This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/kwestionmark on 2025-07-18 03:08:09+00:00.

Hey everyone!

I am a relative newcomer to the HomeLab/Self-Hosting space and was hoping to get some guidance/advice on properly securing my server. For background, I’ve been running a Plex server for my family with Sonarr/Radarr/Overseerr for a couple of years now. Overseerr was the only app I was exposing to the internet, and I simply used port forwarding and a custom domain/DNS with Cloudflare to allow my family to request movies/tv. However, I have recently started messing around with Docker, and now have some more apps that my wife and I would like to be able to access outside of our network. Here is what I currently have setup, and would appreciate any advice on what further steps I should be taking to keep things as secure as possible:

1. All apps running on a single local machine behind a basic router (haven’t done any special configuration other than opening port 80/443)
2. Using NPM as a reverse proxy + Cloudflare Tunnels w/ my custom domain/subdomains
3. All apps running on my machine (even ones not exposed to the internet) are behind at least a basic username/password check

When I type it all out, it doesn’t seem like enough, but I’ve also searched through previous posts on this and the self-hosting sub where people say a reverse proxy + tunnels is good enough. I’ve started looking into apps like Authellia and tinyauth, but I’ve been a bit overwhelmed by the setup. So I guess my primary question is this:

What solution finds the best balance between simplicity (as a newbie) and security? I am open to any and all suggestions + constructive criticism of my current setup!

cross posting from r/homelab for more visibility

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Bragni23 on 2025-07-17 08:08:30+00:00.

Hi all,

Over the past couple of months, I've been having to wrap apps, scripts & utilities as WIndows Services for a few projects at work. Tools like WInSW & NSSM do exist, but I seem to keep running into bugs or missing features - especially around log rotation, management & restarting behaviour.

This led me to build WInLet-a tiny, production-focused WIndows service wrapper we now use internally at work. It's really built to be simple to use and to offer proper support for log management, env vars, restart policies & so on.

Key features:

• Run any script or executable as a Windows Service
• A plethora of log management configurations - rotation, compression, etc
• Configurable auto-restart on failure
• Tiny footprint
• Easy-to-read TOML configuration

Example config:

Example config (with full logging and health check):

[service]  
name = "my-web-api"  
display_name = "My Web API"  
description = "Production web API with monitoring"  

[process]  
executable = "node"  
arguments = "server.js"  
working_directory = "C:\\Apps\\MyWebAPI"  
shutdown_timeout_seconds = 45  

[process.environment]  
NODE_ENV = "production"  
PORT = "3000"  
DATABASE_URL = "postgresql://db-server/myapi"  

[logging]  
level = "Information"  
log_path = "C:\\Logs\\MyWebAPI"  
mode = "RollBySizeTime"  
size_threshold_kb = 25600  
time_pattern = "yyyyMMdd"  
auto_roll_at_time = "02:00:00"  
keep_files = 14  
zip_older_than_days = 3  
separate_error_log = true  

[restart]  
policy = "OnFailure"  
delay_seconds = 10  
max_attempts = 5  
window_seconds = 600  

[service_account]  
username = "DOMAIN\\WebAPIService"  
allow_service_logon = true  
prompt = "Console"  

Install/start it like this:

WinLet.exe install --config my-web-api.toml  
WinLet.exe start --name my-web-api  

Here's what's coming next - especially as our internal requirements evolve at work:

• Prometheus metrics & Windows performance counters
• PowerShell module
• Hot-reload of config changes
• Service dependency graph and bulk operations
• Web dashboard for management

I'd love to hear form anyone managing/using Windows services - suggestions, feedback & other use cases you may have are all welcome. Posting in here as well in the hope someone else finds it useful.

Github: ptfpinho23/WinLet: A modern Windows service runner that doesn’t suck.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/jsiwks on 2025-07-17 22:42:53+00:00.

Hello everyone,

It’s been a little while since our last release announcement. We have lots of new updates and are excited to share and discuss them with you!

We crossed the 10,000+ stars threshold!

• GitHub: https://github.com/fosrl/pangolin
• 1.7.0 Release Notes: https://github.com/fosrl/pangolin/releases/tag/1.7.0
• Docs: https://docs.fossorial.io/

Passkeys

Use passkeys to log in to the dashboard and your resources without having to enter a password! Manage security keys on your account by clicking the profile icon in the top right.

Screenshot of UI showing passkey in log in form and management

Docker Socket

Newt can optionally poll the docker-socket to list containers when adding targets to resources. Now that we have the capability to do this, we’d like to build out more automation around creating resources in the system using the socket.

