jrollans.com is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.

This server runs the snac software and there is no automatic sign-up process.

Site description
These are the voyag... uh, things I post about.
Admin email
jrollans@gmail.com
Admin account
@jrollans@jrollans.com

Search results for tag #selfhosting

AodeRelay boosted

[?]VibeOps » 🌐
@vibeops@techhub.social

Bin seit 3 Jahren Vorstand vom Förderverein Grundschule Betzenberg eV :P

Wir organisieren immer kleinere Aktionen in der Schule - wiederkehrende Abläufe

4 Personen im Vorstand (Kassenwart + Schriftführer)

IT-Situation:
- Homepage bei Schulträger mit gehostet (Wordpress 🐌 )
- Jeder hat sein Daten bei sich liegen

Ich hab Kudelmudel an Daten wo ich nie die richtige Datei finde

Viel Reibung in den Abläufen - unstrukturierte Arbeitsweisen(letztes Protkoll von Sitzung liegt in WhatsApp)

Hand hoch wer es kennt ✋

Jetzt im Urlaub und am Vorbereiten der Einschulungsfeier - mit zu viel am ende der Woche - ist es passiert...

Ich hab das was ich die letzten Monate auf Arbeit gelernt habe auf mich selbst angewendet...

Lets do vibeops in förderverein

1. Schritt - ionos vps s gemietet
2. Schritt - drauf installiert
3. Schritt - zur party eingeladen
4. Schritt - Homepage gebaut
5. Schritt - mit / eine einfachen gemeinsamen Storage angelegt
6. Schritt - hermes mit cronjobs zur selbstverwaltung eingestellt (update / watchdog)
7. Schritt - aus meinem Datenmüll aus verschiedenen Dateien eine neue parallel Workflow basierte Ordnerstruktur aufgebaut (na klar mit hermes) - kann man auch noch als WebApp weiter spinnen

fvgs-betzenberg.de/

Ein bissel Fehler behoben und das Mitglied werden PDF interaktiv erstellen lassen

Arbeitszeit 3h

Wenn man das jetzt weiter spinnt können wir uns da jetzt unsere mitgliederdatenbank anlegen - vllt irgendwann die buchhaltung darüber laufen lassen

Monatlich 1€ für VPS - 0,50€ für die URL

jetzt müssen die anderen Vorstände sich das mal anschauen

krass was mal wieder aus eine impuls passieren kann - früher irgendwie joomla augesetzt und dann die lust verloren - jetzt booooooom

    [?]BjoernAusGE » 🌐
    @bjoern@social.sengotta.net

    @nfilipes @8none1 really thanks for the interesting episode, but i would like to share my thought about the Kodi / Jellyfin topic. You are right Kodi is a configuration nightmare but comparing it to Jellyfin isnt the correct approach.
    While Kodi is a very customizable local Mediaplayer you are comparing it to Jellyfin which is a complete client server infrastructure.
    Someone who already has problems with Kodi's overwhelming settings will not manage to setup a Jellyfin server either.
    And another thing about Jellyfin: althought it is a great project we should not forget that they build up onto min. 5 years Emby development before they forked from that (which then went closed source). For quite some time there was no real evolution in terms of the server and the clients also tend to be quite bad. Thats the reason i stick with Emby till the day.
    #kodi #jellyfin #emby #selfhosting

      [?][nate@social0 ~]$ :idle: » 🌐
      @gangrif@social.undrground.org

      next in my digital self reliance journey. Notes. I was using google keep, and i'd like to switch to something I own.

      Tried nextcloud notes, gets about 90% there. The web UI is fine, but the mobile experience isnt great.

      Blinko showed promise, ran it for a few weeks and found it to be a little finnicky, and no mobile app. I was using it via a web app on my phone and it turned out to be a bit flaky.

      So now I'm trying Notesnook. Which shows a lot of promise so far.

      Anyone out there have suggestions of other apps i should look at?

        [?]wendythedruid [She/Her] » 🌐
        @wendythedruid@thistlenfern.org

        Friday I talk the week through out loud, starting with the arithmetic of a primary that cost somebody sixty-five million dollars to lose.

        It goes out on a server I own and pay for, first. Not a platform's room. Mine.

        twp.ai/E5Eu75 · youtube.com/@WendyTheDruid · twp.ai/4huPix

        What do you want me to actually chew on Friday? Come by and tell me. I listen.

