This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/katos8858 on 2025-01-05 18:36:12+00:00.

Homebox V0.17.1 released!

Homeboxis proud to announce the release of version 0.17.1 !

But first, what is Homebox?

Homebox is the inventory and organization system built for the Home User! With a focus on simplicity and ease of use. Homebox is the perfect solution for your home inventory, organization, and management needs.

About the update

We have officially released v0.17.1 and at the same time are making progress towards v1 (stable). This release covers a range of new features and bug fixes, including making Docker Rootless actually be rootless (apologies) and fixing vulnerabilities. You can see a full list of changes here: Changelog

Breaking Change

Note to ARM users, we fixed our build processes!!! This means that the -arm tagged releases are deprecated, you can switch back to using the standard latest, main and nightly tags, which are once again shared releases for all platforms. Sorry for the previous switch.

Read more

You can find the full release notes at Release v0.17.0 · sysadminsmedia/homebox & Release v0.17.1 · sysadminsmedia/homebox (note the minor version fixed issues with version not showing, and docker rootless)

Follow the Homebox journey

• On Discord: https://discord.homebox.software/
• On the web: https://homebox.software/
• On Github: https://git.homebox.software/

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Litlyx on 2025-01-05 13:15:38+00:00.

Hi, I’m Antonio, CEO of Litlyx.

It’s incredible how much has happened in just six months since we started Litlyx.

What began as a casual idea between me and my co-founder, after years of working together, turned into something bigger. We were refining an analytics solution for a client project when we thought, “Wow, this is simple and really cool! Why don’t we build a product around it?”

Fast forward six months, filled with endless days and nights perfecting our messaging and choosing the best features to develop, gathering feedback, and reaching out to early adopters. Now, we can proudly say we’ve built something truly special, and I couldn’t be happier.

What many of you don’t know is that I’ve been working to build my startup for over eight years. And finally my moment has arrived. I’ve put everything into this, and I’m not going to waste a single second on doubts or hesitation. Now is the time for execution.

We’re on a mission to create the best ethical, Open-Source, general-use analytics tool on the market, that is called Litlyx.

Here are some milestones we’ve hit in 2024 that we’re incredibly proud of:

• 806 stars on GitHub (an insane number for a six-month-old repository!)
• 612 active users tracking with Litlyx (hosted version)
• 793 projects created (hosted version)
• 3.6 million data points logged every month (hosted version)

2025 is going to be huge for us. We’re ready to work 24/7 to compete with major players like MixPanel and Google Analytics.

We’re not intimidated—we’re crazy excited to fight for our place in the analytics market.

Thanks for tuning in. Happy new year to all of you of this amazing community!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/badhiyahai on 2025-01-05 09:05:19+00:00.

Hello self-hosters! 👋

We are working on a self-hostable open source alternative for Computer Use. We have gotten success with OpenAI, Gemini and Molmo recently (not much with Llama) in controlling phones.

It can draft a gmail to a friend asking for lunch, find bus stops using google maps app/browser, start a 3+2 game on lichess etc. Demos are in the GitHub repository.

The goal is to make everything work with local models, we are half-way there.

We use Planner 🤔 to sketch out the plan of action. Then Finder 🔍 finds the coordinates of the elements and then Executor clicks on the element / navigates etc.

For the Finder, we can use local model Molmo and for the Planner we can bring your own API keys.

For the Planner you can use Gemini Flash for now as it is free for 15 calls/min which should be enough for automating anything. But in my testingGPT 4o / Gemini Pro > Gemini Flash\

https://github.com/BandarLabs/clickclickclick

Will be happy to hear your thoughts 😀

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/ApprehensivePass3726 on 2025-01-05 13:33:12+00:00.

What is currently running in your homelab? Here is a list of the services I use:

Public (Exposed to the internet with cloudflare tunnel):

• Homarr: Dashboard of all the services
• Jellyfin: My private Netflix if you want to call it like this ;)
• Jellystat: Stats for Jellyfin (Like what movies i have watched etc.)
• Vaultwarden: Password Manager
• Mealie: Like a digital recipe book, but i can insert a link to a recipe from any site and it automatically generates everything
• FreshRSS: News Feed
• Memos: Fast and easy note taking app
• Wallos: Overview of all my current subscriptions

Internal (only in the local network):

• Proxmox: Everything runs on it
• Portainer: Managing my Docker Containers on my Proxmox VM for Docker Containers
• Immich: Backup Solution for my phone media
• Paperless-ngx: Everything important is uploaded there

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/uForgot_urFloaties on 2025-01-04 23:19:37+00:00.

