Working on a brand new post for my series "a newbie's guide to self-hosting with #YunoHost" - showing people how to set up their own #GoToSocial microblogging instance.

Sorry it's been taking a while: I started over when I realized most people use subdomains... and I'm doing a thorough step-by-step explainer that any newbie could follow - I hope 😅

The whole series is available here:

🔗 : https://blog.elenarossini.com/a-newbies-guide-to-self-hosting-with-yunohost/

#SelfHosting #MySoCalledSudoLife #blog

Alt...

a screenshot of GoToSocial's installation page on YunoHost that reads: "GoToSocial Current version: 0.22.0~ynh1 Potential alternative to: Akkoma, Bluesky, Calckey, Mastodon, Misskey, Pleroma, Threads, X GoToSocial is a fast ActivityPub social network server, written in Golang. With GoToSocial, you can keep in touch with your friends, post, read, and share images and articles. All without being tracked or advertised to! The official documentation is at docs.gotosocial.org. Admins are strongly encouraged to read the documentation of this package after installing it. It is available in the webadmin under Applications > gotosocial (at the bottom) or here on the package's repository! Please note that this package uses the "i'm so tired" software license 1.0, please read it and accept it before proceeding with installation."

A few things to share, nginx: CVE-2026-42533 dropped yesterday 2026-07-15. It is fixed in nginx 1.31.3, also released yesterday. CVSS 8.1 or 9.2 depending on the nginx version. It's a heap buffer overflow in the map directive when regex... regardless, it is unauthenticated, needs a custom HTTP request, can crash it or lead to code execution if Address space layout randomization (ASLR) is disabled, or bypassed. Don't disable memory randomization. Not sure how to bypass ASLR, I'll have to look into that.

glibc CVE-2026-5450 originally disclosed 2026-04-20 so it's "not new." What's new is the SSVC exploitation flag flipping to "poc" within the last 21 days meaning a proof-of-concept surfaced recently for an April CVE, which is the "weaponized old CVE" pattern we see regularly. No vendor patch exists? Maybe i'm missing it. CVSS 9.8, scanf %mc off-by-one heap overflow with an explicit width >1024... real-world exposure is low even with a PoC out.

Debian 13.6 was released 2026-07-11. It's a point release, bundled a ton of security advisories including and an expired Secure Boot CA fix. It's the routine patch cycle.

Make it so.

#minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec #Exploit

Habt ihr eine Idee, welche #OpenSource gerne auch #SelfHosting Lösung als eine Art Reisetagebuch geeignet ist?

AdventureLog bekomme ich beim besten Willen nicht zum Laufen und wäre evtl. auch etwas overkill.

Im Prinzip möchte mein Papa ähnlich dem WhatsApp Status immer mal wieder Bilder / Text seiner Fahrrad-Trips posten die nicht unbedingt voll öffentlich sondern halt "Seinen Kontakten" oder Leuten mit Link dazu geteilt werden können.
#FragFedi #Linux #FOSS #Reise #Tagebuch

📝 Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy // hofstede.it

https://blog.hofstede.it/hosting-dokuwiki-on-freebsd-with-bastille-nginx-and-caddy/

#freebsd #bsd #batille #nginx #caddy #selfhosting

Have setup a server with #YunoHost and really liking it so far. It gives me the #Selfhosting projects that I want that I can manage now that selfhosting is a little burdensome with my version Parkinson's. I was considering downsizing my selfhosting menu because I was afraid of catastrophic loss due to poor digit control of my hands and using the terminal for even the most simple tasks. May soon migrate my Mastodon instance... I have all this bandwidth due to needing business class internet in my home. Hate to waste it, not to mention I have unlimited storage space because due to selfhosted hardware. @yunohost

Have setup a server with #YunoHost and really liking it so far. It gives me the #Selfhosting projects that I want that I can manage now that selfhosting is a little burdensome with my version Parkinson's. I was considering downsizing my selfhosting menu because I was afraid of catastrophic loss due to poor digit control of my hands and using the terminal for even the most simple tasks. May soon migrate my Mastodon instance... I have all this bandwidth due to needing business class internet in my home. Hate to waste it, not to mention I have unlimited storage space because due to selfhosted hardware. @yunohost

I built Kollect because browser tabs are a terrible reading list.

It’s a native Plasma 6 link collector written in C++/Qt/Kirigami: plain TOML files by default, optional self-hosted FastAPI/SQLite storage, KWallet secrets, MiniMax M3 metadata enrichment, and a proper Fedora RPM.

