jrollans.com is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
Tor relay and bridge operators: v2.2.1 is out 🧅🚀
https://github.com/r3bo0tbx1/tor-guard-relay/releases/tag/v2.2.1
Tor Guard Relay now ships Tor 0.4.9.15 and its new directory-request DoS defenses.
🏗️ Verified upstream source builds
💻 Stable + edge · AMD64 + ARM64
No new mandatory torrc lines. Leave the new rate-limit settings unset so network consensus controls them.
Back up, upgrade and verify the running Tor version.
🌐 https://brokenbot.net/v2.2.1/
http://brokenbotqk7v7y3xpvr6ik7rofivu2dsr5rpkx6xons45reksaykuad.onion/v2.2.1/
That’s moving much slower than I expected: https://github.com/immich-app/immich/issues/12614
It was initially planned for #Immich 3.1 or 3.2. Now we almost have 3.4, 4.0 on the horizon, and no “better sharing” except people sharing, which doesn’t resolve the main Immich issues - inability to see shared assets in your timeline or share assets in any other way except albums =(
My rant is over. Please proceed to your weekend and have a nice one.
Fresh from the lab: murad.wtf: a night sky made of my servers
murad.wtf is a status page with no charts: it draws a night sky in plain text where stars are page visits, comets are my posts and an eclipse means a service is down. How it works, where to see it and why it knows nothing about you.
https://pablomurad.com/murad-wtf-a-night-sky-made-of-my-servers/
Question for the tech people on here. I've got a directory `www/` and several different directories for user: `www/alice/`, `www/bob/`, etc. (These are not system users in UNIX. Just users signed up through my web app).
How might I configure an application like Apache or nginx or something to serve `www/<username>/` as a website when it recieves an HTTP request to `<username>.mydomain.tld`?
Notably, I'd like to not necessarily have to keep a list of users inside of a config file, nor do I want to have to create system users in UNIX for each user website.
Linux microblog update:
Proton's CEO, Andy Yen, is confident that AI vibe code is the best way to protect my privacy.
I disagree, so now I run my own mail and DNS servers.
And I'm saving money, no longer paying for Proton's services.
The last few years have felt like the world is playing "but you won't self-host this" chicken, against me.
But I really like paying people a fair price for their time and expertise. This is getting silly.
At this rate I feel as though I may single-handedly bring back the 1990s Internet. I heard there's a new way to run classic Flash games. Maybe I'll look in to that, next.
One of my professional mentees is switching her domain name registrar, and her DNS record hosting, for her self-hosted sites.
I believe her primary motive for the switch is that NameCheap stopped living up to the "cheap" part of their name, and... well that seemed to be their big thing.
She was inclined to go with Cloudflare, but she learned that Cloudflare doesn't allow her to choose her own DNS hosting, but requires their own.
That is a deal-breaker for her, so she is shopping for a new registrar.
I would appreciate recommendations for ethically-run domain registrars that are reasonably friendly to newer technoligists, if you all know of any.
There's a good chance I will move my own domain hosting to whatever she decides on, so I'm asking for myself, as well.
Does anyone have any recommendations?
Do you run your own PeerTube server? Would you like to feature videos from other PeerTube servers too?
You can do this really easily by federating other servers and/or specific accounts from other servers. Their videos will appear on your server without requiring any extra bandwidth or resources.
Here's a step-by-step guide to how to do this, including a list of recommended servers to federate, and lots of questions answered:
🏡 https://fedi.tips/how-to-fill-your-peertube-server-with-federated-videos
There has never been a better time to introduce young French people to the wonderful world of decentralized social networks and - optional - #selfhosting.
An accidental ad for the #Fediverse, exhibit A: https://www.politico.eu/article/french-government-mulled-blocking-social-network-amid-protests/
My MO is simple: Stack and parallel old equipment to obtain the capability of modern equipment for a tiny fraction of the cost.
The downside - power usage can be high and overall speed lower.