        Live Politics - Mon & Fri @ 3PM: https://live.thistleandmoss.org / https://www.youtube.com/@WendyTheDruid

Live Gaming Streams - Nightly at 830PM: https://live.thistleandmoss.org / https://www.youtube.com/@WendyTheDruid / https://twitch.tv/wendythedruid

        Alt...Live Politics - Mon & Fri @ 3PM: https://live.thistleandmoss.org / https://www.youtube.com/@WendyTheDruid Live Gaming Streams - Nightly at 830PM: https://live.thistleandmoss.org / https://www.youtube.com/@WendyTheDruid / https://twitch.tv/wendythedruid

        Live Politics - Mon & Fri @ 3PM: https://live.thistleandmoss.org / https://www.youtube.com/@WendyTheDruid

Live Gaming Streams - Nightly at 830PM: https://live.thistleandmoss.org / https://www.youtube.com/@WendyTheDruid / https://twitch.tv/wendythedruid

        Alt...Live Politics - Mon & Fri @ 3PM: https://live.thistleandmoss.org / https://www.youtube.com/@WendyTheDruid Live Gaming Streams - Nightly at 830PM: https://live.thistleandmoss.org / https://www.youtube.com/@WendyTheDruid / https://twitch.tv/wendythedruid

          fedicat boosted

          [?]Grow Your Own Services 🌱 » 🌐
          @homegrown@social.growyourown.services

          If you're into photography, there is a free open Flickr-style photography platform which you can host yourself called Vernissage. It also has Fediverse compatibility so people can follow Vernissage accounts from Mastodon, Pixelfed etc. More info at:

          🌱 joinvernissage.org

          You can follow at:

          🌱 @vernissage

          For techy people who want to install their own Vernissage manually, docs are at:

          🌱 docs.joinvernissage.org/docume

            AodeRelay boosted

            [?]Elena Rossini on GoToSocial ⁂ » 🌐
            @elena@aseachange.com

            Come join me and @Gina in Luxembourg this October!

            #OSCL26 (Open Source Conference Luxembourg) has a brand new track devoted to “Decentralized Technologies for Digital Sovereignty”:

            🔗: https://conference.opensource.lu

            We are looking for speakers interested in discussing these topics:

            • Federated technologies in the public sector
            • Decentralized platforms for video, chat, communications, code, etc.
            • Fediverse successes and challenges
            • Self-hosted solutions for individuals and institutions
            • Interoperability for resilience

            Apply here:

            🔗: https://pretalx.com/open-source-conference-luxembourg-2026/cfp

            The conference takes place on Wednesday October 7th in Belval, Luxembourg.

            Please share! 🚀​

            #Fediverse #FediAdvocacy #conferences #OpenSource #FOSS #FLOSS #TheFutureIsFederated #selfhosting #interoperability #DigitalSovereignty #activism

              [?]clutch_lever » 🌐
              @clutch_lever@mastodon.social

              @gedankenstuecke I'm honestly not sure how much longer wikipedia will be around... Which makes me think that if you have the means and the know-how, maybe a copy might not be a bad idea

                [?]Anthropy » 🌐
                @anthropy@mastodon.derg.nz

                homelab storage tip: smaller 2nd hand SAS drives are still fairly cheap compared to SATA stuff (e.g ~50-100 for 4tb),

                because enterprises don't buy second hand SAS stuff (especially smaller disk) and people seem to think SAS hardware is expensive or unusable.

                If you buy a second hand PCIE Host Bus Adapter/HBA (like an LSI or Dell Perc flashed with IT mode or alike) for like 30-50$ together with some MiniSAS to SAS cables, you'll be able to use these disks in your home server/NAS

                  [?]Anthropy » 🌐
                  @anthropy@mastodon.derg.nz

                  also worth noting that, if you do really want SATA, or you're looking for a lot of storage in the first place, 18-20tb disks seem to be available for around 20-30eu per tb.

                  It is a larger investment (400-600 for a single disk), but technically speaking you are getting a waaaay better deal than buying a 4tb drive for 200 (50eu per tb, more than twice as much).

                    AodeRelay boosted

                    [?]Root Moose » 🌐
                    @RootMoose@mastodon.bsd.cafe

                    Finally migrated my gitea instance to forgejo. Was simple enough and took like 5 minutes to accomplish.

                    It's basically just modify the docker compose file to reference the correct forgejo version to replace gitea and bring it up. This is an internal home lab system so no 2fa/oauth or whatever to reverse engineer as part of the process.

                    <doing proper fs and db backups beforehand are implied in these statements>

                      [?]Dima » 🌐
                      @dima@dol.social

                      Sometimes newer is not better. At least not for the things that matter to you.