Small, inspectable software that solves one problem well.

https://blog.hofstede.it/kollect-the-native-kde-link-collector-i-built-for-myself/

#KDE #Linux #SelfHosting #Qt #Development

You Were Right: Here's the Better Way to Do Homelab HTTPS #homelab #selfhosting
Watch here: https://youtu.be/XEltHEZU6aE

as someone with essentially no web development experience, but who would like to learn the fundamentals, what modern, lightweight frameworks exist that I should check out? Or should I just do some raw html and javascript stuff?

I'm very partial to simple, efficient design that can be served from low-end hardware. My use-case is for self-hosting some projects and wiki pages, including a small e-commerce shop for custom electronics. I've written a tiny amount of html, but css makes me throw up a bit in my mouth.

my buddy has offered to "help" with his Fable access, and this is a cry for help.

#selfhosting #webdev

Auf meinem Schreibtisch steht eine vollständige Cloud.
Kleiner als ein Taschenbuch, leiser als der Lüfter neben dir, sparsamer als eine Glühbirne. Kein Abo, keine fremde Cloud, keine Blackbox. Sie gehört mir.

Möglich macht das eine Architektur, die erwachsen geworden ist: ARM, energieeffizient, leise. Dazu eine schlanke, quelloffene Software aus Berlin @OpenCloud@opencloud.eu , die die Daten dort lässt, wo man sie hinlegt.

Ein neuer Artikel über ARM, den aus den Fugen geratenen Speichermarkt, die Freiheit, sich selbst auszusperren, und ein Mini-Rechenzentrum, das aussehen will wie ein kleines Gebäude.

Viel Spass beim Lesen!
👉 https://www.pandolin.io/die-cloud-die-in-eine-hand-passt/

#DigitaleSouveränität #SelfHosting #OpenCloud #ARM #Fediverse #Linux #FOSS #OpenSource

Alt...

Illustration des Pandolin-Maskottchens, ein Pangolin, der an einem Schreibtisch ein kleines leuchtendes Mini-Rechenzentrum in den Klauen hält

Why rent a server when you can own one? #selfhosting is not just about control, it's about cutting the corporate umbilical cord.

Cloud services are profitable for big tech, but the hidden costs of data privacy breaches and vendor lock-in hit hard. Self-hosting offers independence and resilience in the digital age.

selfhosting clouddependence digitalfreedom

https://wopr.systems/?utm_campaign=meme_nodez3r0&utm_medium=social&utm_source=mastodon

Alt...

Cloud services are profitable for big tech, but the hidden costs of data privacy breaches and vendor lock-in hit hard. Self-hosting offers independence and resilience in the digital age.

GitHub gehört Microsoft. Zeit für einen Ausweg.

GitHub gehört seit 2018 Microsoft, unterliegt dem US Cloud Act und lässt Copilot seit April 2026 standardmäßig mit deinem Code trainieren, wenn du nicht widersprichst. Codeberg ist die naheliegende Alternative: gemeinnützig, europäisch, ohne Konzern im Rücken. Reden wir drüber!

https://www.chrislo.de/blog/2026-07-12-12-49-32-github-gehoert-microsoft-zeit-fuer-einen-ausweg/

#chrislo #DigitaleUnabhängigkeit #ServerInfrastruktur #GitHub #Codeberg #GitLab #Microsoft #OpenSource #CloudAct #Copilot #SelfHosting

Something really important happened. My wife approved #iCloud to #Immich migration. She tried the mobile app and liked it much more than the iOS Photos app.
Now the only thing we need is to wait for the Immich sharing overhaul release around version 3.1 or 3.2: https://github.com/immich-app/immich/pull/27437

#SelfHosted #selfhosting #selfhost #homelab #PhotoLibrary #waf

What do self-hosting folks use on their phone (android) for email and calendar integration?

I'm on k9mail and use nextcloud for calendar. I'd really like to accept meeting invite/updates on my phone. I can open the ics file but that seems to struggle with timezones and other small issues.

#SelfHosting #FediHelp

GitHub gehört Microsoft. Zeit für einen Ausweg.

GitHub gehört seit 2018 Microsoft, unterliegt dem US Cloud Act und lässt Copilot seit April 2026 standardmäßig mit deinem Code trainieren, wenn du nicht widersprichst. Codeberg ist die naheliegende Alternative: gemeinnützig, europäisch, ohne Konzern im Rücken. Reden wir drüber!

https://www.chrislo.de/blog/2026-07-12-12-49-32-github-gehoert-microsoft-zeit-fuer-einen-ausweg/

#chrislo #DigitaleUnabhängigkeit #ServerInfrastruktur #GitHub #Codeberg #GitLab #Microsoft #OpenSource #CloudAct #Copilot #SelfHosting

#selfhosting enlighten me, how do I secure, and I mean THOROUGHLY secure, a public facing service (say forgejo/ntfy/matrix homeserver) etc properly, so that I can actually expose them to the public internet and inbound connections?

