#Selfhosting life hack

Document the fuck out of your setup.
Ive just spend 15 minutes finding where one of my Zone managers is (They merged with another firm)

Qual será a próxima? Desconfiemos de todo projeto com esse modelo híbrido "Community Edition" altamente merdificável. Tentemos focar no software livre e não nos deixemos enganar pela conversa corporativa do chamado código aberto enquanto convém.

Felizmente, o que foi desenvolvido até então está publicado sob #AGPLv3, algo que, por nos conceder as quatro liberdades essenciais para isso, garante à comunidade que qualquer parte interessada assuma a liderança do projeto para tirar o barco da deriva, digo, continuar seu desenvolvimento como derivado. Parece até que isso já começou. Contudo, como há outros projetos mais ativos com propósitos semelhantes, não há certeza de que seu desenvolvimento continuará.

A notícia já é antiga, de meses atrás, mas tomei ciência apenas hoje. A primeira vez que tive contato com esse programa e o utilizei foi muito recentemente, ao implantar meu servidor #EntePhotos, de cuja documentação MinIO faz parte como armazenamento local. Agora vai ter que ficar assim, na última versão lançada, ao menos por algum tempo. Estava cogitando usar MinIO para mais funções, mas vou deixá-lo apenas para o armazenamento de objetos locais do Ente mesmo. Já devia ter usado algum outro sistema de armazenamento com API compatível com S3. Não é interessante começar algo com um componente importante já descontinuado. Lembrete a mim mesmo: mais atenção a dependências, na próxima vez!

#MinIO #selfhosting #softwareLivre #blambers

#selfhosting #Garage #S3 #storage #blambers #AGPLv3 #SoftwareLivre

Hello Fediverse 👋

We’re building ForkMesh: a community-owned Git forge for public and private repos.

Host projects, mirror code across real machines, sign collaboration, and keep work reachable beyond outages, takedowns, or walled gardens.

Run a node. Start a repo. Mirror what matters.

https://forkmesh.com

#ForkMesh #Fediverse #Git #SelfHosting #OpenSource

I've cleaned up my Raspberry Pi selfhosting setup a bit. I'm using two, each in an Argon ONE V5 case with a 1TB NVME drive, running Raspberry Pi OS.

'one' is serving Nextcloud All-in-one, Immich and Vaultwarden via a Caddy reverse-proxy. All using Docker containers, Caddy as a custom build with my domain DNS provider added.

'two' is used as remote borg backup destination for 'one', and later a few monitoring tools.

All three sites are using a wildcard certificate for my domain, and I connect via WireGuard (on the router) when away from home.

Path of least resistance:

I've tried Podman, AlmaLinux, and running a manual install of Nextcloud on Ubuntu. This setup follows recommended installations methods, and gives me fewer things to worry about.

#selfhosting #raspberrypi #nextcloud #immich #vaultwarden #caddy #wireguard

Alt...

Photo of whiteboard with green text and drawings. Left: WireGuard, Caddy, Vaultwarden, Nextcloud, Immich and BorgBackup, each with a check mark. Right: a simple illustration showing server 'one' and 'two' and borg backup flow.

Sometimes newer is not better. At least not for the things that matter to you.

I benchmarked two OVH VPS in the same Zurich location. My current 2025 model with a 500 Mbit network against the newer 2027 model with 1 Gbit. Same AMD EPYC Genoa cores, same provider, nearly identical sysbench CPU scores.

Then the surprises started.
The older box pushes 6,612 MiB/s in memory tests, the newer one 932 MiB/s. That is 7x.
Random 4K reads: 1.32 million IOPS against 832k.
And the old model is even about 1 EUR cheaper.

For a Mastodon instance, databases, and Docker workloads, memory and disk beat extra bandwidth every time. So the shiny new VPS gets demoted to reverse proxy and backup duty, and this instance stays exactly where it is.

Benchmark before you migrate.

#SelfHosting #Mastodon #Fediverse #VPS #OVH #Benchmarks #Homelab #Blog #MastoAdmin

Alt...

Screenshot of the OVH control panel showing two active VPS in the EU-WEST-LZ-ZRH location: vps-817e781a.vps.ovh.net labeled vps-2027-model2.LZ and zrh-1.dol.ch labeled vps-2025-model1.LZ. Both marked Active, the model names underlined in red

@michael

> If you self-host something I’ve not mentioned here and think I’m missing out...

Additions on my list:

* Jellyfin: great media streaming server

* Immich: photo hosting server

* Vaultwarden: password manager

* Mastodon: mastodon, innit!

