Self Hosted - Self-hosting your services.

TL;DR:

Wondering if I should switch my #RaspberryPi OS from #Stormux, based on #ArchLinuxARM, to #HomeAssistantOS. I mostly work with it over SSH anyway and this might allow me to do more with it. What do others who #SelfHost think?#SelfHosting #SelfHosted #Linux @selfhost @selfhosting @selfhosted

I'm curious to hear what others are #SelfHosting! Here's my current setup:

I see Ghost has a paid option but I am unaware of such an option for Mediawiki.

Hey everyone,

As the title says, what logging and/or alerting setup do you have? I've used graylog in the past, but find it a bit too complex and "heavy". I would like to something a bit more lightweight. Alternatives I've looked into:

I'm in the UK and looking to switch over to a UK host provider. Can anyone recommend IONOS for the uk? I'm considering a fairly low-spec VPS. Even with VAT, their prices will be about 3/4 of what I'm currently paying.

I’m trying to find an iOS client that lets me point to my self hosted LocalAI instance. Thanks!

It's been a while since I noticed that but I can't find the reason. I selfhost :

Hi all. Hoping someone in the #SelfHosting community can help. I'm trying to set up #Linkwarden in #Docker behind #Caddy. The service is running, but I'm unable to create a user account. This is what I see in my browser console when I try:

I found cryptpad, it seems nice. I already use NC but not for editing.

I have a VPS that I use to host a Nextcloud instance for my family. I host it there because my internet can be unreliable at times due to my rural location. I have an Unraid server at home that I use to host several services, but most file storage, for my family on our local network.

The official docker image is still at v0.11 and was last updated in 2016. It looks like maybe trunk is at 0.12, but, as far as I can tell, that a rolling release. My prosody install is too important to go with a rolling release.

On my truenas scale machine, I have a container for gluetun and one for qbittorrent (among others). Maybe a couple times a week, I notice that the VPN connection gets flakey. Qbittorrent speeds go down into the kb/s range. This promps me to carry out an annoying, manual process:

Hi everyone,I'm encountering an issue with my self-hosted setup using Caddy 2.9.1 and Authelia 4.38.19. All domains except auth.laniecarmelo.tech return a 401 Unauthorized error. Journald logs suggest issues with insecure schemes ('') instead of https or wss.

Need help with #Caddy configuration. Getting error:"Error: adapting config using caddyfile: /etc/caddy/Caddyfile:20: parsed 'header' as a site address, but it is a known directive; directives must appear in a site block"

