This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/SnooDoughnuts9361 on 2025-03-21 19:25:12+00:00.

Only reason I can think of is having a proper CA signing my certs so I don't need to add my cert to all my clients. But am I missing anything?

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/SnooDoughnuts9361 on 2025-03-21 16:36:08+00:00.

I am considering deploying a stack and uploading my personal data to it, but it has me thinking on the security part of it. I plan to restrict the Docker node to LAN only via Firewall rules, but what's stopping a malicious container update sending personal data to a central server, or "phoning home"? Using this for bank and credit card statements for Firefly, photos to immich, and receipts and legal documents to paperless I might need to rethink. Is that not safe?

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/SillyLilBear on 2025-03-21 12:38:44+00:00.

I'm always looking for ideas for self hosting services. What's one that you don't see people talking about but you can't live without? We see a million posts asking what is your favorite.

For me, it's self hosting Healthchecks.io. I love this service, and I use it for work and home extensively, especially to keep track of my backups, monthly backup verification, and monthly pruning of backups. I use the public healthchecks.io to do a sanity check on my instance to assure it is running as well as IP checks on the server that runs it. If my backup fails for whatever reason, I know about it immediately.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/shol-ly on 2025-03-21 11:55:26+00:00.

Happy Friday, r/selfhosted! Linked below is the latest edition of This Week in Self-Hosted, a weekly newsletter recap of the latest activity in self-hosted software and content.

This week's features include:

• Plex Pass subscription updates
• Cloudflare's annual security week
• Software updates and launches
• A spotlight on PlikShare -- a file uploading and sharing platform
• A ton of great guides and content from the community

Thanks, and as usual, feel free to reach out with feedback!

This Week in Self-Hosted (21 March 2025)

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/stonkymcstonkalicous on 2025-03-21 06:39:22+00:00.

I had been using Homepage for a while, but the simplicity of Glance really resonated with me. I’d already invested a lot of time and effort configuring all my services in Homepage, and I didn’t want to throw that away. So, I iframed my Homepage setup and created custom CSS to match the look and feel of my Glance theme. I did the same for MkDocs and Uptime Kuma.

I've now added Home Assistant entities into the mix as well — it was a bit fiddly, but this might inspire other boffins to do some cool stuff too.

My CSS and example configs can be grabbed here:

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/DontPlayMeLikeAFool on 2025-03-21 01:15:12+00:00.

After months of development, I'm sharing Second Me, a self-hostable alternative to cloud-based AI assistants.What makes it different:

• Runs completely locally
• Creates an AI that learns your preferences, writing style, and decision patterns
• Hierarchical memory system for better personalization
• Interacts with other self-hosted AIs through a peer-to-peer protocol

I built this because I wanted AI assistance without surrendering my data to tech giants. The system requirements are reasonable, and it works well even on modest hardware.The repo includes installation instructions for various environments. Would love feedback from the self-hosting community!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/BeautifulEditor4227 on 2025-03-20 22:22:59+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/TheWicklowWolf on 2025-03-20 18:01:23+00:00.

Anyone looking for a project to get involved with??

Maybe MediaWolf is for you...

What is it?

It’s a Media Discovery and Download Hub which acts as add-on or extension for the Arr stack and more, designed to manage and obtain media both manually and automatically. Think of it as a media manager, recommendation and helper app.

What's the Problem?

I've made a start, but for long-term stability and maintainability, the project needs more contributors. It's highly modular, with separate services, making it easy for new developers to jump in and focus on specific areas.

Where to Start?

I’ve set up the repo on GitHub at  and I’m happy to add people to the the project. This way, the project won’t be dependent on any one individual. With enough developers, it will help keep the project alive and ensure long-term stability.

Note: This could be a great first project if you're just starting out, as the modular architecture makes it easy to contribute without needing to tackle everything at once. Apologies if you've already seen this or if its against the rules..

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/krelltunez on 2025-03-20 15:22:54+00:00.

BLOT: I haven't found a single tool (or set of tools that play nice together) that supports all of my needs, so I'm considering going back to Todoist after 2 years of experimenting with self-hosted apps.

LONG PART: Around 2 years ago, I decided to get as much away from Google as I could, mainly for emails, calendar, etc. I switched to Proton for email (the one thing I didn't want to self-host) and Nextcloud for everything else (and, for the most part, have never looked back). Since Nextcloud has tasks functionality built in, I cancelled Todoist and started using Nextcloud with the excellent Tasks.org app.