Screenshot of UI docker-socket list showing available containers

Internationalization

Pangolin now has i18n support for internationalization! Translations can always be improved. If you spot an issue, want to enhance an existing translation, or would like to contribute a new language, we welcome all contributions.

Cloud

We're working on Pangolin Cloud (beta), a hybrid and fully managed solution for exposing resources. Also, we're working on an option to combine self-hosted exit nodes (you control your data flow) with seamless failover to our managed cloud nodes for high availability. This approach keeps the self-hosted core of the product while offloading the challenging stuff to us such as DNS, database management/backups, and failover. We want to answer questions and get your feedback: check out the release notes for more details and how to get in touch!

Other Updates

• PostgreSQL deployment option
• Onboarding UI and internal CLI tool for resetting admin password
• More visual improvements to the UI
• Manage domains easier
• Report Newt version in dashboard & increased reliability
• Check the release notes for more!

Come chat with us on Discord.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/cookiedude25 on 2025-07-17 21:39:04+00:00.

Hi, I'm currently developing an alternative to Sonarr/Radarr/Jellyseer that I called MediaManager.

Github Repo Link: https://github.com/maxdorninger/MediaManager

Why you might want to use MediaManager:

• OAuth/OIDC support for authentication
• movie AND tv show management
• multiple qualities of the same Show/Movie (i.e. you can have a 720p and a 4K version)
• you can on a per show/per movie basis select if you want the metadata from TMDB or TVDB
• Built-in media requests (kinda like Jellyserr)
• support for torrents containing multiple seasons of a tv show
• Support for multiple users

Things that have been added/changed since I lasted posted here:

• config file support (.toml)
• merging of Frontend and Backend container (no more CORS issues!)
• addition of Scoring Rules, they kinda mimic the functionality of Quality/Release/Custom format profiles
• addition of media libraries, i.e. multiple library sources not just /data/tv and /data/movies
• addition of Usenet/Sabnzbd support
• addition of Transmission support

MediaManager also doesn't completely rely on a central service for metadata, you can self host the MetadataRelay or use the public instance that is hosted by me (the dev).

As the title says, this project is still in beta and thus quite rough around the edges and unpolished. But I think it's ready for the first few beta testers (I've been using it myself instead of Sonarr and Radarr for the past few weeks).

If you want to support my work, buy me a coffee! ❤️

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Ok-Major2340 on 2025-07-17 20:50:16+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Brilliant_Read314 on 2025-07-17 19:45:16+00:00.

Just wanted to say that it's been a great experience to use it. Replaced my openvpn with this much better solution. Now on to figure out headscale...

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Abishek_Muthian on 2025-07-17 16:37:35+00:00.

Platforms like Gumroad, Buy Me a Coffee, Ko-fi etc. are used by indies for sales and donations but they are subjected to arbitrary rules and are de-platformed algorithmically. Not to mention those who use these platforms end up paying double commissions for every transaction (one to the payment gateway and another to the platform).

So I have created Open Payment Host, indies can self-host OPH, create beautiful product pages and process payments (onetime/subscription) through number of supported payment gateways.

I hope the self-hosted community finds Open Payment Host useful. Suggestions are welcomed.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/oiram98 on 2025-07-17 15:08:26+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/ElevenNotes on 2025-07-17 14:16:53+00:00.

DISCLAIMER FOR REDDIT USERS ⚠️

• You'll find the source code for the image on my github repo: 11notes/redis or at the end of this post
• You can debug distroless containers. Check my RTFM/distroless for an example on how easily this can be done
• If you prefer the original image or any other image provider, that is fine, it is your choice and as long as you are happy, I am happy
• No, I don't plan to make a PR to the original image, because that PR would be huge and require a lot of effort and I have other stuff to attend to than to fix everyones Docker images
• No AI was used to write this post or to write the code for my images! The README.md is generated by my own github action based on the project.md template, there is no LLM involved, even if you hate emojis

INTRODUCTION 📢

For developers, who are building real-time data-driven applications, Redis is the preferred, fastest, and most feature-rich cache, data structure server, and document and vector query engine.

SYNOPSIS 📖

What can I do with this? This image will run redis rootless and distroless for more security. Besides being more secure and slim than most images, it also offers additional start parameters to either start Redis in command mode, as a replica or as a in-memory database that persists nothing to disk. Simply provide the command needed:

COMMANDS 📟

• --cmd - Will execute all commands against the Redis database specified via REDIS_HOST environment variable
• --replica MASTER - Will start as replica from MASTER (can be IP, FQDN or container DNS)
• --in-memory - Will start Redis only in memory
• 1 - ... and more?