#SelfHosted #LinkAce Bookmark Manager Running, but Unable to Check for Updates or Generate a Cron TokenHi all. Hoping someone in the #SelfHosting community can help here. I'm running LinkAce in #Docker behind non-Dockerized #Caddy and #Authelia, and most things are working, but I'm seeing "Could not check for updates" at the bottom of each page, and when I tried to generate a cron token, nothing happened except for the generate button graying out. I am seeing one or two 404 errors in my logs, but I don't know if that's causing the problem or not. I don't know much about #PHP applications.Logs2025-02-22 23:25:26,460 INFO supervisord started with pid 12025-02-22 23:25:27,465 INFO spawned: 'php-fpm' with pid 82025-02-22 23:25:27,467 INFO spawned: 'caddy' with pid 9[22-Feb-2025 23:25:27] NOTICE: [pool www] 'user' directive is ignored when FPM is not running as root[22-Feb-2025 23:25:27] NOTICE: [pool www] 'group' directive is ignored when FPM is not running as root[22-Feb-2025 23:25:27] NOTICE: fpm is running, pid 8[22-Feb-2025 23:25:27] NOTICE: ready to handle connections{"level":"info","ts":1740266727.5264525,"msg":"using config from file","file":"/etc/caddy/Caddyfile"}{"level":"info","ts":1740266727.5280282,"msg":"adapted config to JSON","adapter":"caddyfile"}{"level":"warn","ts":1740266727.5280406,"msg":"Caddyfile input is not formatted; run 'caddy fmt --overwrite' to fix inconsistencies","adapter":"caddyfile","file":"/etc/caddy/Caddyfile","line":2}{"level":"info","ts":1740266727.529092,"logger":"admin","msg":"admin endpoint started","address":"localhost:2019","enforce_origin":false,"origins":["//localhost:2019","//[::1]:2019","//127.0.0.1:2019"]}{"level":"warn","ts":1740266727.529331,"logger":"http.auto_https","msg":"server is listening only on the HTTP port, so no automatic HTTPS will be applied to this server","server_name":"srv0","http_port":80}{"level":"info","ts":1740266727.5294206,"logger":"tls.cache.maintenance","msg":"started background certificate maintenance","cache":"0x40000bab00"}{"level":"warn","ts":1740266727.530186,"logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}{"level":"warn","ts":1740266727.530195,"logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}{"level":"info","ts":1740266727.530198,"logger":"http.log","msg":"server running","name":"srv0","protocols":["h1","h2","h3"]}{"level":"info","ts":1740266727.5412574,"msg":"autosaved config (load with --resume flag)","file":"/home/www-data/.config/caddy/autosave.json"}{"level":"info","ts":1740266727.541271,"msg":"serving initial configuration"}{"level":"info","ts":1740266727.5477707,"logger":"tls","msg":"cleaning storage unit","storage":"FileStorage:/home/www-data/.local/share/caddy"}{"level":"info","ts":1740266727.5541356,"logger":"tls","msg":"finished cleaning storage units"}2025-02-22 23:25:28,555 INFO success: php-fpm entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)2025-02-22 23:25:28,555 INFO success: caddy entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)::1 - 22/Feb/2025:23:25:34 +0000 "GET /index.php" 200::1 - 22/Feb/2025:23:25:34 +0000 "GET /index.php" 404Docker Compose fileservices: # --- LinkAce linkace: image: docker.io/linkace/linkace:latest container_name: linkace restart: unless-stopped depends_on: - linkace_db ports: - "0.0.0.0:3009:80" volumes: - ./.env:/app/.env - ./backups:/app/storage/app/backups # --- Database linkace_db: image: docker.io/library/mariadb:11.5 container_name: linkace_db restart: unless-stopped command: mariadbd --character-set-server=utf8mb4 --collation-server=utf8mb4_bin environment: - MYSQL_ROOT_PASSWORD=${DB_PASSWORD} - MYSQL_USER=${DB_USERNAME} - MYSQL_PASSWORD=${DB_PASSWORD} - MYSQL_DATABASE=${DB_DATABASE} volumes: - db:/var/lib/mysql # --- Cache linkace_redis: image: docker.io/bitnami/redis:7.4 container_name: linkace_redis restart: unless-stopped environment: - REDIS_PASSWORD=${REDIS_PASSWORD}volumes: db:.env (secrets redacted)## LINKACE CONFIGURATION# The app key is generated later, please leave it like thatAPP_KEY=redactedAPP_ENV=development## Configuration of the database connection## Attention: Those settings are configured during the web setup, please do not modify them now.# Set the database driver (mysql, pgsql, sqlsrv, sqlite)DB_CONNECTION=mysql# Set the host of your database hereDB_HOST=linkace_db# Set the port of your database hereDB_PORT=3306# Set the database name hereDB_DATABASE=linkace# Set both username and password of the user accessing the databaseDB_USERNAME=linkace# Wrap your password into quotes (") if it contains special charactersDB_PASSWORD=redacted## Redis cache configuration# Set the Redis connection here if you want to use itREDIS_HOST=linkace_redisREDIS_PASSWORD=redactedREDIS_PORT=6379APP_DEBUG=true# SSO configurationSSO_ENABLED=trueSSO_OIDC_ENABLED=trueSSO_REGISTRATION_ENABLED=trueREGULAR_LOGIN_DISABLED=trueSSO_OIDC_BASE_URL=https://auth.laniecarmelo.tech/ # Your Authelia base URLSSO_OIDC_CLIENT_ID=linkaceSSO_OIDC_CLIENT_SECRET='redacted'SSO_OIDC_SCOPES=openid,profile,emailCaddyfile snippet{ email [email protected] debug acme_dns cloudflare redacted http_port 80 https_port 443 admin :2019 { origins 127.0.0.1:2019 0.0.0.0:2019 stormux:2019 caddy.laniecarmelo.tech }}(logconfig) { log { output stdout format json }}(auth_headers) { header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"}(proxy_config) { header_up Host {http.request.host} header_up X-Real-IP {http.request.remote} header_up X-Forwarded-User {http.auth.user.id} # Pass user ID header_up X-Forwarded-Email {http.auth.user.email} # Pass email}(authelia_middleware) { forward_auth localhost:9091 { uri /api/verify?rd=https://auth.laniecarmelo.tech copy_headers Remote-User Remote-Email Remote-Groups Authorization }}bookmarks.laniecarmelo.tech { route { import authelia_middleware reverse_proxy localhost:3009 { # Directly proxy to LinkAce's web server import proxy_config } } import logconfig import auth_headers}Authelia config snippet - domain: "*.laniecarmelo.tech" policy: bypass networks: - 192.168.1.0/24 # Local network - 172.17.0.0/16 # Docker bridge network - 100.64.0.0/10 # Tailscale network - domain: "bookmarks.laniecarmelo.tech" resources: ["^/api.*"] policy: bypass - domain: "*.laniecarmelo.tech" policy: one_factor - client_id: linkace client_name: LinkAce bookmarking app client_secret: redacted public: false authorization_policy: one_factor scopes: [openid, groups, profile, email, offline_access] redirect_uris: - https://bookmarks.laniecarmelo.tech/auth/oidc/callback grant_types: [authorization_code] response_types: [code] response_modes: [form_post, query] userinfo_signed_response_alg: none consent_mode: explicit pre_configured_consent_duration: "1y"Does anyone know what might be causing this and how I can fix it?#Linux #ArchLinuxARM #Stormux #RaspberryPi #RaspberryPi500 #RPi #RPi500 #tech #technology @selfhost @selfhosted @selfhosting

