Selfhosted

Just wanted to share my feelings about the arr* stack, will keep it short !

First, thanks to all those beautiful people giving their free time to work on all thoses services ❤️ !

At first I wasn't that impressed and didn't understood all the hype arround all thoses services and only used sonarr to rename my files I had manually imported. It did a great job as a file renamer service, however I was still managing everything manually from hard links to qbittorrent organization creating in the end a total messed up file system with a lot of duplicated hardlinks and files scattered in different directories, renamed differently, etc.....

Also, after the most known french piracy tracker had been hacked and shut down (finally !), a lot of new trackers opened like wildfire and had over 10 trackers to keep an eye on. Searching the web, I came across Prowlarr and seeing how It connects directly to sonarr I got curious.

That's the exact moment when I finally unsterstood what's all the hype about the ARR stack ! My god, what an amazing piece of software stack...

First came jellyfin, sonaar, then prowlarr, radarr, seerr and now I discovered profilarr. It's amazing to see how everything perfectly communicates with each part of the stack and everything is perfeclty automated and god does it work well... I'm impressed and still baffled how something so good is free and open source !!

Im still scratching the surface of this powerfull stack, but does it feel good to just ask seerr and after a few minutes having my media perfectly organized in qbittorrent, filesystem directories, renaming scheme, hardlinks, quality profiles, config synchronization......... 💥🤯

It does have it's own quirks right and there, and can become kinda weird if you do not know what you are doing (thanks Trash guides ❤️❤️) and seeing from all the issues the arr stack seems to hit a wall with the current code implementation. But IDK, i'm not a programmer so I may be wrong here.

And there seems always something new to complement the arr stack !

So that's it :) Just wanted to share my feeling and appreciation with all of you ! Happy self-hosting !!

Plex has announced a massive price increase on the service's Lifetime Plex Pass. On July 1, the lifetime subscription option will go from $249.99 to $749.99, an increase of 200%. The price hike will only apply to new subscribers, with no changes to monthly or annual subscription pricing.

I'm running a Ubuntu server on my old laptop with an external HDD connected to it. The external HDD is powered independently from the laptop, as it is plugged into the wall.

During a power outage, my laptop remains operational due to its battery, but the HDD shuts down. When power is restored, my laptop does not automatically remount the HDD, and I have to reboot the system manually to access it.

Does anyone know how I can resolve this issue?

Edit: Not sure if this added context changes anything, but this is the HDD I'm using. It's a 3.5" HDD that gets its power directly from the wall.

Just came across this, and thought it was a pretty cool tool to self-host. You can use it to monitor price changes, or new events being added, or to check if that out of stock thing is back in stock.

Self-hosted nutrition + wellness tracker. Latest release rolls up two weeks of work.

New features (rc.21 → rc.26):

• Recipe yields — declare "this makes N servings" and per-serving math flows through the diary
• Intermittent fasting tracker — custom presets, history, recurring schedule that auto-starts at a chosen time on chosen days
• Adaptive TDEE — learns your true daily expenditure from a rolling 35-day window of weight + diary instead of a static estimate
• Android biometric sign-in — fingerprint / face unlock in server-connected mode
• Per-serving Open Food Facts import — when a barcode-scanned product has serving data, prefill nutrition per-serving instead of per-100g
• Health Connect → web — Android-synced Health Connect data now reaches the server and renders on the web Wellness page
• Sharing rework — per-category sharing form, source filter on Meals/Recipes, zxcvbn-backed password-strength policy

Bug fixes: cross-pollinated food images on diary entries, duplicate foods on rapid barcode scans, scheduler crash, Mealie Test button.

Repo: https://github.com/TraceApps/nutritrace Release: https://github.com/TraceApps/nutritrace/releases/tag/v1.0.0-rc.26

Single docker compose, SQLite, signed APK on the release page.

In the latest episode of "they will always sell you out" - they sold you out! Who would've thought.

Hoping for a good alternative client to appear, the writing is on the wall. Vaultwarden can't exist without "leeching" off of Bitwarden.

Finally managed to get my hands on 2x1TB NVMe's. Budgets are tight these days ... :-) They are Crucial P310 ... hope they are reliable, although I suspect nowhere near Samsung stuff.

