This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/theunknownbetrayed on 2025-01-21 09:00:22+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/klaasvanschelven on 2025-01-20 18:33:53+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Eikekie1 on 2025-01-20 23:35:24+00:00.

---

Sorry if this is a dumb question. I have set up a raspi with home assistant and started using cloudflare tunnels, which are almost too easy to set up. Now I do have some basic networking knowledge but I simply struggle to understand what a cloudflare tunnel is exactly.

I have found many posts discussing the advantages/disadvantages and some basic high level explanation but I don't like this marketing explanation of "tunnel". Could someone please explain to me:

• How it works without opening a port on my router and without me even having a static public IP4 address
• What the difference is to a "normal" reverse proxy / VPN

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Sanjeet990 on 2025-01-20 22:22:27+00:00.

---

Hey everyone!

I’m excited to announce the release of Astroluma v1.0.2! This update brings a host of new features, bug fixes, and improvements.

What is Astroluma:

Astroluma is a feature-rich, productivity oriented, user-friendly dashboard designed to help you manage multiple aspects of your daily tasks and services. Built with flexibility in mind, it allows you to control various features like task management, device monitoring, app integration, and real-time weather updates, all from a single platform. With its responsive design and dynamic configuration options, Astroluma offers a unique blend of customization, usability, and productivity.

Here's a changelog of what's new:

Enhancements & Fixes:

Error Reporting:

• Improved segregation between credential errors and database errors.
• Database errors are now reported accurately, ensuring better troubleshooting.

Authenticator Drawer:

• Updated for smoother transitions and improved user interaction.

Dashboard Reliability:

• Fixed issues where the dashboard occasionally displayed outdated or no data.

Themes:

• Added 2 new light themes: Titan and Europa.
• Introduced 1 new dark theme: Nebula.
• Minor modifications in other themes

User Interface:

• Various UI fixes for improved usability and visual consistency.

New Features

Migration Scripts:

Introduced support for proper migration scripts to simplify future updates.

Application Integration:

• Major overhaul of the application integration section:
• Configure integrations on a per-tile basis for better flexibility.
• Standardized integrations for consistency across apps.
• Enhanced error reporting for app integrations.
• Downloadable App Integrations: Install integrations directly from a ZIP file.
• Now supports 17 apps for seamless integration:

Complete List of Supported Integrations:

• Bazarr
• FileBrowser
• FreshRSS
• GitHub
• HTML Code
• Heimdall
• Immich
• Linkace
• NextCloud
• Nginx Proxy Manager
• Portainer
• Proxmox
• Sonarr
• Speed Test Tracker
• TrueNAS Scale (Core untested)
• Uptime Kuma
• YouTube
• User Customization:

Users can now change their avatar to personalize their profile.

Added the ability to change the default site icon for branding purposes.

Debranding Option:

A new debranding feature lets users remove the "Powered by Astroluma" text for a cleaner appearance.

Important Updates for Docker Users

New Volume Mounts:

Two new volumes are required:

One for icons upload.

Another for apps storage.

Network Scanner:

Introduced a new environment variable:

HOST_MODE=true which enables the Network Scanner functionality.

Github Repo:

Website:

Check it out and let me know your thoughts! You can find the release Astroluma's GitHub page. Please feel free to contribute or suggest improvements.

As always, thank you for your support! 🙏

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/LinuxIsFree on 2025-01-20 00:52:57+00:00.

---

Shh, don't tell anyone my wife is learning Linux and IT... she made me promise not to tell family or friends for some reason because I guess it's embarassing for a woman? I don't know, I don't care, I'm just pumped to teach her.

She's taking some courses on Coursea and practicing with hardware we have here, and she just installed Linux on a mini-pc.

I figured a great way to get her started and hit her with that I can do ANYTHING dopamine that we selfhosters just love, Docker would be an awesome thing to expose her to and teach her.

So, I wanted to ask for suggestions on some good, easy, selfhost projects that would be fun for a beginner selfhosting queen!