I am not yet hosting such services, mostly because I'm worried I'll badly mess up somewhere

BUT I really, really want to do it and do it well, all the kubernetes, containers, VM and orchestration talk sounds really nice!

(While we're at it, can someone teach me the difference between a homelab and a homeserver?)

#selfhosted #selfhosting #homeserver #homelab #kubernetes #orchestration #containers #vms

#Selfhosting life hack

Document the fuck out of your setup.
Ive just spend 15 minutes finding where one of my Zone managers is (They merged with another firm)

Qual será a próxima? Desconfiemos de todo projeto com esse modelo híbrido "Community Edition" altamente merdificável. Tentemos focar no software livre e não nos deixemos enganar pela conversa corporativa do chamado código aberto enquanto convém.

Felizmente, o que foi desenvolvido até então está publicado sob #AGPLv3, algo que, por nos conceder as quatro liberdades essenciais para isso, garante à comunidade que qualquer parte interessada assuma a liderança do projeto para tirar o barco da deriva, digo, continuar seu desenvolvimento como derivado. Parece até que isso já começou. Contudo, como há outros projetos mais ativos com propósitos semelhantes, não há certeza de que seu desenvolvimento continuará.

A notícia já é antiga, de meses atrás, mas tomei ciência apenas hoje. A primeira vez que tive contato com esse programa e o utilizei foi muito recentemente, ao implantar meu servidor #EntePhotos, de cuja documentação MinIO faz parte como armazenamento local. Agora vai ter que ficar assim, na última versão lançada, ao menos por algum tempo. Estava cogitando usar MinIO para mais funções, mas vou deixá-lo apenas para o armazenamento de objetos locais do Ente mesmo. Já devia ter usado algum outro sistema de armazenamento com API compatível com S3. Não é interessante começar algo com um componente importante já descontinuado. Lembrete a mim mesmo: mais atenção a dependências, na próxima vez!

#MinIO #selfhosting #softwareLivre #blambers

#selfhosting #Garage #S3 #storage #blambers #AGPLv3 #SoftwareLivre

Hello Fediverse 👋

We’re building ForkMesh: a community-owned Git forge for public and private repos.

Host projects, mirror code across real machines, sign collaboration, and keep work reachable beyond outages, takedowns, or walled gardens.

Run a node. Start a repo. Mirror what matters.

https://forkmesh.com

#ForkMesh #Fediverse #Git #SelfHosting #OpenSource

I've cleaned up my Raspberry Pi selfhosting setup a bit. I'm using two, each in an Argon ONE V5 case with a 1TB NVME drive, running Raspberry Pi OS.

'one' is serving Nextcloud All-in-one, Immich and Vaultwarden via a Caddy reverse-proxy. All using Docker containers, Caddy as a custom build with my domain DNS provider added.

'two' is used as remote borg backup destination for 'one', and later a few monitoring tools.

All three sites are using a wildcard certificate for my domain, and I connect via WireGuard (on the router) when away from home.

Path of least resistance:

I've tried Podman, AlmaLinux, and running a manual install of Nextcloud on Ubuntu. This setup follows recommended installations methods, and gives me fewer things to worry about.

#selfhosting #raspberrypi #nextcloud #immich #vaultwarden #caddy #wireguard

Alt...

Photo of whiteboard with green text and drawings. Left: WireGuard, Caddy, Vaultwarden, Nextcloud, Immich and BorgBackup, each with a check mark. Right: a simple illustration showing server 'one' and 'two' and borg backup flow.

Sometimes newer is not better. At least not for the things that matter to you.

I benchmarked two OVH VPS in the same Zurich location. My current 2025 model with a 500 Mbit network against the newer 2027 model with 1 Gbit. Same AMD EPYC Genoa cores, same provider, nearly identical sysbench CPU scores.

Then the surprises started.
The older box pushes 6,612 MiB/s in memory tests, the newer one 932 MiB/s. That is 7x.
Random 4K reads: 1.32 million IOPS against 832k.
And the old model is even about 1 EUR cheaper.

For a Mastodon instance, databases, and Docker workloads, memory and disk beat extra bandwidth every time. So the shiny new VPS gets demoted to reverse proxy and backup duty, and this instance stays exactly where it is.

Benchmark before you migrate.

#SelfHosting #Mastodon #Fediverse #VPS #OVH #Benchmarks #Homelab #Blog #MastoAdmin

Alt...

Screenshot of the OVH control panel showing two active VPS in the EU-WEST-LZ-ZRH location: vps-817e781a.vps.ovh.net labeled vps-2027-model2.LZ and zrh-1.dol.ch labeled vps-2025-model1.LZ. Both marked Active, the model names underlined in red

@michael

> If you self-host something I’ve not mentioned here and think I’m missing out...