I have a little Proxmox installation running a VM on a 256GB NVMe, which as you can imagine is tight. Is there a way of cloning this installing on one of the new NVMes?

Reason why I have 2x new NVMe is that I want to eventually get myself to Proxmox HA, so that the two machines (two little Optiplex 5070, one of which has the 256GB install) provide me with redundancy.

First thing is to clone the 256GB install to the larger NVMe. Would it be an idea to go this way: a) install 1TB new NVMe on spare Optiplex b) install Proxmox on this new machine c) find a way to replicate the whole 256GB install on the second machine (need to read the docs to see if/how this can happen) d) once second machine is up and running as a clone, remove machine with 256GB (current machine) and install the 1TB NVMe. e) do the same above process the other way around.

Do you think this will work or am I going to hit a wall? Is there a simpler way of doing this?

My homelab is essentially my own passion project and only really I access it except for when I spin up the occasional game server for friends.

I'm currently running Proxmox and run a debian LXC container for each docker stack I have, and have OpnSense routing incoming traffic with Haproxy with ssl offloading. My currently running LXCs are: mediawiki, amp game server(2 Minecraft servers), freshrss, and currently playing around with n8n.

I'm looking to collapse my LXC's to just VMs. I'd like to be able to have 3 VMs running in a Docker Swarm together so I can upgrade a VM at a time and just swing my running containers to another docker node and then swing back when the VM is stable again.

I've looked at k0s, k3s, and k8s and it just seems way too much work and overhead for what I'm willing to do. I also want to keep using docker compose and want a decent webgui to manage my containers/nodes/swarm. I'm using DockHand right now, but need to research swarm support.

Anyone have any advice for something like this? Any specific terms, tech, software I should look into?

Also, gonna throw a curveball, but what would the effects be of running 3 different distros as my nodes in my swarm? Like a Debian node, Rocky Linux node and potentially arch node? I'm guessing I shouldn't due to docker engine differences potentially.

I'm just trying to have fun with things, break things, fix them, learn, etc.

https://kb.synology.com/en-global/DSM/tutorial/Docker_container_cant_access_the_folder_or_file#x_anchor_idcd3f1170a3

Why allow "everyone" to have read write permission to shared folders in order to run container manager? Wouldn't this be insecure?

So here is my dilemma. I have a Truenas server that basically acts as a file server. I also have a little machine running Proxmox. I have an NFS share on the Proxmox machine for saving VM backups so that they are secure. On the Proxmox VM, I want to install docker instances. Some of them require large data repositories so I can't have the data stored on the VM. I'm thinking of creating an "apps" dataset on the Truenas machine, then exporting it via NFS and mounting on the VM. Then I redirect all the Docker volumes on this NFS share. Say I have Docker_App1 on the Proxmox VM, then I would create a folder in the /mnt/Truenas_share/Docker_App1. Do you think this will work? The alternative is to create an individual dataset on the Truenas machine for each Docker_App but this feels overkill and a nightmare to setup and maintain. How are you managing Docker volumes over NFS?

Hi all, for my own selfhosting needs i looked into many different dashboards, but none really fit my bill.

I want a dashboard that:

• super lightweight
• has no server-side requirements
• can be edited with a single text file
• simple CSS to adapt to your style

and so, of course, i developed my own. After a few years of usage, i upgraded it to AlpineJS (previously uglier code on jQuery) and i am proudly making it public for anybody who might be interested.

Here it is: https://github.com/gardiol/dashboard/

(the project was released on github long ago, but i never wrote about it anywhere IIRC, also i might migrate to Codeberg in the future, so do not bash me for Github)

There is a quite long readme, it's GPLv3, and aboslutely zero lines of AI / Vibe coding. I used AI for research and quick support specially on how to format CSS (which i kind of despise) but nothing else.

As a bonus, there is also a CGI system made in bash (totally optional) that i use for local monitors, but it's kinda messy and really not ready for broader use, so you can ignore the "monitor" subfolder or delete it completely.

Anyway, here it is, hope someone could make use of it.