I'd like to stay away from things I already host, namely Immich, Plex, and Vaultwarden. What do yall got? Non-docker recommendations that are easy are good too!

Thanks all!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/CheatsheepReddit on 2025-01-20 14:20:04+00:00.

---

Hello! I'm currently disentangling myself from all sorts of commercial providers and switching to self-hosted solutions wherever possible. Primarily, I achieve this through Proxmox Community Scripts, and Docker.

While I have already switched my search to SearXNG and now use it as my default search engine in all browsers (highly recommended!!!), I still miss the dynamic newsfeed from Google. This always displayed news on a homepage about various topics. Over time, Google learned through my reading behavior what particularly interested me and then fed in niche news as well.

The closest equivalent is an RSS reader. I've already tried some out. Commafeed is pretty cool, for example. But – what I miss – is the automatic compilation of interesting news from different sources. Essentially, an RSS reader that uses AI to provide an overview.

I already have a open webui - container with llama running successfully. Besides hoarder, paperlessngx also analyzes my data via open webui.

It would be great if there was a newsreader with such an API possibility. Or does something like this already exist? Unfortunately, I'm too dumb to develop something like that myself. Will any of you?

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/opensourcecolumbus on 2025-01-20 05:09:45+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/sleepysiding22 on 2025-01-20 13:55:54+00:00.

---

Hi, community :)

Long time no see. It's been some challenging weeks.

There are some new updates for Postiz, but just a small recap:

Postiz is a social media scheduling tool supporting 17 social media channels:

Instagram, Facebook, TikTok, Reddit, LinkedIn, X, Threads, BlueSky, Mastodon, YouTube, Pinterest, Dribbble, Slack, Discord, Warpcast, Lemmy and Telegram.

https://github.com/gitroomhq/postiz-app

Here are the latest updates :)

• We added a stand-alone Instagram provider that doesn't require you to have Facebook business.
• I added Lemmy, which is the Reddit alternative. I really like this platform.
• We have added short-linking. By default, it uses DUB, but we have added a nice infrastructure to easily create new providers (currently working on Bitly and short.io). When you add links, once you schedule the post, it asks if you want to shorten them.
• I added a Telegram provider, which was really challenging because the way you add a Telegram bot is a bit different.
• A big step into web3 - Postiz now supports scheduling to Warpcast using Neynar.
• We also added a web3 login with Farcaster.

Of course, everything available in the open source :)

Future:

• I started to get more into web3 and am thinking of adding Nostr also.
• Default hashtags and signatures to platforms.
• Post templates to write faster.
• WordPress integration.
• Digest - sometimes people schedule like 10 posts at once, and get 10 emails.

Funny enough, Postiz got a lot of cancellations because of the TikTok ban (bummer.)

Let me know what else I should add to the roadmap.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Ok-Chocolate7974 on 2025-01-20 12:04:14+00:00.

---

Hey fellow self-hosters!

I'm a web developer with 20 years of experience, and I've noticed that Nextcloud is often the gateway drug into self-hosting for many people. While it's a great piece of software, I believe there's room for improvement.

I'm planning to create a new alternative to Nextcloud from scratch, using modern technologies and focusing on user experience. Before I start, I'd love to hear from the community:

1. What features of Nextcloud do you use the most?
2. What are your main pain points with Nextcloud?
3. Which features could you live without?
4. What performance issues have you encountered?
5. What would you like to see in a modern alternative?

My goal is to create something that maintains the core functionality people love while addressing common complaints and improving overall performance.

Please share your experiences - both positive and negative. Your feedback will help shape this project into something truly useful for the self-hosting community.

Thanks in advance!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/gacekk8 on 2025-01-20 09:32:12+00:00.

---

Hi,

I have a private domain setup and amanaged with cloudflare for my self hosted apps. In cloudflare analytics I just notices today that there were over 7k requests made to that domain, with 21 unique vvisitors and requests coming in vast majority from my country and additionally from UK, Turkey, India and the US.