Hi! Long time lurker and, I believe, first time poster, at least first time to try something relatively significant in selfhosting. I wanted to learn more about networking, security and deploying services so I decided to repurpose my old desktop into a server and play around a bit.

I want my lab to be secure as possible and to be able to access it and my services with complete privacy from outside my LAN, reduce tracking, ads and augment overall privacy of network, replace some 3rd party services like Google Drive (file storage and sharing), Notion (note taking and project planning) and have an easy way to organize and access important documents like invoices.

That would mean:

• Remote access and manage server configurations and filesystem
• Encryption of communications of clients outside LAN
• Encryption of outgoing traffic
• Avoiding port forwarding
• Cloud Storage
• Note taking and project planning
• Documents access
• Remote management of network and devices on it.

With my tremendously limited knowledge I've come up with this:

• Security and network management
• Firewall (OPNsense, PFsense, OpenWRT)
• Auth service (Authelia)
• DNS + DHCP (Adguard Home)
• VPN
• Network management (NetAlert X)
• Reverse proxy (Traefik, NPM or Caddy v2)

Services

• Paperless-ngx + Samba
• NextCloud or OwnCloud
• Obsidian or Appflowy

Given that my router is really limited I will use the server as my DNS and DHCP provider and leverage DoH. I'm not sure if I'll use Debian or ProxMox (never used proxmox). Diagram

Does this make any sense?

Anything that should be removed or added?

Are my specs enough for what I'm trying to do? Or should I scale down?

Is this okay as a first project?

Would this allow to add other services in the future? Like media servers, hosting some of my own projects with something like Coolify?

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/deval_ut on 2025-01-04 19:30:41+00:00.

Hey everyone,

I’m the creator of Jake, a free, open-source alternative to LinkTree. It lets you create a personal landing page for all your links, and it’s fully hostable on GitHub Pages for free.

I’ve noticed that not many people are using it, and I’d really like to know why. Is it because:

• People don’t know about it?
• Self-hosting feels too complex?
• The interface or features aren’t appealing?

I’d love to hear your thoughts or any constructive feedback on how I can make it better or reach more people.

If you have the time, check out the repo and let me know what you think: Jake GitHub Repo.

Thanks in advance for your insights! 😊

btw here's my own Jake website.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/OhBeeOneKenOhBee on 2025-01-05 00:46:08+00:00.

So after first seeing the post by Quexten in the Bitwarden community forums a year ago I was cautiously optimistic, but after scrolling through the changelog in the Bitwarden client a couple days back I saw that his contribution finally made it into the clients!

Along with Dani introducting the feature into Vaultwarden (ahead of the official Bitwarden distribution), this means we can now finally try out storing AND using SSH Keys in/from Vaultwarden! I haven't seen this announced publicly yet, so there might still be changes coming, but for now it seems to work great.

You do have to enable two feature flags on your Vaultwarden server, and get the Desktop client (web client for Vaultwarden doesn't work yet since it's been held back for a while), enable a setting and it all works pretty well!

I have a short blog post with some images, instructions and notes about some clients if anyone else is wanting to set it up as well

As well as the thread in the Bitwarden forums discussing the feature:

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Rezivure on 2025-01-04 22:21:40+00:00.

Hi r/selfhosted!

A few months ago I was looking for a self hosted location sharing app. I couldn't find anything quite right (Traccar was maybe the closest).

So I decided to build Grid - it's a location sharing app built to use a barebones Matrix Server (Matrix Protocol) for end to end encryption and the ability for people to self-host. The app is free and open source -> Github Repo. You can use our server by default or your own (using custom provider on the landing page of the app). One tricky aspect of these type of apps is deciding where maps are derived from and not sacrificing privacy. I didn't want to rely on Apple Maps/Google Maps, so I implemented the app with Protomaps. Protomaps is serverless and can be easily hosted in Cloudflare R2. We have a Github Repo for an easy worker implementation for this so you can self host both the server and maps.

