Assuming I'm #selfhosting the arrstack, jellyfin, nextcloud, immich, and a few other things, what's the best SSO option I should run?

Sunday maintenance on The Seas Aquarium is complete.

NH₃/NO₂ undetectable, NO₃ 4 ppm, pH 7.4, KH 3° and GH 11°. Water temperature averaged 22.9°C over 24 hours.

#HomeAssistant tracks water parameters, temperature, heater energy and maintenance. Particularly pleased that nitrate accumulation is currently negative (-1.02 ppm/week). The plants appear to be earning their keep.

Possibly more monitoring than a 125-litre #aquarium requires, but here we are.

#Fishkeeping #SelfHosting

Alt...

Home Assistant dashboard for a 125-litre aquarium. Water temperature is 22.6°C, nitrate is 4 ppm, and the estimated nitrate accumulation rate is −1.02 ppm/week. A five-day graph shows aquarium and room temperatures alongside heater energy consumption.

Alt...

Aquarium water test results displayed in Home Assistant: nitrate 4 ppm, nitrite 0 ppm, ammonia 0 ppm, general hardness (GH) 11°dH, carbonate hardness (KH) 3°dH, and pH 7.4.

#Seafile is so advanced! It works the same way as iCloud on #macOS. You can see all your storage, but it downloads only the files you use or edit.

On mobile, I can open a file from Seafile in any app for editing, and it will be synced after that. That's just rocks! Can't believe I didn't try it earlier.

Also, the #SelfHosted Pro version is free for up to 3 users.

#SelfHost #Selfhosting #Homelab #Files

@jannepekkala

Here, have a look at this, this is the full "Daily Uptime" Gazette.

I have sanitized the paths, names and anything else that might give an attack surface to an adversary, though I am sure I missed something critical.
I have backups 🙄

But it should give you an idea of how the full edition of the #VPS reporting works...

A single Server newspaper, created with deterministic code, with Local Ai doing flavour text.

#Sysadmin #Selfhosting #Vibecoding #Monitoring

Alt...

Daily Uptime, system gazette.

There is also "The Tribune"
A simplified leaflet/brochure for the proles and other hoi-poloi, including the overseers who are not artisans in the profession of managing a Cybertown.

It skips all the geek blah blah and is meant for a suit/manager/overseer who wants to check the status of a server;

The paper for the common proletariat.

#Vibecoding #Selfhosting #VPS

Alt...

Simplified "Daily Uptime"

One of the tools I have been #Vibecoding is a Daily Steampunky newspaper generated once per day using deterministic code and local Ai...
Its on edition 80, which means its been running for over 2 months.

The newspaper uses the analog of a town to describe its events...
... The attacks against the #VPS are described in the terms of 'Our boys (and gals) at the front', hence 'Order of battle'
At a glance, I can see the cadence of attacks and what kind are they...
...rather than scanning log files or even something like Prometheus/Graphana panel.

This is how I know I get as many as 3000 attacks per day (on a shitty, obscure, VPS with no real internet presence), and what kind.

A few weeks back it was a PHP auth scripts storm, Now we are down to under 500, the good old credentials/key theft attempts.

Once the code is developed, its fully deterministic but for Percy Promptworth - The local AI writer, who turns dry text into Steampunk flavour.

#Selfhosting #Infosec

Alt...

Attacks table

If you're looking to manually upgrade your Raspberry Pi 5 with more RAM, well they're trying to stop the few of you out there with the skills/equipment to do it for... reasons?

https://www.reddit.com/r/selfhosted/comments/1wkxjwg/raspberry_pi_5_eeprom_update_now_blocks_manual/

#raspberrypi #linux #opensource #selfhosting #selfhosted

#meme

Alt...

meme format "bro explaining" featuring a man excitedly talking and gesturing to a nearby woman with an absent expression

It's official, Halis can now onboard new users fully automatically.

You can now find a registration button on halis.io, if you want to try out some of the services available there

I am aware I am addressing the wrong crowd here, because if you are on the fediverse, you may not need what Halis provides, but one never knows :)

I have been working on this infrastructure for years at this point, aiming to provide anyone in need with a corner of privacy, and this is only the first iteration !

Let me know if you have any feedback, and boosts are very much appreciated !

#selfhosted #halis #privacy #fediverse #register #selfhosting #selfhost #opensource #mastodon #matrix #synapse #kubernetes

Alt...

Halis home page with the new registration button

Alt...

List of available services on halis.io Counting Matrix, Bitwarden, Mastodon, Netbird, BentoPDF, Booge, Dawarich, Immich, OpenDrive, Forgejo, Lemmy, Spliit and Sure

Can someone recommend a self hosted analytics solution with exactly three criteria being a hard requirement:

- oidc support
- multiple sites with per user permission
- no cookie banner required

Please don't suggest hitkeep or matomo.