UNIQUE VALUE PROPOSITION 💶

Why should I run this image and not the other image(s) that already exist? Good question! Because ...

• ... this image runs rootless as 1000:1000
• ... this image has no shell since it is distroless
• ... this image is auto updated to the latest version via CI/CD
• ... this image has a health check
• ... this image runs read-only
• ... this image is automatically scanned for CVEs before and after publishing
• ... this image is created via a secure and pinned CI/CD process
• ... this image is very small
• ... this image can be used to execute commands after redis has started

If you value security, simplicity and optimizations to the extreme, then this image might be for you.

COMPARISON 🏁

Below you find a comparison between this image and the most used or original one.

| image | 11notes/redis:7.4.5 | redis:7.4.5 | |

|

|

| | image size on disk | 5.71MB | 117MB | | process UID/GID | 1000/1000 | 0/0 | | distroless? | ✅ | ❌ | | rootless? | ✅ | ❌ |

COMPOSE ✂️

name: "kv"

x-image-redis: &image
 image: "11notes/redis:7.4.5"
 read\_only: true

services:
 redis:
 <<: \*image
 environment:
 REDIS\_PASSWORD: "${REDIS\_PASSWORD}"
 TZ: "Europe/Zurich"
 networks:
 backend:
 volumes:
 - "redis.etc:/redis/etc"
 - "redis.var:/redis/var"
 tmpfs:
 - "/run:uid=1000,gid=1000"
 restart: "always"

# start a replica
 replica:
 <<: \*image
 environment:
 REDIS\_PASSWORD: "${REDIS\_PASSWORD}"
 TZ: "Europe/Zurich"
 command: "--replica redis"
 networks:
 backend:
 volumes:
 - "replica.etc:/redis/etc"
 - "replica.var:/redis/var"
 tmpfs:
 - "/run:uid=1000,gid=1000"
 restart: "always"

# start Redis only in-memory
 in-memory:
 <<: \*image
 environment:
 REDIS\_PASSWORD: "${REDIS\_PASSWORD}"
 TZ: "Europe/Zurich"
 command: "--in-memory"
 networks:
 backend:
 volumes:
 - "in-memory.etc:/redis/etc"
 tmpfs:
 - "/run:uid=1000,gid=1000"
 restart: "always"

# execute CLI commands via redis-cli
 cli:
 <<: \*image
 depends\_on:
 redis:
 condition: "service\_healthy"
 restart: true
 environment:
 REDIS\_HOST: "redis"
 REDIS\_PASSWORD: "${REDIS\_PASSWORD}"
 TZ: "Europe/Zurich"
 # start redis in cmd mode
 entrypoint: ["/usr/local/bin/redis", "--cmd"]
 # commands to execute in order
 command: 
 - PING
 - --version
 - SET key value NX
 - GET key
 networks:
 backend:

# demo container to actually view the databases
 gui:
 image: "redis/redisinsight"
 environment:
 RI\_REDIS\_HOST0: "redis"
 RI\_REDIS\_PASSWORD0: "${REDIS\_PASSWORD}"
 RI\_REDIS\_HOST1: "replica"
 RI\_REDIS\_PASSWORD1: "${REDIS\_PASSWORD}"
 RI\_REDIS\_HOST2: "in-memory"
 RI\_REDIS\_PASSWORD2: "${REDIS\_PASSWORD}"
 TZ: "Europe/Zurich"
 ports:
 - "3000:5540/tcp"
 networks:
 backend:
 frontend:

volumes:
 redis.etc:
 redis.var:
 replica.etc:
 replica.var:
 in-memory.etc:

networks:
 frontend:
 backend:
 internal: true

SOURCE 💾

• 11notes/redis

1: Sentinel mode will follow soon as well as the possibility to change the announce IP and port

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Alternative_Disk7814 on 2025-07-17 12:27:35+00:00.

Just wanted to share something we've been building and using ourselves.

Our team started using NocoBase last year — yes, it’s our own product — to build a CRM that actually fits our internal workflows.

And honestly, it's been working really well for us. Being able to design it around how we actually work (without needing to code everything) has made a big difference.

This year, we decided to turn it into something more reusable — a CRM template others can easily pick up, customize, and self-host.

Key features:

• Leads, contacts, customers, opportunities
• Dashboards & sales tracking
• Role-based permissions
• Visual configuration — no code needed

It’s open source and self-hostable. You can build a full CRM for free using the core features, and optionally get extra plugins if needed.