It does the basics- 1:1 sharing, groups (with optional expiration). If you self-host, it's just username and password based. Our default server implements SMS verification.

Got a bunch of features currently in the works for upcoming updates but wanted to share it here first and would love to get feedback and thoughts. It's available on Google Play & Apple Store, and we have a website.

Thanks everyone and look forward to hearing feedback!

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/saramon on 2025-01-04 09:54:20+00:00.

I’m planning to start using Git at an organizational level, and I want to use my own Git server. Everyone who will be using it is new to Git. What do you recommend: GitLab or Gitea?

I understand that Gitea is simpler to set up and manage, but it lacks some features that GitLab offers. If those additional features are needed later, is it easy to transition to GitLab? Has anyone gone through this transition?

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/retardgerman on 2025-01-04 18:25:02+00:00.

Hi r/selfhosted!

I wanted to share Streamyfin with you if you haven’t heard of it yet, it's an iOS and Android Jellyfin app designed to enhance the mobile Jellyfin experience. It aims to make the app more streamlined, feature-rich, and integrated, while maintaining a polished, native UI that fits seamlessly into both iOS and Android.

Streamyfin allows you to use other popular Jellyfin-related projects (like Intro Skipper, Jellyseerr, and more) all within a single app, providing a unified and smooth user experience.

The project has been underway since August 2024, and we’ve been thrilled with the support and attention we've received so far. Today, we’re excited to announce our latest feature update:

• Jellyseerr Integration: Request content directly from Streamyfin.
• Favorites: Easily add and access your favorite content.
• New Settings Design: A more intuitive, visually appealing layout.
• Server Memory: Save and reconnect to previously used servers.
• Other Changes: Various performance improvements and bug fixes.

Github project page:

Github

Feel free to join our Discord for help or suggestions:

Discord

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Left_Ad_8860 on 2025-01-04 17:05:36+00:00.

Hello r/selfhosted Folks,

Today, I’m excited to share Paperless-AI, a tool I've been working on for automating and enhancing document management in Paperless-ngx using AI! Initially a personal project, it’s now gained traction, and I’m thrilled to share it with the community.

What is Paperless-AI?

Paperless-AI is an AI-powered document analyzer for Paperless-ngx, leveraging the OpenAI API and Ollama (local models like Mistral, Llama, and more). It automates document analysis and tagging to make managing your digital documents even easier.

Features

• 🔍 Automatic Document Scanning in Paperless-ngx.
• 🤖 AI-Powered Analysis using OpenAI and Ollama (Mistral, Llama, Phi 3, Gemma 2).
• 🏷️ Automatic Metadata Assignment:
  • Assign titles, tags, and correspondents effortlessly.
  • 🆕 Predefine what documents get processed based on tags.
  • 🆕 Limit the tags used for assignment for precise control (disables prompts).
  • 🆕 Add a special AI-processed tag for easy tracking.
• 🔨 Manual AI-Assisted Mode for hands-on analysis. 🆕
• 🚀 Easy Setup through a web interface.
• 📊 Processing Dashboard for insights.
• 🔄 Automatic restart, health monitoring, and error handling.
• 🐳 Docker Support for seamless self-hosting.

Why Consider This?

Your data privacy matters! With the OpenAI API, your documents are not used for training or other purposes. Prefer to keep things local? Ollama integration ensures you can analyze documents without leaving your server.

Contribution & Feedback

This is a hobby project, so I deeply appreciate feedback and contributions! If you encounter a bug or have a feature request, open an issue on GitHub—I’d love to hear from you.

GitHub Repository:

Getting Started

Setup is simple! Check out the GitHub README for details on deploying via Docker and configuring the system.

Let me know what you think or how it could be improved. Wishing you all a great weekend and happy self-hosting! 😊

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/meceware on 2025-01-04 13:02:04+00:00.

Hi there selfhosters 👋,

I wanted to share open-source, and self-hostable web application I’ve been working on: Wapy.dev which is a personal subscription and expense management platform designed to help you stay on top of your recurring payments and expenses.

I designed Wapy.dev to be simple yet effective and most importantly, focus on human readable with a good clear design.

Wapy.dev home page

Key Features:

✅ Track Recurring Subscriptions & Expenses

Easily log all your subscriptions and payments.