                      I benchmarked two OVH VPS in the same Zurich location. My current 2025 model with a 500 Mbit network against the newer 2027 model with 1 Gbit. Same AMD EPYC Genoa cores, same provider, nearly identical sysbench CPU scores.

                      Then the surprises started.
                      The older box pushes 6,612 MiB/s in memory tests, the newer one 932 MiB/s. That is 7x.
                      Random 4K reads: 1.32 million IOPS against 832k.
                      And the old model is even about 1 EUR cheaper.

                      For a Mastodon instance, databases, and Docker workloads, memory and disk beat extra bandwidth every time. So the shiny new VPS gets demoted to reverse proxy and backup duty, and this instance stays exactly where it is.

                      Benchmark before you migrate.

                      Screenshot of the OVH control panel showing two active VPS in the EU-WEST-LZ-ZRH location: vps-817e781a.vps.ovh.net labeled vps-2027-model2.LZ and zrh-1.dol.ch labeled vps-2025-model1.LZ. Both marked Active, the model names underlined in red

                      Alt...Screenshot of the OVH control panel showing two active VPS in the EU-WEST-LZ-ZRH location: vps-817e781a.vps.ovh.net labeled vps-2027-model2.LZ and zrh-1.dol.ch labeled vps-2025-model1.LZ. Both marked Active, the model names underlined in red

                        [?]Dima » 🌐
                        @dima@dol.social

                        The numbers behind the previous post, for the curious.

                        Same fio and sysbench setup on both boxes, Debian 13, direct=1, libaio.

                        Random read 4K, the workload databases actually live on:
                        1.41M IOPS on the 2025 box against 822k on the 2027 one.

                        RAM bandwidth: 64,038 MiB/s against 11,906. That is 5.4x.

                        Single thread CPU: 4,504 against 4,147 events/sec. Same EPYC Genoa on paper.

                        And here is my favorite part. The old box ran all of this while carrying my entire production: Mastodon, Postgres, Valkey, a pile of Docker containers, 17 days of uptime.

                        The new box was empty and idle.

                        The loaded veteran still won almost everything.

                          [?]Dima » 🌐
                          @dima@dol.social

                          Email from @OVHcloud this morning: the bandwidth on my VPS went from 400 Mbit to 1 Gbit. Same plan, same price, nothing for me to do.

                          This is the box running dol.social. The one I benchmarked last month, on the grounds that its memory and disk beat the newer 2027 model and the network gap did not matter enough to move.

                          The network gap is now gone too.

                          Correction while I am here: I said 500 Mbit in that thread. It was 400. The conclusion holds, my number did not.

                          Screenshot of an email from OVHcloud. The message says that to meet the performance needs of applications and services, the public bandwidth included in the VPS 2027 range has been increased, and that instances now benefit from up to double the throughput at no additional cost. Below is a table listing one VPS with its hostname partly greyed out, showing previous bandwidth of 400 Mbit per second and new bandwidth of 1000 Mbit per second.

                          Alt...Screenshot of an email from OVHcloud. The message says that to meet the performance needs of applications and services, the public bandwidth included in the VPS 2027 range has been increased, and that instances now benefit from up to double the throughput at no additional cost. Below is a table listing one VPS with its hostname partly greyed out, showing previous bandwidth of 400 Mbit per second and new bandwidth of 1000 Mbit per second.

                            [?]Dima » 🌐
                            @dima@dol.social

                            Full disclosure on the cost of that free upgrade.

                            The reboot to pick it up hung at the hypervisor level and took the instance with it. Almost 15 hours of downtime, 41.91% uptime for the day, and nothing I could do from inside the box because there was no inside to get to.

                            Worth it. But this is the part of "simple restart" that the is mentioned in email.

                            Also a decent argument for the thing I keep saying: the box is disposable, the data is not.

                            Screenshot of an uptime monitoring dashboard for the last 24 hours. On the left, uptime reads 41.91 percent and Apdex reads 0.4. A horizontal status bar is green at both ends with a long red section covering the middle. Below it, a bar chart per hour shows green bars at 1.0 for the first two hours, then a red 0.46, then a long run of red zeros from roughly 19h through 8h, a red 0.62 at 9h, and green 1.0 bars from 10h to 16h."

                            Alt...Screenshot of an uptime monitoring dashboard for the last 24 hours. On the left, uptime reads 41.91 percent and Apdex reads 0.4. A horizontal status bar is green at both ends with a long red section covering the middle. Below it, a bar chart per hour shows green bars at 1.0 for the first two hours, then a red 0.46, then a long run of red zeros from roughly 19h through 8h, a red 0.62 at 9h, and green 1.0 bars from 10h to 16h."