Password is right in compose and config. Idk what else to do.

Within the past couple months, I saw someone's pet-project where they were cobbling together a self-hostable FOSS app/service to allow people to collaborate on travel planning. It included note taking, images, possibly some functionality around dates, and a map to drop pins and see a route (I'm not sure which backend but I would guess OSM).

#MiniFlux users, can anyone help?Hi all. I'm having some issues with MiniFlux, a #SelfHosted #RSSReader, and hoping someone can help. MiniFlux was working fine until I tried to deploy ReactFlux on the same domain as it, rss.laniecarmelo.tech, on a subpath, /reactflux. This didn't work so I removed ReactFlux. I also migrated MiniFlux from #Docker to #Pacman package, thinking it would be easier on my system. This problem, or a similar one, was occurring before I did that though.Now, rss.laniecarmelo.tech loads the MiniFlux login page, but when I login, it redirects to a blank page at rss.laniecarmelo.tech/login. I've added trusted proxies and cookie configuration to my miniflux.conf and headers to my Caddyfile, but I still have the issue.I'm using #Caddy for #ReverseProxy and #Cloudflare for #SSO. Has anyone seen anything like this before? This is on a #RaspberryPi500 running #ArchLinuxARM.I've checked MiniFlux logs, and it's getting the login requests and creating sessions. I'm not sure what's happening after that. Cloudflared and Caddy seem to be working normally.#SelFhosting #Linux #RSS #RaspberryPi #RPi #tech #technology @selfhost @selfhosted @selfhosting

Would you be able to host instances for stuff like mastodon and peertube on a raspberry pi more specifically the raspberry pi 5

Hello, I have set up a synapse homeserver with email support, but i get one of two errors, depending on what smtp port i'm using:

i created a browser-based tool for p2p file transfer where it doesnt use any backend for storage. instead, it relies on storage provided by the browser.

