I am on a shared network. I'd like to self host services and access them from all my devices but I do not want these exposed to other people in my network. I've noticed that I can just change the port mapping in Docker to <Tailscale IP>:<port>:<port> from <port>:<port> and it just works. Works as in the service is accessible from my Tailnet, inaccessible from the local network or the internet. Is it really this easy or am I missing something? Just sounds too good to be true so I am suspicious it might somehow be insecure.

Hello everyone,

I have a few questions about Frigate and security cameras, and I thought this would be a good place to ask.

I’m new to security cameras and Frigate, so please excuse any basic questions I might have.

I have a PC at home with an i7-8700 CPU running Proxmox, where I plan to install Frigate in an LXC container for device passthrough.

I came across this Amcrest camera on Amazon: Amcrest IP5M-B1276EW-AI. Since Amcrest is recommended, I assume it should work well, but I’d like to confirm before purchasing. If you have any camera recommendations in the $60 range, I’d appreciate them.

I also read that having dual network interfaces is recommended. My router doesn’t support creating new subnets (I don't know if that would be a problem), and my PC currently has only one network interface. My initial plan was to get a PoE switch and connect the cameras and the router to it, but would getting a separate PCIe network card, and then connect my PC to the switch instead of the router work for creating a separate, internet-less network?

Lastly, I understand that using a Coral accelerator is highly recommended. I’m deciding between the $25 PCIe version and the $60 USB version. Does Frigate benefit from the more expensive USB Coral, or is the $25 PCIe version sufficient? My motherboard is a Gigabyte B365M DS3H, in case that’s relevant.

Thanks in advance for your help!

cross-posted from: https://lemm.ee/post/41196370

> I have a spare 3070 GPU, as well as 16GB of Memory and my friend has a spare PSU, this part list has everything else I would need+everything I already have. Is there anything I should tweak or modify or will this build work, I plan to use it as a headless server. > > Thanks for the feedback! > > https://pcpartpicker.com/list/2fJJYN >

I built a system around a 3U chassis, then tried to stuff a GPU in the box and couldn't close the lid. I got a 4U chassis and rebuilt the system, but I still have the 3U and I'm thinking about filling it back out so I have a failover for Proxmox. Is there a GPU I should consider or just stick with the integrated graphics? I'm currently only using the GPU for Steam remote play using pass-though to a Windows VM, but Jellyfin, Frigate, Immich are on my to-do list.

I've recently gotten on board with Invidous/Viewtube - and they're both great in their own ways. I like not having the algorithm hide or force new content down my throat, but I'm wondering if there's a way to take this to the next level.

I also subscribe to nebula - and have some patreon exclusive videos. It would be amazing to gather them all together in one location - is there some self-hosted option for this? Maybe some combination of yt-dlp + plex/jellyfin?

How can you increase the disk capacity on a MiniPC?

I already have a 2TB SSD but I would like to have a raid of SSD or NVMe, but I'm not sure what is the best solution for MiniPCs

Any experience with a similar problem?

cc @selfhost@lemmy.ml @selfhosted@lemmy.world

Does anyone know of a self hosted food journal? I'm looking for an application that allows me to record all of the things I eat as well as how I feel so patterns of foods can be found when various symptoms are triggered. Bonus points for machine learning analysing the data and telling me what foods cause which problems!

I just setup my first automated and encrypted backup with borg. It's got me thinking about other chaotic events, and how to respond accordingly. I figured now is a good time to document my infrastructure: hardware, network, a files. This way if something bad happens, like my house burns down, I or a family member has instructions for how to quickly recover data and services. Examples:

1. If my website goes down, with my nextcloud on it, what steps do I need to take to recover the data and restore service?
2. If my harddrive fails, how do I access lost data and reimplement redundancy after a replacement is stood up?
3. If someone important to me needs to access encrypted files, how can that access that data and get access to the passwords/encryption keys?
4. If my phone bricks, how to recover 2fa codes?

So I'd like to have a physical printing copy that tries to cover these emergency scenarios. Of course, I'll have digital copy around as well.

I'm focusing more on digital assets, like encryption keys, personal files and media, cloud service access, accessing inaccessible machines, how to restart/recover from self hosted service if its down, etc. I understand how much wider this document can be to include physical assets, so to start I want to start with digital infrastructure.

So my big questions: what scenarios should be documented in this disaster recovery document? What should I prepare for? The nice correlary of this is that documenting a recovery plan will force me to actually stand up the backups/redundancy needed to recover.

Say I have a large txt or CSV file with data I want to search. And say I have several files.