But it's the capability and independence that matter. #homelab #selfhosted #selfhosting
Ich bin überrascht wie zufrieden ich mit #NextCloud Deck bin. Ich dachte ich vermisse mehr der eher speziellen Features von #Trello, aber nö. Deck ist sogar durch seine Einfachheit besser, weil ich dann nicht so viel Zeit in spezielle Automation stecke, die ich dann wieder debuggen muss. Habe jetzt seit mehreren Wochen ein Projekt in Deck verfolgt und es ist einfach nicht im Weg, aber da, wenn ich es brauche. Absolute Spitze 🙂
Alô #ExercitoDoLula avisa O #PresidenteLula que:
Com o #Fediverso nós podemos atingir a #SoberaniaDigital !
#Jabber #OMEMO #Conversations #XMPPChat #FederatedMessaging #MensageriaFederada #Signal #SignalApp #SignalProtocol #PrivateMessaging #MensagensPrivadas #Criptografia #E2EE #SimpleX #SimpleXChat #SimpleXNetwork #NoUserIDs #PrivacyFirst #Privacidade #Matrix #MatrixProtocol #Element #ElementX #MatrixChat #DecentralizedChat #ChatFederado #Jitsi #JitsiMeet #OpenSourceVideo #VideoConferencia #ReunioesLivres #SelfHosted #Nextcloud #NextCloudHub #SelfHosting #AutoHospedagem #CloudSoberana #OpenSourceCloud #NextcloudFiles #Riseup #RiseupNet #RiseupVPN #ActivistTech #TechActivism #TecnologiaAtivista #DigitalAutonomy #AutonomiaDigital #Proton #ProtonMail #ProtonVPN #ProtonDrive #ProtonPass #PrivacyByDesign #PrivacidadeDigital #EncryptedEmail #FreeSoftware #SoftwareLivre #Privacy #Privacidade #DigitalRights #DireitosDigitais #SelfHosted #AutoHospedado #Decentralization #Descentralização #Fediverse #Fediverso #DataSovereignty #SoberaniaDigital #E2EE #NoTracking #SemRastreamento #SurveillanceCapitalism #CapitalismoDeVigilância
Every day on r/selfhosted nowadays:
“Check out my new project! It’s a notes-taking app with logs aggregator, system monitor, photo library, and music editor in a single Docker container. I spent a week developing it almost without AI!”
Enjoying this little music player for navidrome. Have been looking for a nice TUI music player that will scrobble for a while for use over tmux/ssh, happy days.
I'm an idiot. Someone mentioned #Duplistatus which allows you to monitor your #Duplicati backups. Seems like a cool idea. So I'm going through the config and set allowed IPs. I added the various servers. Forgot to include the device I'm using to access Duplistatus... and now I can't connect. D'oh.
1/n OK about to start dipping my toes into the world of #selfhosting.
Reasons.
My disappointment with the new #Mastodon web UI just reminds me of the many issues of using the "cloud", that is having your stuff on someone else's server.
My disappointment with those working on the new UI sound just like any other UX developer in a big oligarch owned company who are not going to go back or not make any significant improvements to their beloved concept.
Time to jump ship?
New blog post by me:
https://nheinz.eu/blog/2026/10/container-vulnerability-management/
How I manage my Containers and their Vulnerability Management across infrastructure and how the patching of PHP2SHELL looked like
#selfhosting #selfhosted #container #kubernetes #vulnerability #vulnerabilitymanagement #homelab #renovate #trivy #forgejo #forgejoactions #harbor #security
Neuer Artikel: podman auf dem Desktop – wann der Umweg über den Container Sinn macht.
Drei Fälle aus der Praxis:
• Software, die alte Bibliotheken oder eine bestimmte Datenbankversion braucht
• Closed-Source-Apps, die sonst das ganze Home-Verzeichnis sehen
• Tools, die man nur kurz testen will
Dazu der ehrliche Teil: wo Kamera, Mikro und X11 die Isolation wieder auffressen.