When I first set up my web server I don't think Caddy was really a sensible choice. It was still immature (The big "version 2" rewrite was in beta). But it's about five years from when that happened, so I decided to give Caddy a try.

🌟 Self-Hosting Journey Update! 🌟

i have paperless-ngx but found it randomly errors a ton of things and zotero is fine.

I've gone handwritten, obsidian, onenote, and now Trilium. Considering switching to something else because there is no offline mobile support.

Just wanted to share in case others encounter this dumb issue.

I've noticed that with time, my homelab is growing and with this comes complexity and time required to maintain. A big challenge is keeping on top of updates of firmware and key components (router and NAS, with pfsense and Truenas Scale respectively). What area people doing to ensure they keep on top of their homelab?

I have LMS at its latest version (8.5.3) installed on a VM. I hadnàt updated for a while and so decided to do so. To my surprise, I learnt that Logitech Media Server is now called Lyrion Music Server. Has anyone migrated from one to the other in a non-painfull way? I did a quick search. There are some guides for Synology and QNAP servers but I was after a more generic guide for pure docker. Anyone come across any?

I recently update pfBlockerNG on my pfsense box and after login in several days after I have loads of messages saying: "pfBlockerNG ASN - To utilize the ASN functionality, you must register for a free IPinfo Account. Review IP Tab for more information." Once I register are they going to start collecting data every time pfSense querries their ASN database?

I have some downtime at the moment so I'm thinking of reviving my personal blog again. I have enough experience with managed services that I'm reasonably confident to self-host. I'm aware that WordPress / Drupal / Joomla will most likely do what I want, but they're way overkill for my needs and I don't need the extra headaches.

I'm new to self-hosting and struggling to get my services accessible externally. I'm using Traefik as a reverse proxy on a Raspberry Pi 500 running Stormux (Arch Linux ARM-based). My public IP resolves correctly via Dynu DNS, and ports 80 and 8444 are forwarded in my router. I've configured Traefik to use port 8444 for HTTPS, but external connections time out. I’ve tried:• Forwarding ports 80 and 8444 in my router• Allowing ports in iptables and FirewallD• Setting my router's firewall to low security• Verifying Traefik is listening on port 8444 locally (works with curl)• Using Authelia for authentication (middleware configured in Traefik)Internal access works fine, but external access fails. Could this be an ISP block or something I’m missing? Any advice is appreciated! 🙏#SelfHosting #Traefik #RaspberryPi #DynuDNS #ReverseProxy #Networking #Help #Tech #Technology #Linux @selfhost @selfhosting @selfhosted @linux

App: https://chat.positive-intentions.com/

Hi #SelfHosted community. I've figured out a lot of my setup. I now have a new domain, laniesplace.us, just for #HomeServer stuff. It's set up through Porkbun with Dynu for #DDNS. I've now got #Traefik, #TailscaleVPN, #Linkding, #Forgejo, #Dokuwiki, Code-Server, #Portainer, #Netdata, #Watchtower, #Cockpit, #Pihole, #MiniFlux, #TheLounge, #Filebrowser, #UptimeKuma, and the #Homer dashboard service installed. I'm now trying to set up #Authelia so I can have single sign-on to my services. For some, it's working now, but I can't seem to get Linkding to work no matter what I do. This is on a #RaspberryPi 500 with 8 GB RAM and a 512 GB SD card, running #Stormux, which is based on #ArchlinuxARM. Can anyone help? I'll reply to this post with all my relevant config files in separate posts. What's happening is this: Linkding is supposed to be available at bookmarks.laniesplace.us. When I go there, I see a 401 unauthorized error and a link to sign into Authelia. Once I sign in, though, it redirects back to the page with the 401 error. I've been trying to figure this out for hours with no luck. Files will be in replies to this post.#SelfHosting #Linux #HomeLab #RPi #RaspberryPi500 #RPi500 @selfhost @selfhosting @selfhosted @linux

Would anyone who knows #Traefik and #YAML or #TOML be willing to help me out? I'm trying to get Traefik set up with my new domain but running into trouble, and I'm not sure what I'm doing wrong. I can send you my traefik.toml and dashboard.yml files.#SelfHosted #SelfHosting #Linux #Tech #Technology @selfhost @selfhosting @selfhosted

I've been looking to get myself a VPS. It's my first time, too.