Recently I've installed luci-app-banip on my OpenWrt router and blocked most countries from accessing my services on my network. Not seeing why I would want any of that traffic I also blocked the whole of the ARIN registry, responsible for IP addresses from Canada and the United States.
Edit: Note this is only for inbound traffic. Outbound traffic is allowed no matter the target country.

Fast forward a few weeks and my certbot renewals fail with the following error: Failed to renew certificate enter.domain.here with error: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Read timed out. (read timeout=45)

Confused af I start looking for solutions and as so often only find useless or completely ridiulous solutions (lowering my MTU to 1300, what? WHY?). Finally I find some enlighted figure that says they recently enabled a blocklist for certain countries and that was the issue for them.
Now I make the connection to my use of banIP, re-allow the USA and my cert renewals start working again. Hooray!

However, there are two things bothering me:

1. Why would such a block even interrupt my renewals? I'm using DNS challenges and the ACME servers should only check the DNS entries, not where those entries actually redirect to. The DNS server/root isn't in my home network, so isn't affected by any firewall shenanigans I do here.
2. How can I make an exception for the Let's Encrypt ACME servers while blocking the rest of the ARIN IP space?

I see there's the option for ASN selection and external allowlists:

Does anybody have an idea on how to configure this so that Let's Encrypt continues to work without compromising on my network security?

(Edit: And just for clarity, I do not live in the US or anywhere on the American continent.)

Is there a good android app thats dedicated to reading epubs from your ABS instance? I dislike a lot of things about the native reader in the native app and was wondering if there is something ('Still' seems good but its just for ios)

I usually use ReadEra for reading epubs (which is awesome) but i like the aspect of having my own cloud, not having to download every file manually and syncing my reading status.

Does not need to be free, I am willing to do one-time-payments for a good android reader app that connects to my ABS.

Do you have any advice or suggestions about it?

• Hardware (what should be enough for a local PC, or VPS...)
• Software (OS [Debian, Yunohost, other...], "containerization" (Docker, virtual machines?), dashboard, management, backups, VPN tunneling...)
• "Utilities" to host (Lemmy, Peertube, Matrix, Mastodon, Actual Budget, Jellyfin, Forgejo, Invidious/Piped, local Pi-Hole, email, dedicated videogame servers like for Minecraft, SearXNG, personal file storage like Drive, AI [in the future, when I can afford a rig that can run a local model decently]...)

I'm aware it's a lot of stuff to take on, so, do you have any advice on where to start? (how to find a cheap PC to experiment with, if not get a VPS, what to test on it, what "utilities" to try self-hosting first...)

Update your nginx instances

cross-posted from: https://lemmy.world/post/46851448

• Affected an non-affected versions https://nginx.org/en/security_advisories.html
• CVE record https://www.cve.org/CVERecord?id=CVE-2026-42945
• CVE details https://nvd.nist.gov/vuln/detail/CVE-2026-42945
• PoC https://github.com/DepthFirstDisclosures/Nginx-Rift

CVE - Common Vulnerabilities and Exposures system
RCE - Remote Code Execution
PoC - Proof of Concept

Alright so my lab is pretty much functionally complete; it does everything I was hoping it would and much more.

OK so now what :D Do you know of any projects that are self-hostable and serve no functional purpose whatsoever and exist just for fun? Could be silly projects, could be games. I'd like to add a "silly things" section to my publicly facing list of web services.

For instance, I was thinking of hosting a web version of nethack. Also I enjoyed hosting a node of hypermind for a little while just because it was so silly.

cross-posted from: https://sh.itjust.works/post/60171730

Hey y'all, looking to land my first DevOps Engineering role soon, and figured I should use enterprise software as much as possible for some resume building and personal practice. For reference, I've set up a NAS server once before but haven't got too much experience outside of that. Basing this on some DevOps Engineers I've talked to IRL and some friends who hire engineers, but wanted extra community feedback.

Use case: parents are data hoarders, probably have at least 4tb saved composed of every type of media you can think of, so hopefully the whole family can use this when I'm done with it all. Otherwise, aiming to be able to claim experience with enterprise grade DevOps software.