#selfhosting #selfhosted

Mumble is an open-source, self-hosted voice chat platform with low-latency communication, encryption, and full control over your own server.

A solid option for private voice communication, gaming, communities, and teams.

More details:
https://digitalescapetools.com/tools/mumble.html

#OpenSource #SelfHosting #Privacy #VoiceChat #Mumble #FOSS

Alt...

Mumble open-source voice-chat software page showing its website, Matrix community with 466 users, and status checks for Codacy, Azure, Cirrus CI, and Travis CI. Text at the bottom describes Mumble as an open-source, low-latency, high-quality voice-chat program built with Qt and Opus.

Alt...

Mumble desktop voice-chat client shown in light and dark themes. The interface displays a server channel tree with users, a text chat panel, and toolbar controls for microphone, audio, recording, messaging, and settings.

"Self-hosting OSes" are special operating systems like YunoHost, FreedomBox and LibreServer which are designed to make it easier to host your own services either on a VPS, or a computer in your own home or office. They include graphical interfaces that let you install or remove services without having to go through a command line.

Does anyone know of any other distros (Linux or otherwise) designed specifically to make self-hosting much easier like this?

#AskFedi #SelfHosting

Mastodon als Mailrelay: nicht Opfer, sondern Waffe

496 Bestätigungsmails an fremde Adressen: wie mein Mastodon-Server zum Werkzeug eines Cyberkriminellen wurde.
https://ingo.lantschner.name/post/2026-09-18_mailrelay-mastodon/

@zoul, @antars, @admin, @tealk, @Mme_de_Faune, @b2c, @SunDancer, @spielleitung, @pfitzer, @eggipedia

#Fediverse #Mastodon #Sicherheit #ITSecurity #CyberSecurity #Selfhosting #Mailbombing #Registrationbombing #bpSpam #Spam #PeerTube #SozialeMedien

All of the HTTP sites & the fossil repositories are on the new server. Going to work on migrating the Gopher & Gemini sites tonight and tomorrow. #selfHosting

#SelfHosting #VPS #IPv6

Als überzeugter #selfhoster freut es mich natürlich, dass wir da in Gesellschaft von Größen wie @Tutanota oder @mailbox_org stehen.

Gleichzeitig mache ich mir aber schon ein wenig Sorgen über den Zustand der heimischen #itsicherheit wenn eine so simple Aktion, wie das Einrichten von #DNSSEC für die eigene Domain offenbar so selten ist ...

Dennoch, herzlichen Dank für den Link ans BSI (Bundesamt für Sicherheit in der Informationstechnik)!

Und falls ich einen Vorschlag zur nächsten Aktion loswerden dürfte: bei #ipv6 gibt es auch noch Bedarf.

2/2

#selfhosting

Looking for good PeerTube accounts to follow, especially music, creative stuff and self hosting. Rep your channel below and I'll follow :)

#PeerTube #SelfHosting

Today wasn't the first time that showing specifically https://www.grampsweb.org/ really got a layperson excited about running a private server. Probably because family is much easier to relate to than abstract software

Vom 10. bis 17.9. wurden auf troet.fediverse.at 340 Konten angelegt, 337 davon mit generierten Namen nach dem Muster »bp« + 16 Hex-Zeichen. Jede Anmeldung von einer eigenen IP, null Beiträge, null Bestätigungen.

Das Ziel waren nicht die Konten, sondern die Bestätigungsmails: Mein Server hat sie an fremde Adressen verschickt, überwiegend japanische Provider. Google hatte einen der Empfänger schon gedrosselt, die Bounces landeten bei mir.

Das Ärgerliche daran: Mastodons Bordmittel greifen alle zu spät. hCaptcha hängt im Bestätigungsschritt, also nach dem Mailversand. Genehmigungspflicht ebenso. IP- und Domainsperren sind bei einer IP pro Anmeldung und echten Opferadressen sinnlos.

Meine Lösung mangels Alternative: Registrierung abgedreht – niemand kann sich mehr neu registrieren. Nicht gut auf Dauer! Die 337 Konten gelöscht, ohne E-Mail-Blockierung — sonst sperrt man die Opfer aus statt der Täter.

Hat jemand eine bessere Idee? Etwa eine Challenge vor /auth/sign_up im Reverse Proxy?

#Mastodon #MastoAdmin #Fediverse #Spam #SysAdmin #SelfHosting

I think I'm slowly going to make my way back to self-hosting my repositories (via cgit, most likely). Most providers now either have too strict of rules or none at all...