* greenbone / OpenVAS: vulnerability scanning

#selfhosting

* Wazuh: SIEM / alerting

My homelab now contains around 17 services that I host for myself and family - not counting reverse proxies and similar helpers that exist solely to ‘support the operation’.

#selfhost #selfhosting #HomeLab

A couple of people have asked me what I actually self host, so here is a list as of today:

https://blog.thms.uk/2026/07/self-hosted-services/?utm_source=mastodon

If you self-host something I’ve not mentioned here and think I’m missing out, I’d love to hear about it - especially anything that’s replaced a paid service you were glad to see the back of.

#selfhost #selfhosting #HomeLab

🚨 Security release: pages-server v0.3.4

If you run our Traefik plugin for Forgejo/Gitea static site hosting, please update now.

Fixes:
🔐 Auth bypass (High) — password-protected sites could be accessed without valid credentials when no authSecretKey was set
🛡️ Stored XSS + HTML injection (Medium) in login/error/redirect pages

v0.3.4 is secure by default — no config changes required.

https://github.com/sqcows/pages-server

#Forgejo #Gitea #Traefik #InfoSec #SelfHosting

Neuer Artikel im Blog:

Debian-Update von Bookworm auf Trixie - OK
Mastodon: LoadError: libicudata.so.72 not found

Warum ein unscheinbares Ruby Gem eine ganze Instanz lahmlegt - und wie man das langfristig verhindern kann.

https://just-stuff.blog/mastodon-charlock-holmes-icu-debian-trixie/

#Mastodon #Debian #Trixie #Ruby #SelfHosting #Linux

That’s frightening because #Garage will switch into a read-only mode in that case and brake #GlitchySocial #Mastodon instance.

So I need to replace my Asus PM42 with something with SATA and NVMe support. Also, something cheap. Also, something that would handle the same RAM Asus box uses currently.

#homelab #SelfHosted #selfhosting #selfhost #homeserver

Had a closer look, and #Authelia is too #LLM adjacent for my liking (contribution policy of "sure, as long as you shepherd the bots", multiple bots of the complex kind in the pull request review automation)

#SSO #SelfHosting

Was expecting a forgejo update on the 9th and yes, it is available. However, it has 3 security fixes, after the large gitea CVE drop the other day, was assuming there would be more. This leads me to think the codebase has diff'd enough that the high CVE scores are exclusively gitea vulns. Which I am reading are being exploited in the wild. So, public Gitea, start looking for indicators of compromise and get them patched!! #minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec #Exploit

New on the blog: Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy.

A deliberately small, database-free wiki: one application jail, central Caddy ingress, PHP-FPM over a Unix socket, and explicit nginx rules protecting DokuWiki’s private data.

The interesting part isn’t getting a page to render. It’s drawing clean security and backup boundaries.

https://blog.hofstede.it/hosting-dokuwiki-on-freebsd-with-bastille-nginx-and-caddy/

#FreeBSD #DokuWiki #BastilleBSD #SelfHosting #Caddy

As I threatened yesterday, I have completed work to migrate the "worth keeping" repositories I have from Github to a self-hosted Forgejo instance.

I have documented my reasoning and the instructions for converting your locals in this blog post.

My hope is that by showing this to be relatively trivial more people will make the decision to maintain their own online repository stores.

https://www.arcanalabs.ca/news/labnotes/peti/tapestry/model2/2026/07/09/migrating-to-forgejo.html

#blog #selfhosting #foss

It’s been 5 full days without me SSH-ing somewhere. I think it is a new record since I started my #homelab. I couldn't take it anymore and upgraded my #GlitchySocial Mastodon instance to 4.6.3 today. While on vacation. While away from servers.

#selfhost #SelfHosted #selfhosting #vacation #Mastodon #mastoadmin

Heyo Fedi friends!
Does anyone of you know a good self-hostable alternative to something like mailgun?

Boosts are greatly appreciated!

#fediask #selfhosting #mailing

Are you into 3D printing, self-hosting and the Fediverse?

If so you might want to look into Manyfold, a FOSS Fediverse platform which lets you upload and share 3D print models:

🌱 https://manyfold.app

You can follow the official accounts at:

🌱 @manyfold@3dp.chat (main)
🌱 @manyfold@makertube.net (videos)

You can host your own Manyfold server using the instructions at https://manyfold.app/get-started/installation (be warned though, installation does require a bit of tech skill).