Is this normal for publicly available domain that I have not shared with anyone? I know of at the most 5 devices that might have accessed domain (me and family members)

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/the_magic_08 on 2025-01-19 18:05:33+00:00.

---

Update for Convert-Commander is here!

I've finally finished and released the latest update for the Convert-Commander!

Thank you very much for your feedback - I have implemented your suggestions:

✅ Added Docker support

✅ Now 69 file formats can be converted!

I'm still looking forward to your input and ideas.

Here is the GitHub repository:

A big thank you to all of you! ❤️

PS: I now have a Convert-Commander Comunity Reddit server r/ConvertCommander

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Ill-Extent6987 on 2025-01-19 21:46:25+00:00.

---

I just wanted to drop a quick post to say how impressed I am with Mealie . If you're into cooking or trying to get your recipes organized, this thing is a game-changer.

One of the standout features (and the reason I’m writing this) is its ability to digitize recipes . You can throw an image, a screenshot, or even a recipe link at it, and Mealie somehow extracts all the relevant info—ingredients, steps, measurements, you name it—and organizes it into a clean, functional format. I assume it's some combo of OCR and AI, but whatever it is, it works really well.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/GeneralXHD on 2025-01-19 21:23:32+00:00.

---

Hi everyone

Six months ago, I asked for feedback on a self-hosted OIDC provider that’s super easy to set up and only supports passkeys for authentication.

Since then, a lot has changed with Pocket ID. The project has gained almost 1000 stars on GitHub and we’ve added features like user groups, email sign-in notifications, and the most requested feature from the last post: LDAP support.

If you find OIDC providers like Authentik a bit too complex for your needs, I encourage you to give Pocket ID a try.

A huge thanks to kmendell for doing most of the work on the LDAP feature!

And as always, feel free to ask any questions here. If you have a feature suggestion or a bug report, please share it on GitHub.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/yoyo-blue-70 on 2025-01-19 18:09:48+00:00.

---

Hi,

I am aware part of the problem is due to my limited knowledge of web related technologies but garch it got complicated.

Whenever I self host a new app I will spend most of my time trying to make the reverse proxy work. I have tried Caddy, HAProxy but try to stick with nginx now as it is the most popular so I increase my chance of finding the setup documented in the project itself or somewhere on Github.

Worst, I had features of some apps not working and it took me a while to figure out the problem was at the proxy level.

I am the only one or other self hosters face this too?

Do you know a good repo that have a trustable nginx reverse proxy configs for the most popular self hosted apps ?

Thank to you all !

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/steveiliop56 on 2025-01-19 15:29:33+00:00.

---

Hello r/selfhosted!

I made a new cool little project called Tinyauth and I thought you guys may be interested, but let's get straight to the point.

What is tinyauth?

Tinyauth is an extremely simple traefik forward auth middleware written in Go and React that adds a simple login screen to all of your apps without any configuration required.

How is it different from existing solutions?

Well, I wanted a simple login screen for my apps for a long time, I looked into the big three (authelia/authentik/keycloack) but found them too complex for just having an extra layer of security for my self-hosted apps. So after some trial and error I managed to put together Tinyauth that apart from four environment variables and two traefik labels requires nothing more to work. It is also super lightweight as it is written in Go and requires just 20MB of free space.

For who is it meant for?

Tinyauth is of course not meant for production use cases as it's well...just a login screen, no fancy dashboards, no configuration files, no nothing, just a login screen. I believe it's a perfect solution for the average homelab user that just needs to add an extra layer of security to some apps (that's me :) ).

How am I planning to extend it?

I would really like to add simple oauth so you can login to your favorites apps with a github/microsoft/google account. All this will have to be minimal and require only environment variables for configuration so it can be plugged into existing traefik configs quickly.

Screenshots, source code and docker images are available here. If you find any security issues in my authentication system or have security recommendations please let me know.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/acesofspades401 on 2025-01-19 13:35:38+00:00.