Probably better to have full control anyway 🤷

#git #selfHosting

Моя дружина протрималася на #iPhone трошки більше року та повертатиметься на #Android. Що ж, кожному своє, а мені більше причин захостити щось, що буде обʼєднувати наші бібліотеки на різних платформах. #Immich перетворюється з моєї забаганки на необхідність, чому я вкрай радий ^_^

#Самохостинг <- звучить по-дибільному, правда? ))) Є якісь українізовані теги, які використовують селфхостери та хоумлабери?

#SelfHosted #Selfhosting #Selfhost

Kurzer Hinweis an andere Mastodon-Admins: Diese Registrierungs-Spam-Welle ist noch nicht überstanden.

Bei lsbt.me kamen zunächst massenhaft API-Registrierungen mit Python/aiohttp rein. Auffällig waren Nutzernamen nach dem Muster bp plus 16 Hex-Zeichen und als Antragstext immer Automated protocol deliverability probe. Eine enge Sperre auf diesen User-Agent hat die erste Welle gestoppt.

Heute kamen trotzdem fünf neue Registrierungen mit denselben Nutzernamen und demselben Antragstext. Der Bot gab sich diesmal einfach als Chrome 126 aus. Genau deshalb taugt ein User-Agent nur als kurzfristiger Filter. Er ist ein frei wählbarer Header.

Die Requests laufen über POST /api/v1/accounts. Dieser Endpoint erlaubt Client-Apps, einen neuen lokalen Account direkt in der App anzulegen. Für OAuth-Verbindungen bestehender Accounts braucht ihn keine App. Auch #FediSuite nutzt ihn nicht. Sie registriert sich über /api/v1/apps, holt die Zustimmung über /oauth/authorize und arbeitet danach mit einem User-Token. Die normale Registrierung über die Mastodon-Webseite läuft ebenfalls getrennt über POST /auth.

Ich habe die API-Kontoerstellung auf lsbt.me deshalb komplett abgeschaltet. Webregistrierung, OAuth und bestehende Clients laufen unverändert weiter. Wer einen neuen Account möchte, registriert sich einmal ganz normal wie bisher im Web und kann danach jeden Client nutzen.

Falls ihr diesen optionalen Native-Sign-up-Weg ebenfalls nicht anbieten wollt, könnt ihr in eurem Nginx-Serverblock vor dem allgemeinen location /-Block Folgendes ergänzen. Das Beispiel setzt den in vielen Mastodon-Nginx-Configs vorhandenen @proxy voraus:

location = /api/v1/accounts {
  limit_except GET {
    deny all;
  }
  try_files $uri @proxy;
}

Damit erhält nur POST /api/v1/accounts ein 403. Der lesende GET-Endpoint bleibt erreichbar. Danach wie immer nginx -t und erst bei erfolgreichem Test reloaden.

#Mastodon #Fediverse #MastoAdmin #FediAdmin #FediMod #FediBlock #Moderation #Registration #Spam #Nginx #SelfHosting #SysAdmin #ActivityPub

If you are like me and run your own private, Nextcloud server that isn't exposed to the internet and want to sync podcasts between your phone and computer using gPodder sync, you'll quickly discover that no podcast client will talk to a server with a self-signed certificate. Not because it's technically dangerous, but because the developers have chosen not to support it. A single checkbox would fix it. They've been asked. They won't do it. Why? Skip to the last paragraph.

And yeah, with the amount of work I had to put it - I'm mad. ​​

This pattern repeats across every app, every platform, and the Android operating system itself. The consistent push from podcast apps, Google (Android) and the Linux desktop ecosystem is toward public certificate authorities and away from privately managed infrastructure. The people who suffer is anyone who wants to run their own server without exposing it to the internet.

Adding a certificate to Ubuntu's system trust store is straightforward and works immediately for natively installed applications. Flatpak (increasingly pushed as the Linux desktop standard) is a different problem entirely. Flatpak isolates apps from the host system, and the mechanism that's supposed to bridge host certificates into that sandbox is broken.

For several versions, Android has had a deliberate policy to hamper users to install their own certificates. It's a pain. App developers can opt in to trusting user-installed certificates with a one-line configuration change. Most haven't. AntennaPod hasn't.

None of this is technically insurmountable. But the cumulative friction across every layer... The apps, the OS, the desktop packaging format, the server appliance all pushes in the same direction: Self-hosting with your own certificates is made difficult everywhere, simultaneously, by parties who agree on the plausible-sounding security justification:

"The only safe option is to have a publicly exposed server with a CA-signed certificate". Like that's safer than accessing a server with a manually verified certificate through a closed VPN mesh network.