While the Nextcloud/Tasks combo has mostly met my needs, it has limited my workflow in a number of ways. First and foremost, Tasks doesn't have a desktop app and there's no iOS app. So, when I'm on Windows/iOS/MacOS, I have to use the Nextcloud web view which is basic and ugly. And as much as I've loved the Tasks app, it is quite limited, too. There are no views other than lists - i.e., no calendar view, Kanban board view, etc.

Recently, in an attempt to find a better solution, I've tried Vikunja - another absolutely great self-hosted app that has a nice web app but only an alpha Android app and nothing for iOS. Still, the app supports different views (though I only find the Kanban and Table views useful). Vikunja strangely lacks some basic features IMO, namely sorting within lists and the ability to leverage labels/tags. It has CalDAV functionality, meaning I can use it with Tasks.org, but syncing it breaks repeating tasks (which are a huge part of my workflow).

Of course, nothing is perfect. There are two main issues I think I'll still have with Todoist: (1) the calendar view can only sync with Google or Outlook calendars, so while there is a calendar view it will not show my appointments, work meetings, etc., and (2) there's no native support for linking to Obsidian notes. Regarding the latter, I previously played with some Obsidian plugins, but the lack of native support means it'll be nothing more than a workaround.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Roast_Slav on 2025-03-20 19:35:40+00:00.

For those new to QuickDrop, it’s a simple self-hosted app for uploading and sharing files—no user accounts required. You can password-protect your uploads, set time-based or single-use links, and more. Now, with v1.4.0, here’s what’s new:

About Page & System Info

• Quick Overview: Easily see the current version, database info, Java version, and OS details.
• Troubleshooting: Makes reporting issues simpler by showing key environment data.

Hide Admin Dashboard Button

• Config Toggle: Decide whether to show or hide the admin dashboard link in the UI.
• Security: Even if hidden, admin routes are still protected by authentication.
• Cleaner Interface: Great for a more minimal, end-user-focused experience.

Custom Number of Uses for Share Links

• Limit Downloads: Specify how many times an unrestricted link can be accessed before it’s disabled.
• Expiration Combo: Combine usage limits with an expiration date for extra control.
• Better Sharing Control: Perfect for distributing files to a specific group.

Encryption Changes

• Optional Encryption: You can manually choose to disable encryption, even if a password is set, for faster or simpler uploads.

Bug Fixes & Improvements

• Chunked Upload Stability: Large files now upload more reliably without hitting buffering issues.
• UI/UX Polish: Minor style adjustments for a smoother experience.
• General Maintenance: Under-the-hood enhancements to keep QuickDrop fast and stable.

Try QuickDrop 1.4.0 and let me know what you think! Visit the Github page for the source code, documentation, and to share feedback. Enjoy the new features!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Developer_Akash on 2025-03-20 12:08:50+00:00.

Hey r/selfhosted!

Today I am sharing about another service I've been using in my homelab - n8n.

n8n is a workflow automation tool that allows you to connect and automate various services in your homelab. Recently they have added a lot of new features including a native AI Agent.

I started exploring n8n when I was looking for a tool to help me automate some of my usual mundane tasks that I have to do periodically, after trying out n8n I was hooked and in awe with the capabilities of the tool and how easy it is to use.

Here's my attempt to share my experience with n8n and how I use it in my homelab.

Have you used n8n or any other workflow automation tool? What are your thoughts on it? If you are using n8n, I'd love to hear more about your workflows.

n8n — Powerful automation for your homelab services

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/ss7admin on 2025-03-20 05:42:08+00:00.

I am tired of Grammarly and its pro features popup. It slows down the pc as well.

Is there any alternative / self hosted version with similar feature like Grammarly? I mainly use in outlook when composing email and use in ms word.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/klaasvanschelven on 2025-03-19 19:43:08+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/ElevenNotes on 2025-03-19 22:15:06+00:00.

SYNOPSIS 📖

What can I do with this? This image will run a proxy to access your docker socket read-only. The exposed proxy socket is run as 1000:1000, not as root, although the image starts the proxy process as root to interact with the actual docker socket as root. There is also a TCP endpoint started at 8080 that will also proxy to the actual docker socket if needed.

I was just tired of seeing all these people exposing their docker socket to random containers as root and with full access to everything, especially Traefik. There is simply no need for that.

Docker Hub, Github

REDDIT 🤖

• Reddit User: What’s the difference between this and {n}?
• u/ElevenNotes: This image runs the proxy socket as 1000:1000, not as root like all other images. It is also a single statically linked binary and not a haproxy, nginx or node app.
• Reddit User: I use {n} since years and it works
• u/ElevenNotes: That is great. It’s good to have options to run your apps however you prefer. That’s what FOSS is all about. If you are happy there is no need to switch.
• Reddit User: So why should I use your proxy instead of {n}?
• u/ElevenNotes: If you value security, for instance container images that are automatically scanned for vulnerabilities and patched, as well as minimizing your footprint in terms of image size and rootless, then my images are a great start. That doesn’t mean other images are not just as good or even better. This image is not a competitor for {n}, it’s just another option for you to run your services. Another FOSS project for you to benefit from.
• Reddot User: So how does this work? Do you have an example?
• u/ElevenNotes: Sure, you can click on both links above and read the README.md that explains all details about the image as well as the source and a compose or you can simply look at the compose on this post.
• Reddot User: Okay, so this image exposes the docker socket via Traefik to the internet?
• u/ElevenNotes: No. This image does not do that. It only exposes (look at the compose.yml) the docker socket as read-only to Traefik for the docker provider. Something most people do by directly mounting the docket socket into Traefik, root and full access (very bad idea).

COMPOSE ✂️

name: "socket-proxy"
services:
  socket-proxy:
    image: "11notes/socket-proxy:1.0.1"
    volumes:
      - "/run/docker.sock:/run/docker.sock:ro" # mount host docker socket, the :ro does not mean read-only for the socket, just for the actual file
      - "socket-proxy:/socket-proxy/run" # this socket is run as 1000:1000, not as root!
    restart: "always"

  traefik:
    image: "11notes/traefik:3.2.0"
    depends_on:
      socket-proxy:
        condition: "service_healthy"
        restart: true
    command:
      - "--global.checkNewVersion=false"
      - "--global.sendAnonymousUsage=false"
      - "--api.dashboard=true"
      - "--api.insecure=true"
      - "--log.level=INFO"
      - "--log.format=json"
      - "--providers.docker.exposedByDefault=false" # use docker provider but do not expose by default
      - "--entrypoints.http.address=:80"
      - "--entrypoints.https.address=:443"
      - "--serversTransport.insecureSkipVerify=true" # do not verify downstream SSL certificates
    ports:
      - "80:80/tcp"
      - "443:443/tcp"
      - "8080:8080/tcp"
    networks:
      frontend:
      backend:
    volumes:
      - "socket-proxy:/var/run"
    sysctls:
      net.ipv4.ip_unprivileged_port_start: 80
    restart: "always"

  nginx:
    image: "11notes/nginx:1.26.2"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.default.priority=1"
      - "traefik.http.routers.default.rule=PathPrefix(`/`)"
      - "traefik.http.routers.default.entrypoints=http"
      - "traefik.http.routers.default.service=default"
      - "traefik.http.services.default.loadbalancer.server.port=8443"
      - "traefik.http.services.default.loadbalancer.server.scheme=https" # proxy from http to https since this image runs by default on https
    networks:
      backend: # allow container only to be accessed via traefik
    restart: "always"

volumes:
  socket-proxy:

networks:
  frontend:
  backend:
    internal: true

PS: Wanted to crosspost to this sub, just like Traefik, but this sub does not allow crosspots. So please apoligize if it looks spammy.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/UsedToBeaRaider on 2025-03-19 20:57:19+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Jacksaur on 2025-03-19 15:00:03+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/IT-BAER on 2025-03-19 11:22:55+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/RugBeater1 on 2025-03-19 08:30:34+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/m4nz on 2025-03-19 03:39:55+00:00.

This might be weird for a lot of you, but I have a strong feeling that some of you maybe able to relate with this!

I have been looking for a selfhosted app for journaling and as you are aware of, there are a bunch of options.

For example, I already use Obsidian + Syncthing for all my notes (work and personal projects) so I could easily use Obsidian. So I gave it a try. But I wasn't feeling it. It felt "cluttered" with all my other notes and I was wasting more time trying to "organize" it rather than writing.

Then I tried "Monica CRM", while great, I wasn't impressed

Then I came across memos, it looks exactly what I was looking for -- except that the "writing" part of it was not that "inviting"

At this point, I realized that I already use Ghost for some of my sites and I enjoyed the overall experience. So I created a Ghost blog with Docker compose, slapped a domain, installed a theme and made it available only on my home network. I also made the site private with a password.

And I just.. started writing.. There is not a single software out there I have ever used that "invites you to write" like the Ghost editor. Maybe it is just me, but there is something magical about it.

I love it! This fits all my needs. I can easily write from any of my devices (I also have wireguard access to my home if I am outside), it is safe, secure and private, and looks beautiful to read and write. If you are looking for something simple and beautiful to write anything, maybe give it a try.

If you have a similar journey and if you found something even simpler and nicer, I am curious to hear about it

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/LinguaCafe on 2025-03-18 21:21:56+00:00.

Hi!

LinguaCafe is a self-hosted software that helps language learners read foreign languages and acquire vocabulary. It provides a set of tools to read texts, look up unknown words and review them later as effortlessly as possible.

GitHub

Overview

Youtube video (v0.9, made by a user)

User manual

Important changes:

• The update process has been extended with an extra step: you must also download the latest docker-compose.yml file. This time multiple things were changed, but I'll try to provide a list of further changes in the future, so people won't have to check their custom setups for every version.
• LinguaCafe has started using local storage instead of cookies and has a new text styling system, this means that all of your local settings will reset to default when you first start using this version.
• 6001 port has been added to the webserver for websockets.

New features:

• Added queue based chapter imports. From now on you won't have to wait for your chapters to be imported, it will happen in the background. If you open a book, the chapters will be updated in real time after the importing is finished.
• Dictionary import progress bar now shows real time progress.
• Added new online translation service: MyMemories.
• Added new offline, self hosted translation service: LibreTranslate.
• Added an API to connect custom scripts and translation services to LinguaCafe.
• Replaced cookies with local storage. This means that your local settings will reset to default settings.
• Added level to hover vocabulary box for highlighted words.
• Added .webp support for book cover images.
• Added auto theme switching based on system theme.
• Added an export database button to the admin page.
• Added automatic daily database backups.
• Added a change password button to the user settings.
• Added a button that lets users delete all their data related to their selected language.
• Added a statistic that shows the users known unique lemmas.
• Added fully customizable interactive text styling.

Bug fixes:

• Book word counts did not update after deleting a chapter.
• Text reader's light theme glossary word colors were not displayed correctly.
• Text reader's glossary displayed "2" instead of "new" for new words.
• Development tools page had incorrect background for light theme.
• Book word count percentages were displayed incorrectly in empty books and chapters.
• Fixed inconsistencies in custom themes when the user selected different foreground color.
• The selected font type was not applied to the hover vocabulary's reading section.
• The selected font type was not applied to the text reader's title.

Other changes:

• Updated to Laravel 11.
• Replaced default book cover image.
• Replaced switches with checkboxes on the vocabulary export page.
• Removed simple text parsing method. It was something needed before v0.1, because import times were very slow.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Another__one on 2025-03-18 18:45:46+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/bohique_8 on 2025-03-18 14:04:12+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/trailbaseio on 2025-03-18 19:53:58+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/d03j on 2025-03-18 19:21:30+00:00.

I had never heard of this before. Has anyone tried? It's only a text / note editor , and the suite also has a google meet alternative but it is interesting it is an open source suite from the french government.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/gyaani_guy on 2025-03-18 17:06:16+00:00.

Introducing Personal Drive :

Demo:

A simple self hosted alternative to google drive, upload your files on your own server, view photos, download, delete from web UI. share files with optional password protection.

Feature wise, there is probably nothing major I do over 'file browser' . But if you are file browser user, I would love to have your opinion.

Coded in laravel and react. Made mostly for learning purposes. Initially I didn't plan to open it, but thought it would be a good exercise in having my code scrutinized and as a portfolio piece.

Please have a look and share your thoughts. Am kind of nervous, since it is the first time I am doing something like this..

Edit:

• ha someone tried to xss on the "new folder" , turns out I didn't have proper validation on the foldername !! . Have fixed on the main branch. will update demo later, since many are trying it atm