                              AodeRelay boosted

                              [?]release_candidate » 🌐
                              @release_candidate@mastodon.bsd.cafe

                              [?]Mike Kelly » 🌐
                              @Lemmy@post.lurk.org

                              Some pictures of my solar-powered web server.

                              More work to be done on optimising page sizes when I have some time

                              uplode.org/posts/inhabitants/w








                                AodeRelay boosted

                                [?]gmc » 🌐
                                @gmc@snac.chasmcity.net

                                In other news, my permacomputing datacenter is in production (has been for a week or so already) and I'm now moving services from my dedicated server with OVH to there. This snac instance was set up in the new environment from the start and I just moved my moo (https://travellers.metro.cx) as a first experiment to lay down all the plumbing.


                                Two IKEA kitchen cabinets bolted together. Metal grates divide the cabinet, and on the grates are things like a network switch , a laptop, a small desktop server and a UPS.

                                Alt...Two IKEA kitchen cabinets bolted together. Metal grates divide the cabinet, and on the grates are things like a network switch , a laptop, a small desktop server and a UPS.

                                  [?]uvok Grumpyspots » 🌐
                                  @uvok@woof.tech

                                  I still have no idea how to properly configure fail2ban.
                                  The whole jail + filter config is pretty black magic to me.

                                  Is there a "more user friendly" solution?
                                  (I also use ufw as firewall).

                                    AodeRelay boosted

                                    [?]DeltaLima 🐧 » 🌐
                                    @DeltaLima@social.la10cy.net

                                    Hab nur ich die Probleme, oder hat die gerade etwas mit Verbindungsabbrüchen generell zu kämpfen?

                                      AodeRelay boosted

                                      [?]Yehor 🇺🇦 » 🌐
                                      @yehor@mastodon.glitchy.social

                                      I created accounts for each family member and migrated all location history data from the recorder. The last bit was to switch location reporting to it.

                                      I'm not sure we will use GeoPulse often, but it's nice to know we have location history.

                                      Can't wait to integrate it with , once we move there.

                                      A list of three profiles with funny profile pictures. Two names are censored, but the third one says "Yehor". There is a date range picker above the list showing the date range from 27.08.2026 to 03.08.2026. There is also a count next to each profile displaying the numbers 37, 20, and 36.

                                      Alt...A list of three profiles with funny profile pictures. Two names are censored, but the third one says "Yehor". There is a date range picker above the list showing the date range from 27.08.2026 to 03.08.2026. There is also a count next to each profile displaying the numbers 37, 20, and 36.

                                        AodeRelay boosted

                                        [?]jbz » 🌐
                                        @jbz@indieweb.social

                                        Why do I run FreeBSD for my home servers // Mathieu Aumont

                                        aumont.fr/posts/FreeBSD-Home-S

                                          [?]0x17 :cch: » 🌐
                                          @0x17@corteximplant.com

                                          Here it is 🎉
                                          One of three new Wi-Fi access points based on , deployable via and monitored using .

                                          The case design might still need a little adjustment.

                                          A small aluminum box with a taped WiFi adapter on it

                                          Alt...A small aluminum box with a taped WiFi adapter on it

                                            AodeRelay boosted

                                            [?]LinuxNews.de » 🌐
                                            @linuxnews@social.anoxinon.de

                                            [?]Simone » 🌐
                                            @roughnecks@social.woodpeckersnest.space

                                            What's going on..

                                            ..your fedi? Because each one's unique, ain't it?

                                            Bonus Question: :thinking: Ever thought about running a #bluesky #PDS alongside your fedi instance?
                                            Bonus Answer: I did.

                                            #fediverse #community #social #selfhosting

                                              AodeRelay boosted

                                              [?]release_candidate » 🌐
                                              @release_candidate@mastodon.bsd.cafe

                                              My homelab has been upgraded to 11.0 🎉

                                              A screenshot of a NetBSD 11.0 system.

                                              Alt...A screenshot of a NetBSD 11.0 system.

                                                [?]nocci [still cyberpunk'd] » 🌐
                                                @nocci@social.ism.yt

                                                Heute mal aus Spaß an der Freude einen kleinen Mailserver aufgesetzt.

                                                Funktioniert.

                                                  [?]Blort™ 🐀Ⓥ🥋☣️ [Surprise me.] » 🤖 🌐
                                                  @Blort@social.tchncs.de

                                                  Hmmm... it looks like @Stuxhost may fit the bill. Stuxhost.com says they're based in the Netherlands 👍 and that you can choose servers in Germany / Finland 👍 and @stux is here on the Fedi 👍 . (Sidenote, when I've talked to Stux, they've been lovely 👍 👍 )

                                                  The only thing I'm wondering about is if there's any easy way to install / upgrade / maintain Mastodon? 🤔 If I need to I can install Yunohost like on my other servers, but I'd really like to avoid having to maintain yet another server for a service that sounds trickier than most to maintain...