---

I have a small homelab, just a couple of services like gitea, Jellyfin, and a static site hosting some writing of mine. Each service gets a unique ssl certificate generated for it, but is this the way to go? Would a wildcard certificate be a smarter and safer choice? None of the services are publically accessible without connecting through WireGuard, but I still feel a certain way seeing each domain listed in crt.sh. Any input is appreciated, thank you!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/PeEll on 2025-01-19 11:01:09+00:00.

---

I have one server that I want to move offsite for noise and offsite backup reasons. I looked into colocation in my city but all of the data centers won't even talk to you unless you want 5+ racks.

What do small time self-hosted folks do? I've looked into renting a tiny private office somewhere, but it seems like overkill/expensive for what I'm trying to do.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/solotravelblogger on 2025-01-19 07:23:39+00:00.

---

Project Repo:  (Please feel free to star the repo if you like the work)

Get ready for an amazing update packed with exciting new features and essential fixes! This release makes managing your photos and videos easier and more enjoyable than ever before.

Sharing Made Super Easy ✨

Share Links with superpowers! 🚀 Ever wished you could share a curated collection of photos and videos, spanning multiple albums, with friends and family? Now you can! The new share links feature lets you combine albums, set expiration dates, and even include a handy list of people featured in the shared content. This makes finding specific memories a breeze for everyone.

Here's the breakdown of what our new share links can do:

• Combine Albums: Share links now support multiple albums at once, so you can share a collection of photos and videos from various events and trips.

• Set Expiration Dates: Control how long your shared links remain active, ensuring your privacy and giving you better control over your shared content.

• People List for Easy Filtering: Easily find specific people in your shared photos and videos with the new people list. No more endless scrolling!

For using shared links you need to setup two things.

• IMMICH_SHARE_LINK_KEY: A new API key to be created and added to your ENV for fetching images as a public user.
• POWER_TOOLS_ENDPOINT_URL : Now Immich Power Tools can work like proxy for your immich instance when using shared links. So inorder to show the domain of the shared links you need to set this env. This should point to the public hostname of your power tools.
• JWT_SECRET : Also a JWT Secret to encode the filters applied to shared links and also validate the expiry. If you already have it for old authentication method, it can be reused.

Easy clean up of photos and videos 🧹

Bulk Delete: Say goodbye to unwanted photos and videos with our new bulk delete feature! Now you can easily select and delete multiple images at once in the missing locations, potential albums, and find pages. It's perfect for decluttering and freeing up space.

Quality of Life Improvements ❤️

Sort in Missing Locations: Now you can sort photos within the missing locations list making organization a snap.

Better Errors: No more unknown crashes, this release includes better error message for each crash scenarios that you can debug better while setting up power tools.

Search in People List: Tired of scrolling through endless lists to find that one person? Our new search feature lets you quickly locate specific people in your people list, saving you precious time and frustration.

Bug Fixes and Improvements 🐞

We've squashed some bugs and made some design improvements to make your experience even better:

• Image Stretching Fix: No more distorted images! We've fixed the image stretching issue across the tool.
• Design Improvements: Enjoy a fresh and improved look and feel with our design updates throughout the app.
• Find Page Fix: We've fixed the empty people filter issue in the find page.
• Gemini Response Fix: We've addressed some issues with Google’s Gemini Responses to ensure smooth and reliable search.

Enjoy the update and happy photo organizing!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/gravityfargo on 2025-01-19 05:15:15+00:00.

---

Hi friends, I made a docker container for fast deployment of a Bluesky Personal Data Server.

For the uninitiated, Bluesky is federated. Users can self host their own instance and control their data on a custom domain while still being able to interact with the wider Bluesky user base. My intent for the container is for users to be able to quickly setup and run a PDS instance.

Bluesky's offical source

Container source on Forgejo instance

Image on Forgejo

Image on Dockerhub

Documentation

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/vbenevides on 2025-01-18 16:18:26+00:00.

---

Hi, I am looking for a place where I could buy a computer and rent the place where it says, so it is not in my home.

Likely something with a high setup cost and a much smaller monthly fee. Does something like this exists?

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/golbaf on 2025-01-18 22:33:18+00:00.

---

I have a Jellyfin instance with about 20 users. On weekends or in the evenings, I usually have 6 or 7 users using the server at the same time. These are also the times when I have free time to tinker with it. I now have plans to upgrade my server, which will take me at least 1 or 2 days (including 3D printing parts, trying them out, and optimizing said parts). The Jellyfin instance is running in Docker, with the media stored on my NAS.

My question is: is there any easy and straightforward way to keep the Jellyfin instance running without dealing with high availability, Kubernetes, etc., while maintaining the main server? I have my main PC and a couple of laptops I can use.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Overall4981 on 2025-01-18 18:47:46+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/United_Insurance4376 on 2025-01-18 14:54:02+00:00.

---

As the title suggests, I tried it and spent an entire weekend failing to get Authentik and Portainer to Oauth2 (might be my traefik setup or something with Cloudflare tunnels not passing all the oauth info to portainer). After all that (not really complaining as it is part of the SH journey), I realized that I don’t need all the bells and whistles of Authentik.

I saw a post a while back where someone mentioned an easy simple self hosted solution that could use facial recognition tools on devices for SSO (and it was very wife and kid friendly!). Of course, I can’t find the GitHub link now (I know I should use other SH solutions like Hoarder, eventually). Anyone got any recommendations for a basic homelabber who wants to add a little more security to access applications and simplify with a SSO experience (ideally with the security features already built into our phones and laptops)? Thanks

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/cokelid on 2025-01-18 14:32:08+00:00.

---

I've tried a few note-taking apps over the years, but always fall back to plain text files (previously .txt files, but nowadays .md Markdown files). I like that I can grep them from the command line, view and edit them from a basic ssh connection, use Git for version control, etc.

I recently came across SilverBullet. I love that it's based on .md files. I can continue to write/edit/use plain markdown files as usual, but on top of that get a sweet little web interface. If SilverBullet goes away, the .md files are just still there.

I got it up and running in under a minute with a docker one-liner:

sudo docker run -it -p 3000:3000 -v /path/to/my/notes:/space zefhemel/silverbullet

Docker install Instructions:

There are also a lot of bells and whistles if you want them. Here's a good YouTube vid introducing it:

It's barely mentioned here so I thought worth a shout out.

I'm in no way associated with it. All credit to Zef Hemel u/zef...

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/performation on 2025-01-18 09:08:40+00:00.

---

Hello everyone,

after using my homelab for about half a year with a VPN I decided to expose some services directly. I have read a good amount of stuff on the topic and want to double check I have not missed any major points.

I know there will be a lots of comments saying I should not do this at all if I have to ask or just use a VPN or cloudflare tunnel but I do not want to do that. I am just looking for some friendly advice on best practice.

So the plan is: Opening and redirecting port 443 in my router to my VM. The VM is running on proxmox in a isolated VLAN. It is a very minimal install which apart from docker, git and nfs is running only the bare minimum. Firewall is handled by proxmox, it is set to allow only port 443 and my SSH from internal IPs from my admin VLAN.

The VM has docker running in rootless mode with a total of 4 services I want to expose + Traefik and Authentik. Traefik drops all traffic not pointing to the correct sub-domains. I have set the usual HTTP headers, rate limiting, geo blocking etc. Authentik accepts logins only via password and 2FA. I have also set up crowdsec, fail2ban on both my router and the VM and watchyourlan. SSH login is key only but shouldn't be possible from an external IP anyway.

Updates to proxmox, the VM and the docker containers will be done manually a few times a week for now. Last thing I am currently working on is loki + grafana for access logs so I can monitor things myself.

There are automatic backups of all data and configs onsite and offsite, so in case of disaster I am going to wipe the VM and restore a backup.

So what did I miss? TIA to anyone.