Hi everyone! How are you all doing tonight? I just had a frustrating experience trying to set up a free #domain or #subdomain for my #SelfHosted services. Unfortunately, I can't use my laniecarmelo.tech domain because its current configuration doesn't allow me to add subdomains.I discovered EU.org, which offers free domains, and decided to give it a try. However, they require you to have authoritative #DNS #nameservers before requesting a domain. I tried using #Cloudflare, but it wasn't authoritative. Then I looked into Hostry.com, Hurricane Electric DNS, and FreeDNS.Hostry requires you to add DNS records for your domain before using their service—but how can I do that when my domain doesn’t exist yet? 🤦‍♀️ As for FreeDNS and Hurricane Electric, both have inaccessible #CAPTCHAs on their registration forms with no audio alternatives! 😡At this point, I'm so frustrated that I've decided to take a break from figuring this out. If anyone has tips for setting up a free domain or knows of accessible DNS services, I’d really appreciate your advice! 🙏#Accessibility #TechFrustration #WebHosting #BlindTech #blind #DisabilityInTech #tech #Technology #SelfHosting @selfhost @selfhosting @selfhosted @mastoblind @main

I should have clarified I don’t mean for the day, I mean for a week plus.

Can the vps provider not read everything on your server, unless it's explicitly encrypted?

I'm trying to host a few docker services from my house, but my IP appears to be blocking port 80, so the only way to get a domain working that I've found is domainname.com:portnumber (I have port forwarding set up in my router, and can reach a wide range of ports, but not 80).

#SelfHosting community, how do you get notifications about your projects?

I was turning on IPV6 in my router settings, and in order to do so, my router had to reboot, and without thinking, I went ahead. I then realised, my server is connected to said router, so after the router rebooted, I checked and saw that most of the docker containers were fine, except for the Piped container. When I go to the Piped instance that's hosted on my domain, it just brings up a Cloudflare Code 522 Error (I use Cloudflare)

Heyha ! I just came across a very odd issue/bug that somehow resolved by itself without knowing who or what was the culprit.

I'm self hosting changedetection.io I'm trying to follow the price of products on https://www.decathlon.fr Problem is that I can not manage it coz of cloudfare. I've tried using the "Browser steps" in option, but I'm stocked at just ticking the box that veryfied that I'm an human. Any idea how to make it work?

Has anyone seen any particularly good deals for NAS's, storage or memory, mini computers, things like that, for this Black Friday / Cyber Monday season?

I've been stressing out for some hours now, but I think I know what has happened, although there are still some things that's not quite adding up, and was hoping someone could help me get to the bottom of it. The actual question is at the bottom.

I thought it would be cool to have my own TLD, but apparently it's all managed by the ICANN, so you can't just name your website with any TLD you want. There are different prices. But at least you can customize your second level domain. Why aren't TLDs like this?

Hey; I just got a Lemmy instance up and running. I'd like to share some tips and things that helped me along the way.

So I'm using a lot the option to chat myself in apps like WhatsApp or Telegram. But I don't wanna put my trust in them.

I accidentally attempted to SSH into one of my servers from a device that did not contain my ssh key. I configure all of my servers to only allow authentication via cryptographic keys. Root ssh as well as password auth are disabled.