                                                    [?]al » 🌐
                                                    @alan@lighthouse.co.im

                                                    So as someone has already posted about the rising costs of self hosting, here's my reasoning and why we moved to Netcup.
                                                    The point being there is other hosting options, be aware and be switched on.

                                                    good luck!

                                                    haunted.lighthouse.co.im/artic

                                                      [?]al » 🌐
                                                      @alan@lighthouse.co.im

                                                      Sunday shoutout to all the and that keep the glue together that keeps everything running.
                                                      Give yourself self some love and appreciation for what you do.

                                                        🗳

                                                        [?]Abhinav 🧭 » 🌐
                                                        @abnv@fantastic.earth

                                                        I've been getting reports of folks not being able to access my website due to firewall issues. I cannot remove the firewall blocks due to bots continuously scraping my website. But I'm thinking of offering an alternative. What do you think is a good alternative to access a (completely static) website?

                                                        Mirror on Github pages or Netlify or some CDN:0
                                                        Mirror on IPS:0
                                                        Download as a runnable Docker image:0
                                                        Download as a Sneakerweb collection:0
                                                        Other option, comment:0
                                                          AodeRelay boosted

                                                          [?]BastilleBSD :freebsd: » 🌐
                                                          @BastilleBSD@fosstodon.org

                                                          Anyone else DIY monitor the air quality in their living space with a raspberry Pi and get mobile notifications about status?

                                                          Just me?

                                                          TIME SENSITIVE
noW
[RESOLVED] Air Quality (PM... roci has been unhealthy for more than 5 minutes. roci
Unhealthy (150+)

                                                          Alt...TIME SENSITIVE noW [RESOLVED] Air Quality (PM... roci has been unhealthy for more than 5 minutes. roci Unhealthy (150+)

                                                            [?]Timo Geusch » 🌐
                                                            @tgeusch@social.vivaldi.net

                                                            Question for those who their email servers - has anyone migrated from to ?

                                                            I've been running Postfix for more than a decade on the primary MX, but it frankly feels overkill for a relatively simple multi-domain setup for essentially just hosting my family's email.

                                                            I'm already running openSMTPD on on my secondary, so I've got some limited experience with it.

                                                            Nothing against Postfix, it just feels that with my setup I'm using an 18 wheeler to transport a case of beer...

                                                              AodeRelay boosted

                                                              [?]Paul [He/Him] » 🌐
                                                              @plwt@mstdn.social

                                                              @AlienJay I am very impressed with Dockhand. It seamlessly has handled two minor updates to and it looks like it would make major version updates much easier than manually editing a .yaml file (yet to test that).

                                                              Very easy to set up and had a nice dashboard that can tell me what is going on across a number of Docker containers. I have no reason not to pass on your recommendation to anyone who is and looking for a replacement for Watchtower.

                                                                AodeRelay boosted

                                                                [?]Yehor 🇺🇦 » 🌐
                                                                @yehor@mastodon.glitchy.social

                                                                That’s a win, right? I think that’s a win. instance officially has no more slow queries. I combined PGTune recommendations with some from here: wisechecker.com/configure-post.

                                                                  AodeRelay boosted

                                                                  [?]Björns Techblog » 🌐
                                                                  @blog@blog.sengotta.net

                                                                  Migration von Certbot zu Lego

                                                                  blog.sengotta.net/migration-vo

                                                                  Ich glaube jeder der selber Dienste hosted kenn das Problem. Da will man nur mal eben eine kleine Änderung auf dem VPS oder auf dem Server im Homelab machen, und dann stolpert man über dieses kleine nervige Problem was man einfach seit Monaten ignoriert hat.

                                                                  das ist mir heute mal wieder passiert. Eigentlich wollte ich nur eine neue Webapp ausprobieren, aber dafür brauch ich nun einmal ein TLS Zertifikat. Eigentlich kein Problem, aber als ich in mein OVH Dashboard schaue um die Domain anzulegen viel mir auf das der Certbot auf meinem Debian 12 Server immer noch an einen doofen Bug leidet durch den die DNS-01 Acme Challenges nicht mehr richtig gelöscht weren, nachdem die Zertifikate darüber validiert hat: https://github.com/certbot/certbot/issues/10492

                                                                  Ja ich weiß: das ist an sich nur ein kosmetisches Problem. Aber es ist nicht das einzige Problem was ich mit Certbot in den vergangenen Monaten hatte. Erst im März habe ich gemerkt das das OVH DNS Addon in Trixie einfach nicht mehr vorhanden ist.