#selfhosted #selfhosting #self-hosted #self-hosting #antennapod #flatpak #gpodder #nextcloud #nextcloudpi

Quick heads-up for other Mastodon admins: this registration spam wave isn't over yet.

On lsbt.me, we first saw a flood of API registrations using Python/aiohttp. The telltale signs were usernames following the pattern bp plus 16 hex characters, and the sign-up reason was always "Automated protocol deliverability probe". A narrow block on that user agent stopped the first wave.

Today, however, five new registrations came in with the same usernames and the same sign-up reason. This time the bot simply identified itself as Chrome 126. That's exactly why a user agent is only useful as a short-term filter. It's a header the client can set to anything.

The requests go to POST /api/v1/accounts. This endpoint lets client apps create a new local account directly in the app. No app needs it for OAuth connections to existing accounts. #FediSuite doesn't use it either. It registers itself via /api/v1/apps, obtains consent via /oauth/authorize, and then works with a user token. Regular sign-up through the Mastodon website is also handled separately via POST /auth.

So I've completely disabled API account creation on lsbt.me. Web sign-up, OAuth, and existing clients keep working as before. Anyone who wants a new account just signs up once on the web as usual and can then use any client.

If you'd also rather not offer this optional native sign-up path, you can add the following to your Nginx server block, before the general location / block. The example assumes the @proxy location that many Mastodon Nginx configs already include:

location = /api/v1/accounts {
  limit_except GET {
    deny all;
  }
  try_files $uri @proxy;
}

This returns a 403 only for POST /api/v1/accounts. The read-only GET endpoint remains reachable. As always, run nginx -t afterwards and only reload once the test passes.

#Mastodon #Fediverse #MastoAdmin #FediAdmin #FediMod #FediBlock #Moderation #Registration #Spam #Nginx #SelfHosting #SysAdmin #ActivityPub

So .tk domains are back, but they come with a 9 euro price tag now. - Dunno how long they'll be around but you can probably still get your first/last name if that's what you're into

#tech #technology #nerd #geek #selfhosting

For some odd reason, the last two months have been littered with weird bugs and quirks on my server.

As you or anyone knows who also administrates a home server, you should know this was all entirely my fault, as it would be. Suricata doesn't run very well on a cheap 1core VPS, lol.

Also, a hard lesson was learned: to know my problem before repairing it.

I completely remade my VPS from scratch without knowing all I had to do was turn Suricata off or uninstall it and find some other security solution.

I'm looking back into #crowdsec, which, if somehow misspelled leads to a lot of potentially strange new followers on anyone's account. I believe it locked me out once, but I'm really not sure. It may have been Suricata all along, sooo, I still have the configs for crowdsec I'll see how that goes for my public stuff - like the blog you're reading.

Oh, added Anubis. It's ~150MB of ram and just works, so... why not? I'm sure it isn't stopping every bot ever, but the low hanging fruit is better than nobody.

#selfhosting #homeserver #linux #debian #anubis

He-he, my file/kitchen server project is going well Finally, I assembled all necessary wiring to connect 5V/12V from PSU to the external HDDs, bough SATA<->eSATA cables and assembled the storage for 4 3.5" disks.

And it all even powered up and system tried to boot from a connected single disk (unsuccessfully, because disk still doesn't contain NetBSD )

Next step — somehow buy a 4th HDD (hope, a gas for delivery trucks will exist at that moment, and this is not even the biggest problem), setup RAID 1 for NetBSD's root and cgd+RAID1+FFS (or ZFS) for files.

#NetBSD #selfhosting #homelab

Alt...

Front view of homemade file server. There are ITX case with Intel Atom inside, the plastic gray box for electrical wiring on top of it and two 3D-printed black frames for 4 HDDs with 1 HDD installed and a fan connected. The system is powered up and tge fan is spinning. The power source on the background shows 12V on the display.

Alt...

The back view of homemade server. There are ITX case with 4 eSATA ports and one aviation grade connector for power, the gray box with power wirings, power connectors for HDDs and a frame for 4 HDDs with 1 HDD installed, on the background.

Alt...

The top view of homemade server. The ITX black case on the bottom; gray box with wires and 1HDD in frame for 4 HDDs on the top. Everything connected with standard colored cables from PC PSU, also there is a pink eSATA<->SATA cable on the top right corner of the photo.

Immich 3.2.0 mit verbesserter Suche

Die neue Version der selbstgehosteten Foto- & Videoverwaltung baut essentielle Funktionen weiter aus.