Hi,

I'm looking into self-hosting a SearXNG instance for my own use. One thing I don't get is how the results are aggregated if I'm using a local instance. Is it just going to all the configured search engines and making requests? If that's the case, what's the benefit of using SearXNG instead of just going to that search engine myself from a privacy perspective?

I am on a shared network. I'd like to self host services and access them from all my devices but I do not want these exposed to other people in my network. I've noticed that I can just change the port mapping in Docker to :: from : and it just works. Works as in the service is accessible from my Tailnet, inaccessible from the local network or the internet. Is it really this easy or am I missing something? Just sounds too good to be true so I am suspicious it might somehow be insecure.

Hello everyone,

I have a spare 3070 GPU, as well as 16GB of Memory and my friend has a spare PSU, this part list has everything else I would need+everything I already have. Is there anything I should tweak or modify or will this build work, I plan to use it as a headless server.

I built a system around a 3U chassis, then tried to stuff a GPU in the box and couldn't close the lid. I got a 4U chassis and rebuilt the system, but I still have the 3U and I'm thinking about filling it back out so I have a failover for Proxmox. Is there a GPU I should consider or just stick with the integrated graphics? I'm currently only using the GPU for Steam remote play using pass-though to a Windows VM, but Jellyfin, Frigate, Immich are on my to-do list.

I've recently gotten on board with Invidous/Viewtube - and they're both great in their own ways. I like not having the algorithm hide or force new content down my throat, but I'm wondering if there's a way to take this to the next level.

How can you increase the disk capacity on a MiniPC?

Does anyone know of a self hosted food journal? I'm looking for an application that allows me to record all of the things I eat as well as how I feel so patterns of foods can be found when various symptoms are triggered. Bonus points for machine learning analysing the data and telling me what foods cause which problems!

I just setup my first automated and encrypted backup with borg. It's got me thinking about other chaotic events, and how to respond accordingly. I figured now is a good time to document my infrastructure: hardware, network, a files. This way if something bad happens, like my house burns down, I or a family member has instructions for how to quickly recover data and services. Examples:

Say I have a large txt or CSV file with data I want to search. And say I have several files.

Hi everyone,

Hi folks, I'm considering setting up an offsite backup server and am seeking recommendations for a smallish form factor PC. Mainly, are there some suitable popular second hand PCs which meet the following requirements: * fits 4x 3.5" HDD * Smaller than a regular tower (e.g. mATX or ITX) * Equipped with a 6th of 7th gen Intel CPU at least (for power efficiency and transcoding, in case I want it to actually to some transcoding) with video output. * Ideally with upgradeable RAM

I bought some new drives to replace the old ones I had lying around, and want to replace them entirely (4x 1tb -> 2x 4tb). I have a few apps running on it (Syncthing, Transmission, Tailscale, etc.), and I wanted to know what the best way to perform a drive upgrade would be. AFAIK the apps are installed on the pool as well, so will I just have to reinstall them from scratch?

My environment is a (freshly installed) Debian server with ZFS pools. I would like to store files in ZFS and share them using Samba.

Requirements: - based on Debian GNU/Linux - easy to install/uninstall services

I have a Kasa HS210 3-way switchm but it has started to fail... maybe it is related to the fact that I blocked the DNS entries to tp-link servers, but every a few days it restarts it self.

[Cross-posted from [email protected]]

When I open a file Jellyfin always shows "fetching additional data".

Howdy All! I've been self hosting some services on a pi 4 for a year or two now and have been fiddling with new services lately. I realized I'm pushing 60% or so of RAM and maxing out the SWAP file while fiddling with things. I currently just set up a nightly reboot as a temporary solution but I'm thinking about picking up a mini PC of some sort to replace it with, and wanted to get input from the community (Read: people smarter than me haha.)

Self hosting kids-friendly multiplayer games on Raspberry Pi 4

Question about replacing/expanding a disk

Is there a feature in a CI/CD pipeline that creates a snapshot or backup of a service's data prior to running a deployment? The steps of a ideal workflow that I am searching for are similar to:

Syncing password between firefox clones