                                                                  Um das Problem zu lösen könnte ich einfach Certbot via Docker installieren, so wie ich es auf meiner Debian Trixie Maschine getan habe. Leider würde das aber zu einem anderen Problem führen. Eine meiner Domains lasse ich inzwischen von einem coolen deutschen DNS Anbieter namens desec.io verwalten. Leider gibt es keinen offizielles Docker Image mit deren DNS-01 Certbot Plugin. Ich müsste also ein eigenes Image erstellen und auch Pflegen. Da hab ich jetzt nicht wirklich bock drauf.

                                                                  Also was mach ich jetzt. Mit einer nativen Certbot Installation pypi, venv etc. will ich mich echt nicht rumschlagen. Gang ehrlich dieses ganzen Python universum war nie wirklich intuitiv für mich. Im März hatte mir jemand im Fediverse zu Lego einem Acme Client der in Go geschrieben wurde geraten. Das Programm unterstützt ca. 200 DNS-01 Challanges verschiedener DNS Provider und kommt als eine statische Go Binary. Das find ich schon extrem cool, also einfach runterladen, entpacken, ausführbar machen und man kann loslegen. Vielleicht schreib ich mir in Zukunft mal ein kleines Script für solche updates.

                                                                  Ich wollte unter Lego direkt mit der Config Datei arbeiten, damit die automatisierungen hinterher einfacher von der Hand gehen. Auf den ersten Blick schien das recht aber wenn man sich die Config Datei anschaut dann versteht man recht schnell was man davon braucht und was nicht.

                                                                  In meinem Fall muss ich zwei DNS Provider mit DNS-01 verifikation anlegen und einen mit einer http-01 webroot challenge. Tja Strato hat immer noch keine DNS API für sowas. Das alles hat den Vorteil das der Acme Client nie an Port 80 etc. ran muss und der Webserver so die ganze Zeit online bleibt.

                                                                  Das ganze zum laufen zu kriegen war recht eifnach. Lego binary von Github downloaden, entpacken, an einen passenden Ort verschieben (ich nehme /usr/local/sbin) und via chmod +x ausfürhbar machen. Danach habe ich den Ordner /etc/lego erstellt wo dann die ganzen Config Dateien und Zertifikate landen.

                                                                  Nun kann man sich direkt einen Account (eigentlich einen privaten Schlüssel) anlegen, ich habe als Account Namen einfach meine Mail Adresse genommen:

                                                                  lego accounts register --email johndoe@example.com -a --path /etc/lego

                                                                  Wie es weiter geht hängt ein bisschen davon ab wie man seine Domian gegenüber Lets Encrypt verifiziert. Hier ein Beispiel wie ich das bei meinen Domains mache die bei OVH liegen und bei denen ich DNS-01 nutzen. Ich arbeite mit .env- Files um die Zugangsdaten und Einstellungen der jeweiligen DNS Provider zu speichern. Also erstelle ich folgende Datei /etc/lego/.env.ovh und trage dort die im Lego Wiki für OVH aufgeführten Parameter ein, bei mir sind das Application Key, Application Secret, Consumer Key und der Endpoint: https://go-acme.github.io/lego/dns/ovh/index.html

                                                                  Nun kann man sein erstes Zertifikat erstellen:

                                                                  lego run --email johndoe@example.com --path /etc/lego -a --dns ovh -d test.example.ovh --env-file /etc/lego/.env.ovh

                                                                  Lego legt diese dann in /etc/lego/certificates ab.

                                                                  Da ich jedoch nicht ewig lange Befehle in Cronjobs etc packen möchte bietet sich die Arbeit mit der Lego Config Datei an, sie macht die automatisierung des Vorgangs viel leichter. Dort fasst man Accounts, Challanges und die verwalteten Domains zusammen. Diese lego.yaml erstelle ich in /etc/lego. Meine sieht ungefähr so aus:

                                                                  storage: /etc/lego/
                                                                  accounts:
                                                                    johndoe@example.com:
                                                                      email: johndoe@example.com
                                                                      acceptsTermsOfService: true
                                                                  challenges:
                                                                    desec:
                                                                      dns:
                                                                        provider: desec
                                                                        envFile: /etc/lego/.env.desec
                                                                        resolvers:
                                                                          - 1.1.1.1:53
                                                                    ovh:
                                                                      dns:
                                                                        provider: ovh
                                                                        envFile: /etc/lego/.env.ovh
                                                                        resolvers:
                                                                          - 1.1.1.1:53
                                                                    webroot:
                                                                      http:
                                                                       webroot: /var/www/lego # Muss im webserver konfiguriert sein
                                                                  certificates:
                                                                    test.example.desec: #Kann irgendein Name sein, wird als Dateiname genutzt
                                                                      challenge: desec
                                                                      domains:
                                                                        - test.example.desec
                                                                    test.example.ovh:
                                                                      challenge: ovh
                                                                      domains:
                                                                        - test.example.ovh
                                                                        - www.test.example.ovh
                                                                    test.example.webroot:
                                                                       challenge: webroot
                                                                       domains:
                                                                        -   test.example.webroot

                                                                  Das ist nur ein Beispiel wie es für mich funktioniert, schaut auf jeden Fall ins Wiki und denkt dran: das ist yaml also nur Leerzeichen, keine Tabs etc.

                                                                  Wenn man diese Config Datei hat dann reicht ein einfacher aufruf mit dieser als Parameter aus um die Zertifikate zu beziehen oder zu erneuern.:

                                                                  lego --config /etc/lego/lego.yaml 

                                                                  Jetzt müssen wir noch sehen das dieser Befehl regelmäßig ausgefürht wird, das kann man über einer Cronjob machen oder über einen Systemd Timer. Dafür werden folgende Dateien angelegt /etc/systemd/system/lego-renew.timer und /etc/systemd/system/lego-renew.service:

                                                                  [Unit]
                                                                  Description=Lego Certificate Renewal Timer
                                                                  
                                                                  [Timer]
                                                                  OnCalendar=*-*-* 03:00:00
                                                                  RandomizedDelaySec=1h
                                                                  Persistent=true
                                                                  
                                                                  [Install]
                                                                  WantedBy=timers.target

                                                                  und

                                                                  [Unit]
                                                                  Description=Lego Certificate Renewal
                                                                  
                                                                  [Service]
                                                                  Type=oneshot
                                                                  ExecStart=/usr/local/sbin/lego --config /etc/lego/lego.yaml
                                                                  ExecStartPost=systemctl reload nginx

                                                                  Nun können wir den systemd daemon neu laden und den timer starten und aktivieren:

                                                                  systemctl daemon-reload
                                                                  systemctl enable lego-renew.timer
                                                                  systemctl start lego-renew.timer

                                                                  Und das war es auch schon. Lego sollte sich nun darum kümmern eure Zertifikate immer auf einem aktuellen Stand zu halten. Jetzt muss man natürlich noch sehen das man seinen nginx etc. auf die neuen Zertifikate konfiguriert. Ja das war bei mir Handarbeit, es gibt nen Grund warum ich mich so lange gedrückt habe.

                                                                  Ich hoffe der Beitrag hilft irgendwem und ist zumindest halbwegs interessant. Falls nicht, dann weiss ich in sechs Monaten zumindest immer noch was ich hier getan habe.

                                                                  @bjoern

                                                                    AodeRelay boosted

                                                                    [?]DigitalEscapeTools » 🌐
                                                                    @xabd@mastodon.social

                                                                    Want to detect intruders before they reach your real systems?

                                                                    OpenCanary is a free, open-source network honeypot that emulates common services and sends instant alerts when someone interacts with them. It's lightweight, easy to deploy, and works on Linux, macOS, Docker, and Raspberry Pi.

                                                                    More details: digitalescapetools.com/tools/t

                                                                    Screenshot of the OpenCanary project page describing the lightweight network honeypot with passing GitHub test, Docker build, and PyPI badges.

                                                                    Alt...Screenshot of the OpenCanary project page describing the lightweight network honeypot with passing GitHub test, Docker build, and PyPI badges.

                                                                      AodeRelay boosted

                                                                      [?]Russell (Robin) Phillips [They/them] » 🌐
                                                                      @rpbook@gts.phillipsuk.org

                                                                      I've been self hosting email for years. This morning, an email to a Gmail account was blocked because of "the very low reputation of the sending domain".

                                                                      Any advice on how to fix this? Presumably using a hosted email service won't help because I'd still want to use my domain, and Gmail says the domain is the issue.