PHP patches critical AI-discovered PHP2Shell vulnerabilities affecting millions of sites:
https://alternativeto.net/news/2026/10/php-patches-critical-ai-discovered-php2shell-vulnerabilities-affecting-millions-of-sites/
Node.js October 2026 Security Update: 10 Vulnerabilities Patched Across 3 Release Lines:
https://www.linuxcompatible.org/story/nodejs-october-2026-security-update-10-vulnerabilities-patched-across-3-release-lines/
Python Releases Emergency Update to Block Broken eMudhra Certificate Authority:
https://www.linuxcompatible.org/story/python-releases-emergency-update-to-block-broken-emudhra-certificate-authority/
Zed 1.25.2 Release: 33% Smaller Binaries and Safer AI Agents Now Available:
https://www.linuxcompatible.org/story/zed-1252-release-smaller-binaries-and-safer-ai-agents-now-available/
Apache NetBeans IDE 32 RC2 Ships as Small Pre-Release Ahead of November GA:
https://www.linuxcompatible.org/story/apache-netbeans-ide-32-rc2-ships-as-small-prerelease-ahead-of-november-ga/
React Native 0.88 brings web-based event dispatching & variable fonts; no breaking changes:
https://alternativeto.net/news/2026/10/react-native-0-88-brings-web-based-event-dispatching-and-variable-fonts-no-breaking-changes/
Forgejo 17.0 adds workflow webhooks and job summaries:
https://alternativeto.net/news/2026/10/forgejo-17-0-adds-workflow-webhooks-and-job-summaries/
Gitea releases gt CLI with JSON output and Actions support:
https://alternativeto.net/news/2026/10/gitea-releases-gt-cli-with-json-output-and-actions-support/
Save Upto 40% on Kubernetes Security Certifications From the Linux Foundation:
https://itsfoss.com/news/lf-cyber-security-26/
DuckDB's major 2.0 release turns the database management system into a full-fledged server:
https://alternativeto.net/news/2026/10/duckdb-s-major-2-0-release-turns-the-database-management-system-into-a-full-fledged-server/
Matomo 5.14.2 Released: Vulnerable PHP Check and Certificate Hardening:
https://www.linuxcompatible.org/story/matomo-5142-released-vulnerable-php-check-and-certificate-hardening/
OpenSSL 4.1 Released with Support for DTLS 1.3, IKEV2 KDF, and GREASE:
https://9to5linux.com/openssl-4-1-released-with-support-for-dtls-1-3-ikev2-kdf-and-grease
LibreSSL 4.4 Released With Faster SHA3, Bug Fixes:
https://www.phoronix.com/news/LibreSSL-4.4-Released
Stremio 2.1 brings Calendar and Discover previews to Apple:
https://alternativeto.net/news/2026/10/stremio-2-1-brings-calendar-and-discover-previews-to-apple/
Roundcube 1.6.20 and 1.7.5 Ship 20 Security Fixes:
https://www.linuxcompatible.org/story/roundcube-1620-and-175-ship-20-security-fixes/
Pi-hole updates FTL v6.8, Web v6.6.1 and Core v6.5:
https://alternativeto.net/news/2026/10/pi-hole-updates-ftl-v6-8-web-v6-6-1-and-core-v6-5/
(Post 6/7)
#WeeklyNews #OpenSource #FOSSNews #FOSS #OpenSourceNews #News #PHP #PHP2Shell #NodeJS #Python #eMudhra #Zed #NetBeans #ReactNative #Forgejo #Gitea #Kubernetes #DuckDB #Matomo #OpenSSL #LibreSSL #Stremio #Roundcube #PiHole #Programming #Coding #Dev #Security #Cybersecurity #SelfHosting #IDE #AI #FosseryTech
According to this...
for c in $(docker ps --format '{{.Names}}'); do docker exec "$c" sh -c 'ls /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin 2>/dev/null | grep -q "^php"' 2>/dev/null && echo "$c"; done
Looks like #FreshRSS is the only public-facing thing I'm hosting with #PHP in it. (?)
Putting it to sleep and making it local-only until a patch drops.