What is the best way to index and make this data searchable? I've been using grep, but it is not ideal.

Is there any self hostable docker container for indexing and searching this? Or maybe should I use SQL?

cross-posted from: https://programming.dev/post/18360806

> Hi everyone, > > I would like to enable Cross-Origin Resource Sharing on my Nginx server. for few origins (cors requestor)/domains. > > I've found this article https://www.juannicolas.eu/how-to-set-up-nginx-cors-multiple-origins that is nice, but not complete and on my browser seem really hard to read due to the layout 🤮 > > So I've opened a CodeBerg git repository for the good soul that want to perfect this piece of code the allow the most of use to use CORS with Nginx. > > https://codeberg.org/R1ckSanchez_C137/BestOfxxx/src/branch/main/Nginx/CORS_MultiDomains.py > > If you don't want to create an account on codeberg feel free to post your code here ! > > nginx > server { > # Server > > map "$http_origin" $cors { # map in Nginx is somewhat like a switch case in a programming language. > default ''; #Seem to set $cors to '' empty string if none of the follwing rexeg match ? > "~^https:\/\/([\w-_\.]+\.)?example.com$" "$http_origin"; > #regex domain match > # ~ mean I suppose the string is RegEx ? > # Need to come with a RegEx expression that match https://anything.example.com[optional ports and Query string ?X=Y] > "~^https:\/\/([\w-_\.]+\.)?example2.com$" "$http_origin"; #regex domain match > } > > > location /static { > > # if preflight request, we will cache it > if ($request_method = 'OPTIONS') { > add_header 'Access-Control-Max-Age' 1728000; #20 days > add_header 'Content-Type' 'text/plain charset=UTF-8'; > add_header 'Content-Length' 0; > return 204; #https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/204 } > > if ($cors != "") { > add_header 'Access-Control-Allow-Origin' "$cors" always; # <-- Variable $cors > add_header 'Access-Control-Allow-Credentials' 'true' always; > add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS' always; > add_header 'Access-Control-Allow-Headers' 'Accept, Authorization, Cache-Control, Content-Type, DNT, If-Modified-Since, Keep-Alive, Origin, User-Agent, X-Requested-With' always;} > > # configuration lines... > > } > } > > } > > >

Hi folks, I'm considering setting up an offsite backup server and am seeking recommendations for a smallish form factor PC. Mainly, are there some suitable popular second hand PCs which meet the following requirements:

• fits 4x 3.5" HDD
• Smaller than a regular tower (e.g. mATX or ITX)
• Equipped with a 6th of 7th gen Intel CPU at least (for power efficiency and transcoding, in case I want it to actually to some transcoding) with video output.
• Ideally with upgradeable RAM

Do you know of something which meets those specs and is rather common on the second hand market?

Thanks!

Edit: I'm looking for a prebuilt system, such as a dell optiplex or similar.

I bought some new drives to replace the old ones I had lying around, and want to replace them entirely (4x 1tb -> 2x 4tb). I have a few apps running on it (Syncthing, Transmission, Tailscale, etc.), and I wanted to know what the best way to perform a drive upgrade would be. AFAIK the apps are installed on the pool as well, so will I just have to reinstall them from scratch?

The motherboard has 5 SATA ports, which are all currently occupied, so I don't know if I can do an "in-house" replacement.

My environment is a (freshly installed) Debian server with ZFS pools. I would like to store files in ZFS and share them using Samba.

My question is which is better from efficiency, effort, and security (for the host) perspectives? Running it natively on the bare-metal Debian host, running it in an LXC container, or running it in a VM? Why do you think one way is better than the others? I'm pretty familiar with VMs, but don't have much experience or knowledge of containers.

This is what I'm thinking at the moment, but I would appreciate any feedback:

1. Natively: no resource overhead, medium admin overhead (manual Samba configuration), least secure(?)
2. LXC: small resource overhead, least admin overhead (preconfigured containers and/or reproducible configs), possibly more security than native(?)
3. VM: most resource overhead, most admin overhead (not only manual configuration, but also managing virtual disk [including snapshots, backups, etc]), most secure

Requirements:

• based on Debian GNU/Linux
• easy to install/uninstall services

Services I'm interested in:

• several crypto nodes: BTC, BCH, ETH light node (Helios), XMR, ZEC, etc.
• Nostr
• SimpleX
• xBrowserSync
• taskwarrior
• Synchthing
• Mastodon
• vdirsyncer
• Element/Matrix

Is using containers with docker/podman on plain Debian the best approach for simplicity?

Does it make sense to have more than one VPS? E.g. one for crypto nodes and another one for the rest?

