the code is all public if you want to see how it works: https://github.com/yurisasc/homelab

Hope this is interesting to someone. Happy to answer any questions if you have them. Curious to hear if anyone else has gone down this particular rabbit hole with IaC for their Docker stack.

20
27
submitted 2 days ago* (last edited 7 hours ago) by [email protected] to c/[email protected]

With Lidarr being not very functional due to the Unable to communicate with LidarrAPI - Lidarr API "Internal Server Error" 500 | Invalid response received from LidarrAPI | HTTP Request Timeout · Issue #5498 · Lidarr/Lidarr I have been thinking about getting rid of it altogether. I have only started using it recently and don't like it.

What I use Lidarr for:

  • Find metadata for music
    • organize files in a consistent way base on metadata
    • obtain album art
    • create .nfo or other files
  • Identify desired music and instruct download utility to get it (this is optional for me--- I can handle myself if needed)
  • Do the above via a web interface which can be browsed nicely

I don't like about Lidarr:

  • The not-really-open-source nature of it, e.g. this current problem, where you are reliant on their external server to run your own home server. I feel this might be a more pervasive issue in the Arrs but not sure of all the implications
  • How unsupported it is to include work that the lidarr servers don't know about. There will never be a metadata database which includes all music. There is just too much music in the world!
  • no audiobook/podcast support

I also have Jellyfin going for the actual serving/streaming of the music. Am not sure if it is able to fully manage the metadata and files?

Lots of options in the awesome-selfhosted list.

I could use a linux desktop app if it was better than a selfhosted server.

Thoughts?


UPDATE after 2 days and 16 total comments on the thread

As suggested by many people, I gave MusicBrainz Picard a try. It is actually quite straight forward functionality-wise. You do have to babysit it for sure, but it gets fairly close a lot of the time.

It would be very much improved by coming with more presets for file naming. Constructing them is obtuse python stuff. Something like how Trash Guides gives you naming schemes that account for many possibilities. No reason the user should need to do all that on their own from scratch.

Being native linux applications is a big plus, it is smooth to run. Would be nice to have some workflow aides like keyboard shortcuts available.

21
71
submitted 3 days ago by [email protected] to c/[email protected]
22
18
submitted 3 days ago* (last edited 3 days ago) by [email protected] to c/[email protected]

I’ve been working on adding security headers to my reverse proxy and so far I believe to have gotten most of them except for Content Security Policies, I honestly can’t find a simplified way to apply a CSP to 20+ docker applications and hope folks of Lemmy know the best way to go about this.

I want to note that I never worked with headers in the past, I tried interpreting the Traefik documentation and Mozilla documentation as well as a bunch of random YT videos but can’t seem to get it right.

    headers:
      headers:
        customRequestHeaders:
          X-Forwarded-Proto: https
        accessControlAllowMethods:
          - GET
          - OPTIONS
          - PUT
        accessControlMaxAge: 100
        hostsProxyHeaders:
          - "X-Forwarded-Host"
        stsSeconds: 31536000
        stsIncludeSubdomains: true
        stsPreload: true
        forceSTSHeader: true # This is a good thing but it can be tricky. Enable after everything works.
        customFrameOptionsValue: SAMEORIGIN # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
        contentTypeNosniff: true
        browserXssFilter: true
        contentSecurityPolicy: ""
        referrerPolicy: "same-origin"
        permissionsPolicy: "camera=(), microphone=(), geolocation=(), usb=()"
        customResponseHeaders:
          X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex," # disable search engines from indexing home server
          server: "traefik" 
23
53
submitted 4 days ago by [email protected] to c/[email protected]

Hello. Does anyone here use Zabbix to monitor their self-hosted environment? If so, what architecture do you have, and what does your deployment look like?

24
64
submitted 4 days ago* (last edited 4 days ago) by [email protected] to c/[email protected]

How many folks already self-host UniFi on their own hardware vs native consoles?

Related Discussion:

25
34
submitted 4 days ago by [email protected] to c/[email protected]
view more: next ›

Selfhosted

50128 readers
566 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS