This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/RanidSpace on 2025-05-25 03:31:25+00:00.

My family has a Plex server with Remote Streaming enabled, and I'm thinking of moving to Jellyfin and adding other services like Sonarr or whatever else i can think of that might be useful

If I could just put it on a VPN I would. I have my own little raspi running some server stuff for me which i connect to over Tailscale, and it is. so easy. and so secure and it's nice and everything. If i tell my family and the few friends who use it that they have to install a thingie on Every Single Device They Own and it has to run All The Time or turn it on and off every time they want to do something, they will beat me up.

Tailscale free tier also has only 3 users per net, and there's more than 3 people who will use it. I think we'd be good to pay for a better tier, but it would still have to connect to TVs and devices which cant install tailscale or whatever other VPN solution there is. I think having to explain how to set up a subnet router to get around that over the phone to someone and then provide continued tech support to them afterwards may be worse than hell.

Anyway, I have a base knowledge of stuff. We have a domain and I can run everything through a reverse proxy to get proper SSL certificates and to only expose one port. I can run fail2ban. I can do some other hardening like not running anything as root, having a firewall, but afterwards I don't know.

I could whitelist IPs, but I don't want to have to deal with doing that every time, plus they may want to watch or use things from other locations, and even country-wide IP whitelisting might not work because they travel a lot.

I'd like to hide the IP of the domain, i think there's cloudflare proxying for that but I hear they don't want you sending video traffic through it or something (or is that tunnels?), I run it through a VPS but i dont know how to really do that? would I send the traffic from the home server to the VPS through a VPN and have the reverse proxy on there?

I've heard of Authentik, do I install that and then integrate it with each service?

I would like to make things as secure as possible and Not Kill Our Home Network while also having it be just as easy to use. Is this a fruitless endeavor which will only end in misery or am i just being paranoid.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/esiy0676 on 2025-05-24 21:12:30+00:00.

Cease and desist letters to non-subscribers I have not seen previously anyone express their opinion on as freely as here - but I might have missed it.

More on this: https://arstechnica.com/gadgets/2025/05/broadcom-sends-cease-and-desist-letters-to-subscription-less-vmware-users/

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/maxwolt on 2025-05-24 20:23:23+00:00.

Quantixy is proxy which auto-sleeps and wakes Docker containers when the website is reached. Containers are both running and not running until someone checks.

It's not trying to be better than alternatives (haven't searched for any), just want to share my easy approach to auto-start/shutdown Docker containers by reaching the website (to save server resources since some services are just running without any sense for weeks) and without need to use console/some Docker panel/GUI (like Portainer).

If you find something not described enough or so, then write comment here, write me message, issue on Github, as you wish.

It's using quite simple .sh script and Python combined with NGINX which redirects the requests. Styled loading page etc.

It's FIRST release, I wouldn't recommend it for beginners with selfhosting, it may have some flaws or might not work for your usecase (i tested it only on my servers) - again, write me request/issue.

Lemme know, if you like it (or not - please provide constructive criticism).

Whole project - https://github.com/maskalix/quantixy

Build I use - https://hub.docker.com/r/maskalicz/quantixy

P.S.: edit, fork etc. as you wish. As long as it helps someone, I'm happy.

EDIT: Github link should be working by now, forgot to change link from private to public. Sorry!

Loading page

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Cautious-Hovercraft7 on 2025-05-24 17:14:00+00:00.

I'm winning, nearly there.....

https://preview.redd.it/aerbrcowir2f1.png?width=1063&format=png&auto=webp&s=7b260128ae6c0b3ec8182f97082127c273f4b3df

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/agneev on 2025-05-24 16:48:56+00:00.

TL;DR: I use Jellyfin over Traefik while streaming remotely

Hello,

As I recently moved to using Jellyfin over Plex, which I detailed here, I was exploring ways to access Jellyfin remotely.

My ISP uses CGNAT, which means ports cannot be remotely accessed. I get around this by using Tailscale. The VPN creates a direct connection to my network.

To achieve this, I set up a fixed Tailscale IP address for the server running Jellyfin that is easy to remember. Since the server's LAN IP is 10.0.0.11, I set the Tailscale IP to 100.64.0.11.

Currently, Jellyfin is deployed in Docker, and listens both on a local VLAN network as well as an internal Docker network.

I wanted to maintain the same domain name across both local and remote access routes, that way no reconfiguration is needed. The local DNS was already configured to point the domain to the VLAN IP, but I needed to replicate this on Tailscale. I was already using NextDNS to block ads and decided to use the custom DNS feature to do just this:

https://preview.redd.it/pqlzdukbcr2f1.png?width=882&format=png&auto=webp&s=fe0c7563028222fcedb987abb190dd8b20db8602

Since it isn't possible for the VLAN to be reachable from Tailscale, I added the Tailscale IP of the machine.

Next, I added a route in traefik for jellyfin:

... 
   labels:
      traefik.enable: true
      traefik.name: jellyfin
      traefik.docker.network: media
      traefik.http.routers.jellyfin.tls: true
      traefik.http.services.jellyfin.loadbalancer.server.port: 80

Finally, I updated jellyfin to reflect the domain that's used, set traefik as a known proxy to gather client details and designated the Tailscale IP range as local to curtail bandwidth limitations:

https://preview.redd.it/o464qdb6dr2f1.png?width=1058&format=png&auto=webp&s=27f6face1092b31fa1ff1cd371e83bb61c979df0

https://preview.redd.it/aj7mb42jer2f1.png?width=942&format=png&auto=webp&s=357f10954046a8ee2630b4d85f433fa9e0679874

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Anejey on 2025-05-24 11:24:52+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/TheDannol on 2025-05-24 07:37:29+00:00.

Hey everyone, Like many of you, I found Linux Journey to be an awesome resource for learning Linux in a fun, approachable way. Unfortunately, it hasn't been actively maintained for a while.

So I decided to rebuild it from scratch and give it a second life. Introducing Linux Path — a modern, refreshed version of Linux Journey with updated content, a cleaner design, and a focus on structured, beginner-friendly learning.

It’s open to everyone, completely free, mobile-friendly, and fully open source. You can check out the code and contribute here: Here

If you ever found Linux Journey helpful, I’d love for you to take a look, share your thoughts, and maybe even get involved. I'm building this for the community, and your feedback means a lot.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Cursed_Saint on 2025-05-23 20:51:41+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/User9705 on 2025-05-23 19:37:54+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/pommeet on 2025-05-23 16:32:50+00:00.

My sideproject GoAway just released version 0.47.0, and has seen lots of changes and improvements since the last time I posted about it. As a reminder, this is a DNS sinkhole written in Go with a sleek and modern dashboard out of the box to manage the server.

Some of the changes done since last time:

• Prefetching
• Notifications
• API keys
• JSON logging
• Export database
• Easier config file
• Ability to update block lists
• And much more

If this sounds interesting, then you can find the repository here: https://github.com/pommee/goaway

And as always, thoughts and feedback is always appreciated.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/lubricantjam on 2025-05-23 15:47:12+00:00.

Hello everyone!

After a chaotic past, I’m excited to share that Wizarr has been completely rewritten, back to basics. We're leaving the past behind and rethinking the whole point of Wizarr.

The problem: Inviting your Friends/Family to your Plex server Is complicated and tedious. It's also a hard concept for them to get their head around.

The solution: Wizarr makes it easy to invite users to your server by simply sending them a link, and guides them through the process of getting set up.

🔥 Features in 2025.5

• Beautiful UI to Manage Plex/Jellyfin/Emby Users
• Effortlessly Invite Users via Invite Links
• Guide New Users on the functioning of your server
• Multi-tiered invitation access
• Time-limited membership options
• Request system integration (Overseerr, Ombi, etc.)
• Discord invite support
• Notifications via NTFY and Discord
• Customisable Invitation Steps via Markdown

Coming Soon Features:

• Multi Admin Support
• Emby Guide
• Advanced Api to make Wizarr incredibly powerful

All existing settings, invites, and users will be automatically migrated if you point the container at your old database.db. However, you will need to recreate your admin account, as well as re-enter your Token/API Key (for security)

🙏 Feedback & Contributions

Your feedback is invaluable:

• 🔧 Report bugs or suggest enhancements on GitHub Issues
• 💬 Join the discussion here or hop into our Discord
• ⭐ Star the repo if you like the changes!
• 😍 Sponsor the Project

Enjoy, and happy streaming!

🔥 Features in 2025.5

• Beautiful UI to Manage Plex/Jellyfin/Emby Users
• Effortlessly Invite Users via Invite Links
• Guide New Users on the functioning of your server
• Multi-tiered invitation access
• Time-limited membership options
• Request system integration (Overseerr, Ombi, etc.)
• Discord invite support
• Notifications via NTFY and Discord
• Customisable Invitation Steps via Markdown

Coming Soon Features:

• Multi Admin Support
• Emby Guide
• Advanced Api to make Wizarr incredibly powerful

All existing settings, invites, and users will be automatically migrated if you point the container at your old database.db. However, you will need to recreate your admin account, as well as re-enter your Token/API Key (for security)

🙏 Feedback & Contributions

Your feedback is invaluable:

• 🔧 Report bugs or suggest enhancements on GitHub Issues
• 💬 Join the discussion here or hop into our Discord
• ⭐ Star the repo if you like the changes!
• 😍 Sponsor the Project

Enjoy, and happy streaming!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/dougmeredith on 2025-05-23 15:19:15+00:00.

You were right.

I've spent over 100 hours trying to make Stalwart and various mail clients work. I've learned a lot on the way, including that I was right 15 years ago when I vowed to never again host my own email. lol

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/ModerNew on 2025-05-23 13:20:53+00:00.

As title says. Outside of a corporate/sterile (secure) environment, why are people selfhosting URL shorteners? What are the benefits?

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/tinpanalleyman on 2025-05-23 13:12:50+00:00.

For every time I bricked my server by making an update that I thought would be fine, I’d have 3 dollars now. Live and learn!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/geekau on 2025-05-23 13:02:25+00:00.

The MediaStack development work has just been pushed to production, with a major update to stack applications, but moreso the network architecture for remotely accessing the environment.

MediaStack at GitHub: https://github.com/geekau/mediastack

• Secure Reverse Proxy: Traefik, Authentik, and CrowdSec provides a full reverse proxy solution with free Let's Encrypt digital certificates, including SSO / OAuth2 / OpenID / SAML / Radius / LDAP identity providers and MFA. Traefik Certs Dumper extracts the Let's Encrypt cetificates so you can install them on other systems.
• Secure Tailscale Meshed Network: Headscale is an open source Tailscale Coordination Server, allowing remote Tailscale clients to connect to the Headscale and Tailscale applications, and accessing all of the containers over the meshed network connection. Include Headplane to provide a WebUI portal to manage Headscale settings.

The new configuration is a single docker-compose.yaml file, with all of the docker applications which connect to Gluetun, are now set to depend_on Gluetun, will now stop / restart, when Gluetun stops / restarts.

Secure Reverse Proxy

Secure Tailscale Meshed Network:

| Docker Application | Application Role | |

|

| | Authentik | Authentik is an open-source identity provider for SSO, MFA, and access control | | Bazarr | Bazarr automates the downloading of subtitles for Movies and TV Shows | | CrowdSec | CrowdSec is an open-source, collaborative intrusion prevention system that detects and blocks malicious IPs | | DDNS-Updater | DDNS-Updater automatically updates dynamic DNS records when your home Internet changes IP address | | Filebot | FileBot is a tool for renaming and organising media files using online metadata sources | | Flaresolverr | Flaresolverr bypasses Cloudflare protection, allowing automated access to websites for scripts and bots | | Gluetun | Gluetun routes network traffic through a VPN, ensuring privacy and security for Docker containers | | Grafana | Grafana is an open-source analytics platform for visualising metrics, logs, and time-series data | | Guacamole | Guacamole is a clientless remote desktop gateway supporting RDP, VNC, and SSH through a web browser | | Headplane | Headplane is a web-based user interface for managing Headscale, the self-hosted alternative to Tailscale | | Headscale | Headscale is an open-source, self-hosted alternative to Tailscale's control server for managing WireGuard-based VPNs | | Heimdall | Heimdall provides a dashboard to easily access and organise web applications and services | | Homarr | Homarr is a self-hosted, customisable dashboard for managing and monitoring your server applications | | Homepage | Homepage is an alternate to Heimdall, providing a similar dashboard to easily access and organise web applications and services | | Huntarr | Huntarr is an open-source tool that automates finding missing and upgrading media in *ARR libraries | | Jellyfin | Jellyfin is a media server that organises, streams, and manages multimedia content for users | | Jellyseerr | Jellyseerr is a request management tool for Jellyfin, enabling users to request and manage media content | | Lidarr | Lidarr is a Library Manager, automating the management and meta data for your music media files | | Mylar | Mylar3 is a Library Manager, automating the management and meta data for your comic media files | | Plex | Plex is a media server that organises, streams, and manages multimedia content across devices | | Portainer | Portainer provides a graphical interface for managing Docker environments, simplifying container deployment and monitoring | | Postgresql | PostgreSQL is a powerful, open-source relational database system known for reliability and advanced features | | Prometheus | Prometheus is an open-source monitoring system that collects and queries metrics using a time-series database | | Prowlarr | Prowlarr manages and integrates indexers for various media download applications, automating search and download processes | | qBittorrent | qBittorrent is a peer-to-peer file sharing application that facilitates downloading and uploading torrents | | Radarr | Radarr is a Library Manager, automating the management and meta data for your Movie media files | | Readarr | is a Library Manager, automating the management and meta data for your eBooks and Comic media files | | SABnzbd | SABnzbd is a Usenet newsreader that automates the downloading of binary files from Usenet | | Sonarr | Sonarr is a Library Manager, automating the management and meta data for your TV Shows (series) media files | | Tailscale | Tailscale is a secure, peer-to-peer VPN that simplifies network access using WireGuard technology | | Tdarr | Tdarr automates the transcoding and management of media files to optimise storage and playback compatibility | | Traefik | Traefik is a modern reverse proxy and load balancer for microservices and containerised applications with full TLS v1.2 & v1.3 support | | Traefik-Certs-Dumper | Traefik Certs Dumper extracts TLS certificates and private keys from Traefik and converts for use by other services | | Unpackerr | Unpackerr extracts and moves downloaded media files to their appropriate directories for organisation and access | | Valkey | Valkey is an open-source, high-performance, in-memory key-value datastore, serving as a drop-in replacement for Redis | | Whisparr | Whisparr is a Library Manager, automating the management and meta data for your Adult media files |