🔔 Email & Push Notifications

Get timely reminders when payments are due. Customize notification schedules to fit your needs.

💱 Multi-Currency & Timezone Support

Perfect for managing subscriptions in different currencies and time zones.

🎨 Category Management with Custom Colors

Organize your subscriptions by category and add a personal touch with custom colors.

📜 Easy Mark Payments as Paid

Keep track of what’s been paid and review your spending habits over time.

🔐 Easy Login Options

Sign in with Email, Github, or Google for a seamless experience.

📱 Add to Home Screen for Mobile App Experience

Use Wapy.dev like a mobile app by adding it to your home screen with just a few taps.

🐳 Production-Ready with Docker

Easily self-host with Docker for a quick and hassle-free installation process.

Check it out

• via GitHub:

• via Wapy.dev

and let me know what you think! I’d love your feedback or suggestions.

Looking for Contributions!

I’d also love some help from the community to make it even better. Feel free to open pull requests for bug fixes or new features—I’ll do my best to review them. You’re also welcome to open issues for bug reports or feature requests.

Cheers and happy new year,

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/khannover on 2025-01-04 12:04:20+00:00.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/ottovonbizmarkie on 2025-01-04 03:00:46+00:00.

I've been thinking of all the Steam Games, Audible Books, Kindle ebooks, etc that I "own" that could just disappear one day, and that maybe it would be a good idea to host them on my own. Is there a way to for example, download all my audible files that's not manually doing it book by book?

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/vexgod on 2025-01-03 17:49:18+00:00.

Hey everyone!

I’m excited to share the latest update to SeerrBridge, the tool that automates your media fetching workflow by connecting Jellyseerr/Overseerr directly with Debrid Media Manager (DMM). With v0.4.0, we’re introducing TV Show Support in Alpha—a highly requested feature that’s finally here!

✨ What’s New in v0.4.0?

TV Show Support (Alpha)

• TV Show and Season Requests via Overseerr/Jellyseerr
  • SeerrBridge now supports TV show and season requests! This is a major step forward, and while the feature is still in Alpha, it’s ready for testing.
• Alpha Disclaimer
  • TV show support is a work in progress. Some features may not work perfectly, and we’d love your feedback to help refine it.

Critical Bug Fix

• Fixed Movie Selection Issue with Extras
  • Resolved a bug where movies containing “extras” were being incorrectly selected. Now, only single editions are selected by default, improving accuracy.

🛠️ How It Works

SeerrBridge automates the process of fetching media by:

1. Listening: It listens for incoming movie or TV show requests via webhook from Overseerr/Jellyseerr.
2. Searching: Using Selenium, it automates a search on DMM for matching torrents.
3. Downloading: Once a match is found, it pushes the torrent to Real-Debrid for downloading.

The result? A streamlined workflow that skips the complexity of multiple tools like Radarr, Jackett, and download clients.

🎉 Why This Approach?

I know Selenium/browser automation isn’t everyone’s favorite, but it’s currently the only way to fully automate interactions with DMM. The goal is to keep SeerrBridge lean and simple, cutting out unnecessary tools while still delivering a smooth experience.

🛤️ What’s Next?

• Refining TV Show Support: We’ll continue improving TV show functionality based on your feedback.
• Concurrency Improvements: Better performance for handling multiple requests at once.
• Community Contributions: Open to ideas and contributions! Whether it’s improving search, title matching, or integrations, your input is welcome.

🗨️ Let’s Talk

This is still a beta project, and there’s plenty of room to grow. If you’re interested in browser automation, Python, or just want to help improve SeerrBridge, I’d love to hear from you!

Check out the GitHub repo to try it out: SeerrBridge on GitHub.

For those who’ve been waiting for TV show support—thank you for your patience! It’s here, and I’m excited to see how it works for you. Let me know what you think!

Looking forward to your feedback and contributions! 🚀

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Oaklight_dp on 2025-01-04 02:06:55+00:00.

Hey r/selfhosted!

I’m excited to share a minimal Docker image for self-hosting the composerize, decomposerize, and composeverter websites! This project is perfect for anyone who wants to run these handy tools locally with minimal resource usage.