                                                                      #SelfHosting #email

                                                                        [?]🏳️‍⚧️ Christin Löhner 🏳️‍🌈 » 🌐
                                                                        @christin@lsbt.me

                                                                        Dein Router bekommt ein Mindesthaltbarkeitsdatum

                                                                        Dein Router bekommt sein letztes Sicherheitsupdate irgendwann, und bisher hat dir das niemand gesagt. Ab Dezember 2027 muss jeder Hersteller ein Support-Enddatum nennen und bis zu diesem Datum kostenlos Sicherheitsupdates liefern. Für freie Software gibt Brüssel Entwarnung. Reden wir drüber!

                                                                        chrislo.de/blog/2026-07-30-08-

                                                                        [?]Hirad » 🌐
                                                                        @redstar@m.hirad.it

                                                                        Finally got automated Flatpak releases working on my self-hosted Forgejo server.

                                                                        I set up a Forgejo Actions runner with Docker-in-Docker, then wired up a workflow that builds my Python applications as Flatpaks whenever I push a version tag.
                                                                        Took a bit of wrestling with namespaces, artifact handling, and a weird timezone bug, but it's working now.

                                                                          fedicat boosted

                                                                          [?]Root Moose » 🌐
                                                                          @RootMoose@mastodon.bsd.cafe

                                                                          Thinking about a new domain+project...

                                                                          Anyone have the TL;DR; on self hosted fediverse software?

                                                                          Mastodon vs Snac vs Pleroma vs ?

                                                                          I'm looking for something that is super low maintenance and lightweight / easy on resources but as full featured as practical within those constraints.

                                                                          Something easy to tune re: post lengths and media types would be cool too. A "text first" platform is desired.

                                                                          I've run Mastodon in the past and it's like fishing with nukes for this use case.

                                                                          What's out there?

                                                                            [?]amilatled » 🌐
                                                                            @amilatled@snac.la10cy.net

                                                                            its 7pm here, sun is since 3 hours around the corner, it's cloudy and kinda dark. I only have 110Wp on solar panels installed on my balcony, and this still is enough, to compensate the power draw of the mini pc , my website and this instance is hosted on :D (Solar 2 is dedicated for the mini pc, Solar 1 and 2 are connected to the same battery)


                                                                            https://deltalima.org/blog/custom.php?site=system-stats  ☀️   Solar system 2W ☀️ Solar 7W 🔌 Load 100% 🔋 Battery  [www-data@minix-n4100.dmz.nukular.netz:~]# ./system-stats --solar  Refreshed: 26.7.2026, 19:08:33   Solar 1  ------------------------------  PV power        : 1.6 W  PV current      : 0.1 A  PV voltage      : 14.61 V  Battery voltage : 13.35 V  Load power      : 5.07 W    Solar 2  ------------------------------  PV power        : 0 W  PV current      : 0 A  PV voltage      : 0 V  Battery voltage : 13.36 V  Load power      : 2.13 W      =============================  PV power all:     1.6 W  Load power all:   7.2 W  Battery charge:   100 %  =============================

                                                                            Alt...https://deltalima.org/blog/custom.php?site=system-stats ☀️ Solar system 2W ☀️ Solar 7W 🔌 Load 100% 🔋 Battery [www-data@minix-n4100.dmz.nukular.netz:~]# ./system-stats --solar Refreshed: 26.7.2026, 19:08:33 Solar 1 ------------------------------ PV power : 1.6 W PV current : 0.1 A PV voltage : 14.61 V Battery voltage : 13.35 V Load power : 5.07 W Solar 2 ------------------------------ PV power : 0 W PV current : 0 A PV voltage : 0 V Battery voltage : 13.36 V Load power : 2.13 W ============================= PV power all: 1.6 W Load power all: 7.2 W Battery charge: 100 % =============================

                                                                              AodeRelay boosted

                                                                              [?]DeltaLima 🐧 » 🌐
                                                                              @DeltaLima@social.la10cy.net

                                                                              I am pretty amazed, how fast and power efficient even those older Intel N4100 Mini PCs are.
                                                                              My old Wyse 3040 unfortunatelly died recently, so I had to migrate everything to the more power hungry N4100 system.
                                                                              But turns out, when you disable the TurboBoost, it's average power consumption is around 1,5 - 2,5W running with Debian and a Podman container with my Website, and some custom scripts for fetching stats by bluetooth and usb for the BMS and Solar Charger. Neat!

                                                                                🗳

                                                                                [?]Caleb Hearth :d6: » 🌐
                                                                                @caleb@pub.calebhearth.com

                                                                                Let’s do this a different way actually. Which of these are (pick all that that apply)

                                                                                Your Synology or other hardware at home:21
                                                                                Managed server (aws, Lenovo):9
                                                                                Managed platform (Heroku):5
                                                                                Hosted service (masto.host):2

                                                                                Closed