Some of this is personal research, a lot of Reddit research, and some LLM comparisons used to choose between two software systems. Please let me know what you'd keep or change! I'm still kinda new to this :p

Hardware: (old gaming pc)

• Intel i5-9600K
• 32GB DDR4 RAM
• GTX 1070
• Gigabyte Z370XP SLI
• Seagate IronWolf 12TB 3.5" SATA

Hypervisor & OS:

• Proxmox VE (type-1 hypervisor)
• Ubuntu Server 24.04 LTS (VM operating system)
• cloud-init (VM provisioning automation)

Infrastructure as Code & Automation:

• Terraform (infrastructure provisioning)
• Proxmox Terraform Provider (VM automation)
• Ansible (configuration management)
• GitHub Actions (CI/CD pipelines)

Containerization & Orchestration:

• Docker (container runtime/builds)
• Kubernetes/k3s (container orchestration)
• Helm (Kubernetes package manager)
• ArgoCD (GitOps continuous deployment)

Networking & Ingress:

• Traefik (ingress controller/reverse proxy)
• MetalLB (bare-metal load balancer)
• cert-manager (TLS certificate automation)
• WireGuard (VPN software)
• Surfshark (VPN service)

Secrets & Security:

• HashiCorp Vault (secrets management)
• External Secrets Operator (Kubernetes secret syncing)
• SSH hardening (secure remote access)

Observability & Monitoring:

• Prometheus (metrics collection)
• Grafana (monitoring dashboards/visualization)
• Loki (centralized log aggregation)
• Promtail (log shipping agent)
• Alertmanager (alert routing/notifications)

Storage & Backups:

• ZFS (filesystem/storage management)
• NFS (network storage)
• Persistent Volumes/PVCs (Kubernetes storage)
• Restic (encrypted backups)
• Velero (Kubernetes backup/disaster recovery)

Container Registry & CI Infrastructure:

• GitHub Container Registry or Harbor (container registry)
• GitHub Runner (self-hosted CI runner)

AWS Emulation:

• LocalStack (AWS cloud emulation)
• Terraform AWS Provider (AWS IaC practice)
• MinIO (S3-compatible object storage)

Self-Hosted Applications:

• Prowlarr (indexer manager)
• Sonarr (TV show management automation)
• Radarr (movie management automation)
• LazyLibrarian (book management automation)
• Lidarr (music management automation)
• Homarr (application dashboard)
• Seerr/Overseerr (media request management)
• Jellyfin (media server)
• qBittorrent (torrent client)
• NZBGet (Usenet downloader)
• Immich (photo gallery & backup)
• Mealie (meal planner)
• Moonlight (low-latency remote gaming)
• Kavita (ebook/manga/audiobook reader)
• Funkwhale (music streaming)
• Grafana (monitoring dashboards)

Our family watches TV trough IPTV and via streaming services and it's been fine enough for quite some time. However, now one of our broadcast companies got in a fight about streaming contract with our IPTV provider and we lost a few of the channels. Not that big of a deal for me personally, but apparently there's some shows the rest of the family wants to see. This isn't the first time and likely it won't be the last.

However, all the free channels are available over air as well (and that's one excuse for IPTV operators to exclude offerings, "you can watch it anyway"). We have an antenna, but previous house owners just left the cable loose at the outside wall and brough it trough a hole in window frame. I've removed the cable and patched the hole for it and it'd be pretty difficult to run antenna cable to our TV set cleanly. However, I could pull a new cable nearby to my server stack with reasonable effort.

It's been quite a while since I've played with capture cards and any kind of streaming, so maybe hive mind here has some ideas. TV already has Android TV box connected, so anything that works with it is a bonus, but not a requirement.

So, what software (and hardware) I could use to pull video from DVB-T2 and stream that over local network?

Does anyone run one of the above on a Pi 4 and can share their experience how good or bad they run?

If course, transcoding won't be any good and OCR probably cannot run in parallel, but aside from that - is it okay?

Currently running everything on a mini ITX with a i5-6600 which handles this easily for my small use cases, but also draws 20-30W idling most of the day... I'm eyeing a Pi 4b with 8gb RAM but don't want to spend the money and then realizing that it doesn't run smooth enough