Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
view the rest of the comments
What does self hosting look like in a world full of malicious AI agents?
I’m thinking of this post/thread from Veronica explains, where she explains that her hosted services are accessible only locally because tbe security headache isn’t worth it: https://explains.social/@veronica/statuses/01KWJCGV27JVBHP21E2JNWDBFH
As someone who doesn’t self-host but could and would want to, the state of AI has basically scared me off.
I host several services accessible via the open Web. They are isolated enough that a breach would most likely only compromise that service. They are also kept up to date, and logs are monitored.
There's always a risk when exposing something, and I am limiting some services to access via VPN because either the data in them is too sensitive, or I don't trust them to be secure enough.
You probably also aren't a worthwhile target in most cases.
I am simpatico with her position.
For what it's worth, self-hosting doesn't mean you need to be able to reach all your services off-site.
LAN only access is perfectly valid and something that I prefer myself.
Case in point -
Last year I went to Japan for 5 weeks and rather than opening up dodgy ports to my home media services, I ended up taking a 128GB USB stick, my Chromecast and installing Nova Player.
https://github.com/nova-video-player/aos-AVP
Nova Player populates on device from your attached storage to create essentially a jellyfin like front-end. Install it, plug the chrome cast or whatever into HDMI on any TV and you're off to the races.
It's wonderful and it's actually now my primary streaming media source in the house; I just plug in my hard drive to my router, Nova sees it and my media sources are cross-populated to all of my Android devices.
Yup. It's how i've been running for years. The only thing that presents outside the house is port 80 on the apache server (despite having some incredibly intricate home automation)
Mind you, i'm also old enough to have spent my formative years without even the concept of "available everywhere". Lotta peeps nowadays have not, and the idea of no internet / no access is genuinely terrifying to them
Yea, this “data at the edge” approach, not “on the wire” Is interesting to me and makes sense.
Basically regressing on the convenience/power of the internet because it just isn’t safe and easy anymore and for anything personal that isn’t a server -> many users, yoi basically ain’t gonna need it.
This is a big reason I only remotely access my services via TailScale / Wireguard.
Even if my highly restricted ISP let me open anything, I wouldn't dare. I know for certain I don't know as much as who/whatever is hunting for open ports out there. I have zero interest in instantly being assimilated into some botnet lol.
yeah - i am now thinking i want to move away from anything that leaves me exposed. i have a few services that are nice to be able to access remotely, but it’s time to reconsider how much i actually NEED to access those services.
Consider only exposing a VPN service, like Wireguard.
Then when you are away from home, it's one tap / click to be back on your LAN again.
You don't even need to lift a finger. I use WG Tunnel, which turns on my VPN as soon as I leave my WiFi. I'm always tunneled or home.
some kind of wireguard proxy would be nice though to not expose my home IP address wherever I go (guest wifi networks)
I suppose so, but all they'll see is a an encrypted session.