#Linux #Immich #OpenSource #Selfhosting

linuxnews.de/immich-3-2-0-mit-…

GOODBYE BIG TECH.

At the end of August @arbovm and I decided to move away from US Big Tech. Wanting @fluado to be an EU company while running on US infrastructure felt icky…

OUT: Google Cloud, Cloud Run, GitHub, Supabase Cloud, Firebase
IN: Hetzner, Docker Swarm, Forgejo, self-hosted Supabase DB & Auth.

Full article and table of all 17 infra changes: https://yves.vg/blog/leaving-us-big-tech-in-one-week.html

Feedback welcome :)

#digitalsovereignty #degoogle #devops #selfhosting #forgejo #hetzner #EUTech #europe

Has anyone around here installed Funkwhale with Docker?

I'm trying to install Funkwhale with Docker, and so far it's not working, so I'd like to at least compare the "docker-compose.yml" and the ".env" files to check if I can figure out why mine isn't working.

This is basically the error that comes up, when I try to run the database migrations:

"+ exec funkwhale-manage migrate
Traceback (most recent call last):
File "/venv/lib/python3.14/site-packages/django/db/backends/base/base.py", line 279, in ensure_connection
self.connect()
~~~~~~~~~~~~^^
File "/venv/lib/python3.14/site-packages/django/utils/asyncio.py", line 26, in inner
return func(*args, **kwargs)
File "/venv/lib/python3.14/site-packages/django/db/backends/base/base.py", line 256, in connect
self.connection = self.get_new_connection(conn_params)
~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^"

I'm using this tutorial:

https://docs.funkwhale.audio/stable/administrator/installation/docker.html

#Funkwhale #fediverse #selfhosting #help #docker

Moin! Wer hat Erfahrung mit #Meshtastic? Ich überlege, ins Mesh-Untergrundnetz abzutauchen, unabhängig von Handymast und Provider 😂 Klingt nach Prepper-Hobby, ist aber eigentlich nur konsequent zu Ende gedachtes #FOSS. Nein, mach ich natürlich nicht...

#offgrid #lora #selfhosting #schicksalsjahreeineskaisers

please boost.

i am ready to start providing email addresses to the community.

you may have 1GB mail box storage capacity free of charge.

the system-wide code of conduct is at:

https://solarpunk.au/

if you are interested in a non-free account, please click here:

https://ko-fi.com/comradevidak/tiers

the lowest membership tiers:

- $1.25 per month (2GB storage capacity)
- $15 per year (2GB storage capacity)

#selfhosting #server #email #permacomputing #solarpunk

Bitwarden and KeePassXC aren’t exact matches to 1Password, but they might be close enough. [I’ve heard of them, but I haven’t added them to my Linux distro.]

Both password systems are #FOSS. This is a significant difference relative to #1Password.

#Bitwarden is said to be more convenient than #KeePassXC. It supports cloud syncing, mobile apps, and other ease of use features. KeePassXC is said to offer more fine-grained control, but syncing is manual.

Both systems can be set up on a #selfhosting system, but that is entirely optional.

https://openalternative.co/compare/bitwarden/vs/keepassxc

#askfedi and I’ll check my dedi.

My #gotosocial instance has peered with almost 6k instances 👀 #selfhosting #homelab

Syncthing is encrypted peer-to-peer free open software for sharing files and synchronising folders between several different computers no matter where they are in the world. More info on the website:

🌱 https://syncthing.net

If you're moderately techy you can install via @yunohost at https://apps.yunohost.org/app/syncthing

If you're very techy the full manual documentation is at https://docs.syncthing.net

#SelfHosting #FOSS #Syncing #Encryption #FileSharing

Yesterday I accidentally nuked my music library in #plex after messing around with Linux permissions. I couldn't restore from a backup since I was also making other changes and recording a show on the DVR...

I fixed the error, but now I have to recreate all my playlists 🤦

#selfhosting #fail

Trying to figure out and track SSD health across my servers. Writing down a wear-out value for each drive for now to see the change, because different drives are reporting this value differently. So 95% may mean it is almost dead, or it is almost brand new.

Also, #Samsung NVMe wears out crazily fast.

#SSD #DriveHealth #Storage #HomeLab #SelfHosted #SelfHosting #SelfHost.

Alt...

A table listing SSD drives with two columns labeled August 27 and September 14. Each drive has a wear-out value written in each dated column.

A quick remark: we noticed professional companies are not allowed private repositories on Codeberg, but that's necessary for us to operate currently.

For now we pulled our repos and are considering self-hosting forgejo. Will unfortunately take some time, we also need to clean up some repos from internal data before we can make them public.

We're working on it!

#codeberg #forgejo #selfhosting #pwr2