this post was submitted on 11 Jun 2023
97 points (96.2% liked)

Selfhosted

40198 readers
710 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

Hello everyone! Mods here 😊

Tell us, what services do you selfhost? Extra points for selfhosted hardware infrastructure.

Feel free to take it as a chance to present yourself to the community!

🦎

you are viewing a single comment's thread
view the rest of the comments
[–] Rescuer6394@feddit.nl 3 points 1 year ago* (last edited 1 year ago)

Available from internet:

  • jellyfin
  • jellyseerr
  • immich
  • paperless-ngx
  • owncloud ocis
  • traefik
  • homarr

Available only from local:

  • the *arr stack
  • qbittorrent
  • jackett
  • watchtower
  • apprise
  • netdata (kinda new, still have to fully understand how it works)
  • portainer
  • speedtest-tracker
  • homepage

Security

All the services available from internet, just goes through traefik to terminate https, I rely on the build in authentication of each service. To add another layer of security, I have fail2ban active on all those services.

I have a public IP, and I have open on my router ports 80, 443, a random port for ssh and vpn.

Hardware:

Memory:
  System RAM: total: 8 GiB available: 7.73 GiB used: 4.46 GiB (57.7%)
  Report: arrays: 1 slots: 4 modules: 2 type: DDR3
CPU:
  Info: 6-core model: AMD Phenom II X6 1090T bits: 64 type: MCP cache: L2: 3 MiB
Graphics:
  Device-1: NVIDIA GP107 [GeForce GTX 1050 Ti] driver: nvidia v: 535.98

docker compose files

All the docker compose files + how I configured everything is available at: https://github.com/simone-viozzi/my-server

Bonus:

Since I like the ability of btrfs to do snapshots, I created all important docker volumes as btrfs subvolumes. Then I created a backup script that literally sends the subvolume (encrypted) to an external cloud. This does not allow incremental backups and most likely is not the best backup solution... but it works... the repo is: https://github.com/simone-viozzi/btrfs2cloud-backup

I welcome any advice / criticism!