#3DPrinting #SelfHosting #Fediverse #ActivityPub

Curious what kind of luck people have had running a single-user, self-hosted @gotosocial instance instead of joining a larger shared node.

With relays in GotoSocial, my feed is great—I can discover pretty much everything I care about. My bigger question is the *other* direction. I've heard some instances de-prioritize or outright limit federation from low-volume, self-hosted, or otherwise unknown nodes.

If you're mostly consuming content, I imagine it's a non-issue. But if you actually want to participate in conversations, are you giving up reliable interaction by running your own tiny instance?

Curious to hear real-world experiences. #Mastodon #Fediverse #SelfHosting #GoToSocial

How to Install #PeerTube on #Ubuntu VPS

This article provides an in-depth guide demonstrating how to install PeerTube on Ubuntu VPS.
What is PeerTube?
PeerTube is a decentralized, federated video hosting platform powered by WebTorrent and ActivityPub. It enables users to self-host video services and interact with other PeerTube ...
Continued 👉 https://blog.radwebhosting.com/install-peertube-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #nodejs #selfhosted #selfhosting #decentralized #installguide #fediverse #opensource #vpsguide #letsencrypt #videostreaming

Is this the moment where I get annoyed enough with state and quirks of configuration management tools, and switch my #OpenBSD boxes to somewhat more hands-off #NixOS ? 🤔

#SysAdmin #HomeLab #SelfHosting

Because I'm a developer at heart, I had a fascinating late evening self hosting some apps I have never self hosted before.

Because I'm Cybersecurity by trade, I wrapped up my evening by physically disconnecting my the network cable.

Have a great evening / early morning, everyone.

#devops #developer #cybersecurity #selfhosting #humor

💬🌐 The Lounge: Clientul web IRC modern, perfect pentru self-hosting

În ciuda ascensiunii platformelor moderne de chat, protocolul IRC (Internet Relay Chat) rămâne una dintre cele mai rezistente și apreciate rețele de comunicare din lumea open-source și a comunităților tehnice. Totuși, clienții IRC tradiționali pot părea învechiți pentru utilizatorul obișnuit. Aici intervine The Lounge, un client web IRC modern, conceput special pentru a fi găzduit pe cont propriu (self-hosting), aducând experiența clasică de chat la standardele vizuale și funcționale din prezent.

The Lounge funcționează ca o aplicație web progresivă (PWA), oferind utilizatorilor o interfață similară cu cea a platformelor Discord sau Slack, dar păstrând în totalitate independența și libertatea oferite de IRC.

Iată principalele caracteristici care fac din The Lounge soluția ideală pentru comunități și pasionații de self-hosting:

🔹 Sesiuni persistente (Push Notifications & Bouncer Integrat):
Unul dintre cele mai mari dezavantaje ale IRC-ului clasic este că pierzi mesajele dacă te deconectezi. The Lounge rezolvă nativ această problemă: rulând permanent pe serverul tău, el rămâne conectat la canale în locul tău. Când deschizi aplicația pe telefon sau pe calculator, ești întâmpinat de întregul istoric al conversațiilor ratate, beneficiind în același timp de notificări push în timp real.

🔹 Interfață modernă, adaptivă și suport PWA:
Interfața grafică este curată, minimalistă și complet adaptivă (responsive), funcționând impecabil atât pe monitoare mari de desktop, cât și pe ecranele telefoanelor mobile. Fiind o aplicație Web Progresivă (PWA), The Lounge poate fi instalat direct pe smartphone-ul tău ca o aplicație nativă, direct din browser, fără a fi nevoie de un magazin de aplicații.

🔹 Previzualizări media bogate:
Uită de link-urile simple din textul chat-ului. The Lounge transformă experiența IRC prin adăugarea de previzualizări automate direct în fereastra de conversație. Imaginile, videoclipurile de pe YouTube, tweet-urile și fișierele audio trimise pe canal sunt afișate sub formă de carduri media bogate, făcând navigarea mult mai interactivă.

🔹 Management multi-utilizator și instalare simplă:
Aplicația este construită pe Node.js și poate fi instalată extrem de ușor, fie direct prin managerul de pachete npm, fie printr-un container Docker în doar câteva secunde. Administratorii pot configura serverul în mod „privat” (doar pentru utilizatorii înregistrați de ei, ideal pentru echipe sau grupuri de prieteni) sau în mod „public” (funcționând ca un client web deschis pentru oricine vrea să se conecteze rapid la o anumită rețea).