We wrote a blog post about it here: https://www.nocobase.com/en/blog/crm-solution

Always open to feedback too!

Not trying to advertise — just sharing something that’s genuinely been useful for us. Apologies if this feels out of place.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Alternative-Pea-2204 on 2025-07-17 06:27:45+00:00.

After several years of using my little utility myself, I decided to fix it up and publish it.

The required extension for chrome and firefox has not yet made it to their respective web stores, but hopefully will be coming soon. But you can load the extensions manually.

https://github.com/aflin/Self_Hosted_Search_Engine

Here's the description:

Self Hosted Search Engine – Take Control of Your Web Browsing

Please see https://github.com/aflin/Self_Hosted_Search_Engine for setup instructions.

Self Hosted Search Engine is a privacy-focused browser extension that saves the pages you visit to your own personal search engine—completely under your control. Paired with a self-hosted server, it lets you privately index and search any or every page you visit.

Key Features:

• Automatic Page Indexing

As you browse, the extension saves pages you visit to your personal search engine, running on your own server.

• Search Your Own History

Instantly perform full text searches of previously visited web pages using either the browser popup or your server’s web interface.

• Powerful Filtering

Choose which sites to include or exclude. By default, the extension skips banking and major portal sites (like Google, Bing, Yahoo, ChatGPT), which you can fully customize.

• In-Tab Controls

Each page displays a small, collapsible control bar that lets you manually upload pages, pause indexing, or switch modes.

• Manual Mode

Prefer to curate what gets saved? Enable manual mode and index only the pages you choose.

• Advanced Options

Optionally capture YouTube captions or index individual Facebook and Bluesky posts.

• Visual History

Explore your history by date or domain. View a calendar and timeline of visits.

Setup Instructions

Please visit https://github.com/aflin/Self_Hosted_Search_Engine for details on setting up the server and extension.

🛡️ Private by Design

All your data stays with you. The extension communicates only with the server you control, using encrypted connections. No third-party tracking. No cloud syncing. No data is sent to anywhere except your own server.

🖥️ Who It’s For

This extension is perfect for developers, researchers, power users, or anyone who wants to build a searchable, personal archive of their web activity—without relying on external services.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/cvicpp on 2025-07-16 18:42:45+00:00.

Hey all,

I am very happy to announce that tududi has reached almost 800 stars in github!

For those who read about tududi for the first time, it is a productivity management application, hierarchical organization and constantly updated with new features and daily basis improvements based on simplicity.

The recent versions have added a lot of stuff which seem transparent to the user but finally make things better for everyone. Some of them are....

• Smart inbox assistant proactively clarifies inbox items for you (experimental)

https://preview.redd.it/yevo7xr15adf1.png?width=1688&format=png&auto=webp&s=2e6e9d8c963edb2ce7140970a3cdd0f7abca9361

• Improved settings page with 24 languages support for the UI

https://preview.redd.it/cvuqn5mc5adf1.png?width=2308&format=png&auto=webp&s=97d2073eb35ed0974e36439ae3b9026d389dc1d6

https://preview.redd.it/xdxn8dej5adf1.png?width=3288&format=png&auto=webp&s=5d378db18754113a203d20ce381e0040841ae3e7

• Improved sidebar and added keyboard shortcuts

https://preview.redd.it/k5o1pwrt5adf1.png?width=590&format=png&auto=webp&s=c3054ce7eccf7ec2827f83152a78577fae16c371

• No more confusing, bloated forms. Simplicity is king

https://preview.redd.it/04yvgy026adf1.png?width=1434&format=png&auto=webp&s=2386cc194448a9d205403d0e561e0ab4f5c36bb2

• A pomodoro timer

https://preview.redd.it/hvvd6qhl6adf1.png?width=562&format=png&auto=webp&s=456512e5e4215786a84220115817ff6cde70f372

• A new productivity assistant (or doctor If you prefer):

https://preview.redd.it/9hcfshdz6adf1.png?width=2338&format=png&auto=webp&s=94d4b8b3b618608ae3d03cb834d4914e679ffa3e

• A smart next action assistant that suggest tasks based on certain criteria and motivates you:

https://preview.redd.it/kx0bc4l37adf1.png?width=2178&format=png&auto=webp&s=bbf6bf57bd0e23906319cec5559ec4ed25d10bb7

and among others:

• Added image banners to projects

• Markdown support in notes content

• Task procrastination indicators for tasks that keep spilling over to the next day or get overdue

• Extended recurring tasks

• Full responsive mobile layout

and....

more to come!