Key Features:

• Multi-stage build: Separately builds static sites for composerize, decomposerize, and composeverter.
• Tiny image size: Only ~7MB thanks to lipanski/docker-static-website as the base image.
• Easy to use: Includes a Makefile and build.sh script for seamless building and deployment.
• Multi-arch support: now supporting linux/amd64, linux/arm64/v8, and linux/arm/v7.

How to Use:

1. Pull the pre-built image from Docker Hub:

bash docker run -p 8080:80 oaklight/composerize:latest 2. Access the tools:

* Composerize: http://localhost:8080/
* Decomposerize: http://localhost:8080/decomposerize
* Composeverter: http://localhost:8080/composeverter

Acknowledgments:

Shoutout to:

• alcapone1933/docker-composerize for the original composerize docker build.

• lipanski.com for the smallest httpd Docker image guide.

• sharevb for maintaining the original composerize repo.

Check out the project here: GitHub Repo Link

Let me know if you have any questions or feedback! Happy self-hosting! 🎉

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Brobin28 on 2025-01-03 23:00:16+00:00.

Hey everyone 👋

My tool is enabling to

Discover the best value server available today by comparing server performance per EUR/USD with real CPU benchmarks.

We no longer need to compare CPU benchmarks on different browser tabs.

lmk what you think

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/altendorfme_ on 2025-01-03 23:26:54+00:00.

I wanted to share Marreta, an open-source tool that helps you access paywalled content while also cleaning up web pages.

It removes tracking parameters, bypasses paywalls, implements smart caching, and keeps everything clean and optimized. It's all containerized and ready to run with just Docker + docker-compose.

It runs on PHP-FPM with OPcache, supports S3-compatible storage (works with R2 and DigitalOcean Spaces), includes Selenium integration and even has built-in error monitoring via Hawk.so.

I've released it as open-source and would love to have more contributors join in to make it even better. Whether you're interested in adding features, improving the bypass methods, or just have some ideas to share - all contributions are welcome! You can check out the code at or try the public instance at . Let me know what you think! 🚀

Update:

---- English Readme:

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/m4nz on 2025-01-03 22:46:29+00:00.

TL;DR :

So I recently switched from Nginx Proxy Manager to Traefik, and honestly I had a bit of hard time making things work with traefik (the documentation seemed to be all over the place). Once I had everything working the way I wanted, it was so easy to add new services to Traefik. So I created a comprehensive guide on how to do what I did. Here it is

I hope it helps someone.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/phase-3- on 2025-01-03 21:46:50+00:00.

This week marks a year since I bought my HP Elitedesk G4 on Facebook marketplace and properly started selfhosting!

The original plan was to just move the *arr suite and Plex off the 2014 Mac Mini I was using, but that was only the beginning. I now have a separate hardware NAS for better storage, as opposed to just using external desktop hard drives, and have also setup a similar system at my employer. I also moved to using nzb for my primary *arr suite sources.

Some highlights:

• PaperlessNGX for document storage and management, this has worked great for organising our receipts and important documents, and making them easy to find.
• Immich for photo management, this was the tool that helped me start storing our memories better, and also gave me more motivation to capture the moments and key events.
• n8n for automations
• ntfy for receiving notifications
• cloudflare tunnels for remote access to services via a domain name
• TrueNas for my hardware NAS, with Time Machine backups for our MacBooks

I’m also running an uptime monitor, website inspector, stirlingpdf, an seo analyser, plus more.

It has been a great experience, and one that I have thoroughly enjoyed. Despite the frustrating moments when things just don’t seem to work, it’s always a great feeling to find the solution and get things running well.

This year I’m keen to try out a few more services;

• A link / bookmark manager
• pihole or adguardhome
• Home Assistant

If you’re thinking about try self hosting, would definitely recommend.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/IroesStrongarm on 2025-01-03 20:25:19+00:00.

With the exception of Plex, which I've been hosting for 10-12 years, I've been homelabbing for the last 5 years. Lots of things learned, lots of mistakes made, or just poor design decisions, but overall I've done well. That said, for the last 5 years I have solely relied on nano in the CLI, or occasionally using Notepad++ for more features, editing offline, then copying within nano.

I casually noticed VSCode in many YT videos, but no one seems to talk about it. Most YouTubers are likely developers of some sort in their day job, so this was just an obvious application to use. I however work an incredibly boring office job that is incredibly low tech. I've learned lots of YAML over the years, but am far from a coder.