The Lounge demonstrează că protocoalele clasice pot fi revitalizate cu succes prin tehnologii web moderne, oferind o alternativă sigură, privată și extrem de elegantă la platformele de chat centralizate de astăzi.

#OpenSource #TheLounge #IRC #SelfHosting #WebClient #NodeJS #Docker #TechNews #LinuxEasy

How I Set Up .local Domains with Valid HTTPS in My Homelab #homelab #selfhosting
Watch here: https://youtu.be/EVnwnFY7C1w

I'm not running Gitea, but Forgejo. Here is a write up of the Gitea CVE's that are still embargoed for Forgejo. Regardless, they need to be patched! Make it a priority.
https://hivesecurity.gitlab.io/blog/gitea-forgejo-nine-cves-1263-security-release-2026/ #minimalist
#Linux #Selfhosting #selfhosted #selfhost #InfoSec
#Exploit

Pretty funny that the most often requested file from my small kitchen-server is "/robots.txt". Pretty surprising, since a lot of LLM-bots usually ignores this file
The other requested files are just some js crap, which is obviously don't exist on my server — possibly some script-kiddies tried to find some entrypoint (see "config.js" and "env.js").

The funny part: the referrer URLs. Hope, the default content of NetBSD /etc/passwd from inside the sandbox was made someone happy

#selfhosting #NetBSD

Alt...

A cwm with 3 windows. On the top window there is an xterm with ssh client connected to the my server. Inside the window there are some lines from /var/log/nginx/ from inside sandbox (mostly the list of files and gzipped files in this catalog). On the middle window there is a GoAccess web interface with list of most-requested static files from my server. There are: /robots.txt (2.6 MiB of traffic), /config.js (1 MiB), /.env.txt (588 KiB), /env.txt (300.3 KiB), /app.js (316.4 KiB), /owa/auth/x.js (134.4 KiB).

Alt...

The screenshot of cwm with a Librewolf window on top. It displays the GoAccess web interface with a list of referrer URLs, from requests to my server. There are: https://MyIP/ (47078 hits), http://MyIP:443/ (25507 hits), https://MyIP (3018 hits), () { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd (621 hits), https://MyIP/WebInterface/login.html (434 hits) and https://myhostname (291 hits). On the two other windows on the bottom there are: xterm window with ssh client connected to my server and an Emacs frame with log of actions made with server.

Finally started the process of migrating off cloudflare to a vps thanks to towonel. Everything I've migrated seems to be working better to ham on CF, and I'm reasonably confident in crowdsec+coraza+anubis as my security stack.

#homelab #selfhosted #selfhosting

so i tried to make a nested proxmox vgpu thingy. but it doesnt work cause when i enabled viommu on the vm the nvidia driver fails(RmInitAdapter failed) but when i disable viommu mdev doesnt work cause it needs /sys/kernel/iommu_groups/ which only exsists with iommu. i fucking hate this bullshit.

#proxmox #vgpu #viommu #iommu #gpu #nvidia #server #homelab #selfhosting #vm #qemu #pciepassthrough #mdev

Good morning Fedi friends!

On the agenda today: writing a first draft explaining to newbies how to self-host #GoToSocial with the help of #YunoHost.

Now, to do a step-by-step installation guide I need to create a brand new account, so I can document everything.

I'm a little stressed out thinking of which domain name to use and the fact it would be something like my 20th - yes TWENTIETH - ActivityPub account!!! 🫠

The things you do for the love of the fediverse 😅​

#MySoCalledSudoLife #SelfHosting

A couple things this morning. CVE-2026-46242 "Bad Epoll" Linux kernel, CVSS 7.8, local privilege escalation was already mentioned CVE published around May.
1: What's new today: it is now fully weaponized and publicly written up. It's a use-after-free race in the kernel's eventpoll subsystem (ep_remove()/ep_remove_file()). An unprivileged local user can win a race condition and get root.

2: Affected: kernel 5.10 through 6.11.
3: The Attack surface is broad because epoll underlies nginx, Node.js, Python asyncio, databases, Android's event loop.

So, basically anything async I/O.
An App can be the foot in the door, the race condition can lead to root.

I'm running Kernel 6.12.94+deb13-amd64. So driving on.

#minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec #Exploit

Good morrow Fediverse,

My name is Ben Looper, I'm a software engineer of five years currently living in Houston, TX...but not for much longer!
My wife and I are moving up to Calgary, AB, and I'm taking the opportunity to make some positive changes in my life, one of the first being to write more.

I have a few projects that my ADHD brain bounces between, and I want to begin fearlessly talking about them here, rather than verbal vomiting about them to whatever poor soul asks me about them.