I also wanted to say a big thank you to all of the community that supports tududi in any possible way.

I truly appreciate it!

Cheers,

Chris

Join the community:

https://tududi.com/

https://github.com/chrisvel/tududi

https://discord.gg/fkbeJ9CmcH

https://www.reddit.com/r/tududi/

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/MattSaysProgrammer on 2025-07-16 22:22:51+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/n1___ on 2025-07-16 18:47:53+00:00.

Almost a year ago I announced 1.0.0. Here comes the new version - 1.1.0.

Obligatory info:

What is Richy (short version)

Application that helps you to manage your investing portfolio. Supports stock and crypto market. Selfhosted.

What Richy is (longer version)

• a (passive) portfolio manager
• market news hub
• a tool that aggregates information that helps you form ideas
• much better than your excel sheets

What Richy is not

• an investing platform like RobinHood
• an app that gives you investing advice
• a trading bot
• a smart app with some kind of AI that tries to predict market

Resources:

• https://hub.docker.com/r/n1cz/richy
• https://gitlab.com/imn1/richy

Changelog:

• Details in release notes

Feel free to ask question in comments. Invest safe.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Lumett on 2025-07-16 18:12:15+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/CandusManus on 2025-07-16 16:44:13+00:00.

Is there any real value in centrally managing SSH keys? Given the security concerns I've gotten by with just maintaining a store of public keys and just making sure that those are synced up to all my boxes to make sure that SSHing stays easy.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Perseus-Lynx on 2025-07-16 15:09:16+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/farique1 on 2025-07-16 12:22:18+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/johndoudou on 2025-07-16 10:37:59+00:00.

For unknown, and regrettable, reasons, these 2 awesome utilities now embeds adwares !

It is recent:

• For CrystalDiskMark, this starts from version 9.0.0.
• For CrystalDiskInfo, this starts from version 9.7.0

You can see the "*ads.exe" files:

• https://sourceforge.net/projects/crystaldiskmark/files/9.0.1/
• https://sourceforge.net/projects/crystaldiskmark/files/9.0.0/
• https://sourceforge.net/projects/crystaldiskinfo/files/9.7.0/

More explanations here: https://forums.tomshardware.com/threads/is-crystaldiskinfo-still-safe.3882065/

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/fozid on 2025-07-16 08:07:20+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Redditlurker1245 on 2025-07-16 05:06:49+00:00.

Ive been messing around with a home server on an old laptop mostly for fun and I was wondering if self hosting a password manager and 2FA generator is worth it? I don’t really have a good reason to, I currently use Bitwarden and Authy and I don’t have a problem with either. I would only do it because it’s cool and the potentially added security benefits(?), though I heard I would have to do some periodic maintenance to make sure everything is secure. Is it worth the hassle?

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/TheIslanderEh on 2025-07-15 23:15:28+00:00.

Hey guys, I'm looking for recommendations of your must have apps for your families.

I'm thinking chore tracking, to-do lists, recipes (with simple import tools from web links?), shopping lists, budgeting (bonus if it offers bank integration in Canada) and anything else you can think of.

My end goal is to have a wall mounted tablet with some of these apps integrated into a HA dashboard, for easy viewing and tracking. Would like to get in the habit of doing it now so when my kids are a little older they can also join in on the chores etc...

I tried Grocy but it was way too much for what I need and didn't quite suit what I want.

Thanks in advance!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/throwaway16830261 on 2025-07-16 00:39:16+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/pixeltrix on 2025-07-15 13:50:24+00:00.

Hey everyone,

I'm interested to know what tool/s you are using for task management and what your general workflow is?

I really like Wekan for project managament, but I find it a bilt bulky for granular day to day to do lists. Plus I really need recurring tasks.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Kind_Contact_3900 on 2025-07-15 13:44:10+00:00.

I work at a company where product, data, and ops teams constantly need “quick APIs” to access or manipulate data.

Every week someone would ask:

“Hey, can you create an endpoint that fetches X from our DB?”

It wasn’t complicated — but it took time to:

• Create a new route
• Write DB access logic
• Validate inputs
• Test it in Postman
• Deploy it

And honestly, it distracted me from deeper work.

So I started building Dyan — a visual REST API builder that anyone on my team can use (without writing code), but still keeps everything local, version-controlled, and self-hosted.

https://github.com/Dyan-Dev/dyan

We now run Dyan internally and expose simple endpoints to different teams safely. It’s made internal tooling way more efficient.