Additions on my list:

* Jellyfin: great media streaming server

* Immich: photo hosting server

* Vaultwarden: password manager

* Mastodon: mastodon, innit!

* greenbone / OpenVAS: vulnerability scanning

#selfhosting

* Wazuh: SIEM / alerting

My homelab now contains around 17 services that I host for myself and family - not counting reverse proxies and similar helpers that exist solely to ‘support the operation’.

#selfhost #selfhosting #HomeLab

A couple of people have asked me what I actually self host, so here is a list as of today:

https://blog.thms.uk/2026/07/self-hosted-services/?utm_source=mastodon

If you self-host something I’ve not mentioned here and think I’m missing out, I’d love to hear about it - especially anything that’s replaced a paid service you were glad to see the back of.

#selfhost #selfhosting #HomeLab

🚨 Security release: pages-server v0.3.4

If you run our Traefik plugin for Forgejo/Gitea static site hosting, please update now.

Fixes:
🔐 Auth bypass (High) — password-protected sites could be accessed without valid credentials when no authSecretKey was set
🛡️ Stored XSS + HTML injection (Medium) in login/error/redirect pages

v0.3.4 is secure by default — no config changes required.

https://github.com/sqcows/pages-server

#Forgejo #Gitea #Traefik #InfoSec #SelfHosting

Neuer Artikel im Blog:

Debian-Update von Bookworm auf Trixie - OK
Mastodon: LoadError: libicudata.so.72 not found

Warum ein unscheinbares Ruby Gem eine ganze Instanz lahmlegt - und wie man das langfristig verhindern kann.

https://just-stuff.blog/mastodon-charlock-holmes-icu-debian-trixie/

#Mastodon #Debian #Trixie #Ruby #SelfHosting #Linux

That’s frightening because #Garage will switch into a read-only mode in that case and brake #GlitchySocial #Mastodon instance.

So I need to replace my Asus PM42 with something with SATA and NVMe support. Also, something cheap. Also, something that would handle the same RAM Asus box uses currently.

#homelab #SelfHosted #selfhosting #selfhost #homeserver

Had a closer look, and #Authelia is too #LLM adjacent for my liking (contribution policy of "sure, as long as you shepherd the bots", multiple bots of the complex kind in the pull request review automation)

#SSO #SelfHosting

Was expecting a forgejo update on the 9th and yes, it is available. However, it has 3 security fixes, after the large gitea CVE drop the other day, was assuming there would be more. This leads me to think the codebase has diff'd enough that the high CVE scores are exclusively gitea vulns. Which I am reading are being exploited in the wild. So, public Gitea, start looking for indicators of compromise and get them patched!! #minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec #Exploit

New on the blog: Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy.

A deliberately small, database-free wiki: one application jail, central Caddy ingress, PHP-FPM over a Unix socket, and explicit nginx rules protecting DokuWiki’s private data.

The interesting part isn’t getting a page to render. It’s drawing clean security and backup boundaries.

https://blog.hofstede.it/hosting-dokuwiki-on-freebsd-with-bastille-nginx-and-caddy/

#FreeBSD #DokuWiki #BastilleBSD #SelfHosting #Caddy

As I threatened yesterday, I have completed work to migrate the "worth keeping" repositories I have from Github to a self-hosted Forgejo instance.

I have documented my reasoning and the instructions for converting your locals in this blog post.

My hope is that by showing this to be relatively trivial more people will make the decision to maintain their own online repository stores.

https://www.arcanalabs.ca/news/labnotes/peti/tapestry/model2/2026/07/09/migrating-to-forgejo.html

#blog #selfhosting #foss

It’s been 5 full days without me SSH-ing somewhere. I think it is a new record since I started my #homelab. I couldn't take it anymore and upgraded my #GlitchySocial Mastodon instance to 4.6.3 today. While on vacation. While away from servers.

#selfhost #SelfHosted #selfhosting #vacation #Mastodon #mastoadmin

Heyo Fedi friends!
Does anyone of you know a good self-hostable alternative to something like mailgun?

Boosts are greatly appreciated!

#fediask #selfhosting #mailing

Are you into 3D printing, self-hosting and the Fediverse?

If so you might want to look into Manyfold, a FOSS Fediverse platform which lets you upload and share 3D print models:

🌱 https://manyfold.app

You can follow the official accounts at:

🌱 @manyfold@3dp.chat (main)
🌱 @manyfold@makertube.net (videos)

You can host your own Manyfold server using the instructions at https://manyfold.app/get-started/installation (be warned though, installation does require a bit of tech skill).

#3DPrinting #SelfHosting #Fediverse #ActivityPub