Maybe (hopefully) these smaller updates will cascade into longer, more detailed pieces, but for now I'll be very happy to just share bits and bites, and to engage with others on stuff they're working on.

That last point specifically is what I'm most excited for - I don't have many people in my life that I can full-blown nerd out about this stuff with, and I really hope that I can find a community here to do that with.

Thanks, and happy hacking 📎
#Introduction #NewHere #Homelab #SelfHosting #NixOS #Sysadmin #calgary

Dear CGNAT and GPON 1:64 splits, fuck you.

#SelfHosting

Neuer Blog-Artikel

podman kennt keine Upgrade-Funktion wie docker? Brauchen wir auch nicht.

Im neuen howto machen wir aus einem pod einen sauberen systemd-service: startet beim booten, hält sich per auto-update selbst aktuell und rollt bei einem kaputten Image automatisch zurück.

Und alles rootless.

https://just-stuff.blog/podman-pod-automatisieren/

#Podman #Linux #SelfHosting #systemd #Container #FOSS #rootless

FOSS NEWS

Firefox is adding Vulkan video decoding for Nvidia GPUs:
https://www.omgubuntu.co.uk/2026/07/firefox-vulkan-video-decoding-nvidia

Brave Says This is Not a Privacy Feature, But Using Containers Has Its Perks:
https://feed.itsfoss.com/link/24361/17372577/brave-browser-containers

Introducing Lumo 2.0: advanced reasoning models, image recognition and generation, improved web search, memory collection, custom Lumos:
https://proton.me/blog/lumo-2
(Good to see a privacy focused LLM service catching up to the big guys, it's nice to have a non-invasive online service for those who don't have the hardware to run powerful local models, including image generation models)
(It still sucks at answering Linux-related questions though unfortunately)

OBS Studio 32.2.0 Beta 3 Released: Audio Mixer Fixes and Linux Polish:
https://www.linuxcompatible.org/story/obs-studio-3220-beta-3-released-audio-mixer-fixes-and-linux-polish/

Notesnook 3.4 brings an Inbox API, enhanced desktop security, unique URL slugs, and more:
https://alternativeto.net/news/2026/6/notesnook-3-4-brings-an-inbox-api-enhanced-desktop-security-unique-url-slugs-and-more/

Collabora Office 26.04 Keeps AI Optional and Refines Writer and Calc:
https://feed.itsfoss.com/link/24361/17371813/collabora-office-26-04

Ente makes business metrics public, sharing revenue and user counts:
https://alternativeto.net/news/2026/7/ente-makes-business-metrics-public-sharing-revenue-and-user-counts/

Arti 2.5 brings stable Counter Galois Onion, default Congestion Control and security fixes:
https://alternativeto.net/news/2026/7/arti-2-5-brings-stable-counter-galois-onion-default-congestion-control-and-security-fixes/

Sick of AI Slop, Former Microsoft Engineer Built a New, AI-less Notepad:
https://feed.itsfoss.com/link/24361/17371605/tinyretropad-notepad-clone

Krita AI Diffusion 1.52.1 Released to Fix Server Connection Bug in Local AI Art Plugin:
https://www.linuxcompatible.org/story/krita-ai-diffusion-1521-released-to-fix-server-connection-bug-in-local-ai-art-plugin/

Immich 3.0 adds non-destructive editing & OCR on mobile, workflows, and improved backups:
https://alternativeto.net/news/2026/7/immich-3-0-adds-non-destructive-editing-and-ocr-on-mobile-workflows-and-improved-backups/

Kodi 22 Beta Improves Linux Support for Remote Keys and HDR Profile Support:
https://9to5linux.com/kodi-22-beta-improves-linux-support-for-remote-keys-and-hdr-profile-support

ClamAV Unofficial Signatures v8.0.0 Drops After Five Years with Official Docker and ClamAV 1.x Support:
https://www.linuxcompatible.org/story/clamav-unofficial-signatures-v800-drops-after-five-years-with-official-docker-and-clamav-1x-support/

(more FOSS news in comment)

#WeeklyNews #OpenSource #FOSSNews #FOSS #OpenSourceNews #News #Firefox #Brave #Lumo #ProtonLumo #AI #OBS #OBSStudio #Notesnook #Collabora #CollaboraOffice #Ente #Arti #Tor #TinyRetroPad #KritaAIDiffusion #Immich #Kodi #ClamAV #SelfHosting #LLM #Krita #WebBrowser #Browser #FosseryTech