This weekend I decided to try out homepage instead of Heimdall. There is a lot of yaml, and default nano is so horribly inefficient for the task. I downloaded VSCode, and once I figured out the basics it's like driving in the fast lane. To have proper formatting, switch between files quickly, pull up a console with a keystroke, and today I discovered I can just drag and drop a file from my local machine right to the remote session.

Game changer. Most of you I'm certain already knew all this, but for the handful, who like me were blissfully unaware, download VSCode and try it out. Nano is still great for fast things, but this is just something else.

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/CakePlanet75 on 2025-01-03 17:07:06+00:00.

If you haven't heard, this is an international movement that's trying to stop publishers bricking your games so you buy sequels - a form of planned obsolescence.

Sign here if you're an EU Citizen regardless of where you live (family and friends count too): 

You can read the Initiative in detail here:

And the website:

This FAQ has comprehensively thought through all the questions you can think of about the Initiative, so please look through the timestamps in the description before commenting about a concern you might have: Giant FAQ on The European Initiative to Stop Destroying Games! - YouTube

Basically, do you want games to go back to being able to keep playing or hosting your games (ie being able to use things like Hamachi, GameRanger, Tunngle or some other end of life plan left up to the developer)? Or do you want to prevent live service implementations from happening to cars, implants, or other things relying on a central server which brick when the server is shut down? Then you support this movement. Spread the message to stop digital planned obsolescence.

✂️ The importance of being able to host your own online games

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/shol-ly on 2025-01-03 13:02:30+00:00.

Happy Friday, r/selfhosted! Linked below is the latest edition of This Week in Self-Hosted, a weekly newsletter recap of the latest activity in self-hosted software and content.

This week's features include:

• A recap of selfh.st's 2024 milestones and initiatives
• Developer and content creator shout-outs
• Community content covering 2024 reviews and homelab recaps
• Software updates and launches
• A spotlight on Lurker - a self-hosted privacy frontend for Reddit (u/Creative-Air2049 )

Note that this week's YouTube/podcast episode is once again on hiatus as a result of a nasty cough/cold. We'll be back next week!

Thanks, and as usual, feel free to reach out with feedback!

This Week in Self-Hosted (3 January 2025)

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/fab_space on 2025-01-03 08:23:31+00:00.

After a week hands on an automated solution to obtain fresh OWASP rules for webservers I ended up by publishing a new project specifically dedicated to the Caddy http server since others are now covered.

How to waste more time? Caddy WAF is waiting for u 🤣

caddy-waf

A simple Web Application Firewall (WAF) middleware for the Caddy server, designed to provide comprehensive protection against web attacks. This middleware integrates seamlessly with Caddy and offers a wide range of security features to safeguard your applications.

Key Features

• Rule-based request filtering with regex patterns.
• IP and DNS blacklisting to block malicious traffic.
• Country-based blocking using MaxMind GeoIP2.
• Rate limiting per IP address to prevent abuse.
• Anomaly scoring system for detecting suspicious behavior.
• Request inspection (URL, args, body, headers, cookies, user-agent).
• Protection against common attacks (SQL injection, XSS, RCE, Log4j, etc.).
• Detailed logging and monitoring for security analysis.
• Dynamic rule reloading without server restart.
• Severity-based actions (block, log) for fine-grained control.

Notes

• A script to easily convert all OWASP rules to the rules.json file used by caddy is included in the repo.
• I added bad bots regex as last rule in the rules.json file to block garbage clients, you can review that user agents list to fit to your use case.
• A simple security assessment script is included to evaluate loaded rules.
• DNS and IP blacklists retrieval can be easily automated, I will release the related scripts today.

Enjoy and contribute ☕️

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/ad-on-is on 2025-01-02 19:13:58+00:00.

I've been using kagi for the last couple of months, and it was just amazing not to have the results flooded with crappy sites, that provide almost no useful information on my search.

However, I also found it a bit ridiculous to pay for a search engine, so I started exploring searXNG, since I already run a bunch of other services.

After some tweaking, I found I could replicate kagi results quality to almost 100% in searXNG ... (at least I didn't notice any difference while testing)

Therefore, a huge **thank you** to the developers!