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/piotrkulpinski on 2025-05-23 11:18:53+00:00.

Hi,

As you probably know by now, Mozilla is shutting down Pocket on July 8th, 2025 to focus on other products.

If you're affected by this change, I've compiled some of the best open-source alternatives to Pocket:

https://openalternative.co/alternatives/pocket

This is by no means a complete list, so if you know of any solid alternatives that aren't included, please let me know.

Thanks!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/justin_kasmweb on 2025-05-23 05:06:16+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Oujii on 2025-05-22 22:15:31+00:00.

Someone just randomly joined my Tailnet

Hey! Crossposting is not allowed here, but I think it's good that everybody that is currently using or thinking about using Tailscale check this thread that has just dropped on r/Tailscale.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/pranay01 on 2025-05-22 17:15:49+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/brufdev on 2025-05-22 17:42:23+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Own-Syllabub476 on 2025-05-22 10:40:01+00:00.

We’ve recently welcomed a new CEO but he's making a lot of changes and is on a crusade for data ownership. The way things look now, we'll probably switch analytics platforms, so I thought I'd get ahead of the curve and see if I could get some tips on something that fits his criteria. Thanks.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/InvestigatorThat4835 on 2025-05-22 07:13:59+00:00.

Hey everyone,

I wanted to share a project I've been working on that might be useful for those who self-host Gitea but still need to work with GitHub repositories.

Gitea Mirror is a web app that automatically mirrors your GitHub repositories to your self-hosted Gitea instance. It features:

• Mirror public, private, or starred GitHub repos
• Mirror entire organizations with structure preservation
• Optional mirroring of issues and labels
• Modern UI with real-time status updates
• Multiple deployment options (Docker, Bun, LXC)

It's completely open source and designed to be easy to set up. If you're looking to maintain GitHub backups or just prefer working in your own Gitea environment, you might find it helpful.

GitHub Repository

Would love to hear your thoughts or suggestions if you try it out!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Austechprep on 2025-05-22 02:46:27+00:00.

Hi all,

I've done a search and theres a few posts similar, looks like Tunarr, DizqueTV and ErsatzTV are options I will investigate.

My goal is to have some select different TV shows play sequentially instead of the current "Binge watching" that currently occurs on my Plex/Jellyfin setups, this will give a bit more routine and a clear end time to the TV watching time.

An added bonus would be to splice in "ads" of videos I make myself to tell the kids to go brush their teeth etc, I suspect that would be as easy as making the video and just adding it into the playlist.

Has anyone implemented something like this succesfully?

Essentially creating a ~1 hour block of different TV shows that cycle to the next episode each time the block is viewed?

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/signalwarrant on 2025-05-21 21:43:15+00:00.

Did not know this existed. https://selfh.st/apps/

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/baddajo on 2025-05-21 18:04:38+00:00.