I have a Kasa HS210 3-way switchm but it has started to fail... maybe it is related to the fact that I blocked the DNS entries to tp-link servers, but every a few days it restarts it self.

Do you have a recommendation of a local-only 3-way switch that is HomeAssistant friendly (and hopefully not super expensive)?

cc @selfhost@lemmy.ml @selfhosted@lemmy.world @homeassistant@lemmy.world @ironicbadger@techhub.social

[Cross-posted from HomeServer@lemmy.ml]

I have Navidrome set up on my home server running TrueNAS, and I've set up a few playlists there via the web interface. However, I've noticed that the android apps with OpenSubsonic support do not allow me to create playlists on them. Are there any apps with this feature (as well as local download support), or is this not supported over OpenSubsonic?

When I open a file Jellyfin always shows "fetching additional data".

Is there a way to do that before opening a file, ideally for all files?

cc @selfhost@lemmy.ml @selfhosted@lemmy.world @jellyfin@lemmy.ml

cross-posted from: https://lemmy.world/post/17048910 >Got this server for free, so I talked about it on my blog ! > > Do you guy have any ideas on what I could run or install on this thing ? (For fun of course, nothing serious!)

Howdy All! I've been self hosting some services on a pi 4 for a year or two now and have been fiddling with new services lately. I realized I'm pushing 60% or so of RAM and maxing out the SWAP file while fiddling with things. I currently just set up a nightly reboot as a temporary solution but I'm thinking about picking up a mini PC of some sort to replace it with, and wanted to get input from the community (Read: people smarter than me haha.)

I'm happy to hear any preferences anyone would care to share on hardware. I know obviously more RAM is key, as far as I'm aware CPU isn't super important and any recent-ish box will probably have a fine enough processor in it, and of course I'll probably end up getting a bigger external drive to hook up to it but that's not a big deal.

Also, I'm currently running docker/portainer on an OMV core, just how I learned/got into self hosting. Should I take the opportunity to learn Kubernetes or some other big boy system? I've not done alot of reading into it but I know clusters are gaining steam these days even for self hosting, would that be valuable to learn more about as a hobbyist/enthusiast/whatever? I'm fairly competent and used to have some CompTIA certs but as such I know better than to unnecessarily complicate my life lol. It sounds cool but I don't see a use case in my personal usage.

Thank y'all for your time and knowledge!

I'm currently running: Baikal, Bookstack, Bitwarden, Duplicati, Filebrowser, freshrss , Linkwarden, Apache, Navidrome, nginx, portainer, rpi-monitor, searxng, stirlingpdf, syncthing, watchtower,

I'm considering: Nextcloud, Maybe a game server or two depending on the needs?, Whatever else seems interesting, I guess :P

Self hosting kids-friendly multiplayer games on Raspberry Pi 4

I'm working on a little project and I would like to have some multiplayer game that I can play with the kids. Ideally they should be little kids friendly, so no doom or quake.

I tried Minecraft, bedrock but the latency over wifi (and it needs to be over wifi for my project) is really bad.

In an ideal situation, I'd like to have one or more games that \- Can be played in multiplayer mode \- Ideally you only need the browser \- Is relatively lightweight, so can be run on a Raspberry Pi with Wifi

Any suggestions besides the one I mentioned? Maybe some emulator that can be used? Thanks!

cc @selfhost@lemmy.ml @selfhosted@lemmy.world

Question about replacing/expanding a disk

I have a small mini pc as server similar to [1], which has a super nice small form and has an internal slot for a 2.5" ssd disk. Currently I have a 2TB SSD, but it is filling up rapidly.

My options are:

1. Buy a way more expensive 8TB SSD and replace the existing one
2. Buy a much cheaper 8TB HDD + enclosure and connect it via USB.

I wonder what are the pros and cons of each option. I like 1 more because the form factor of the homelab is maintained and I don't need to plug yet another thing. OTOH I'm allergic to spending money 😆 so a cheaper solution (about 4 times cheaper) is always welcome.

Maybe I'm missing a third alternative? Opinions?

[1] https://www.amazon.com/gp/product/B0BVLS7ZHP/

cc @selfhost@lemmy.ml @selfhosted@lemmy.world

• The live app
• Introducing the app
• Docs
• GitHub
• Reddit community

Id like to introduce you to a decentralized chat app that works purely in the browser. Breaking away from traditional solutions that require registration and installation.

A decentralized infrastructure has many unique challenges and this is a unique approach. Ive taken previsous feedback and made updates. Its important to note, it is still a work-in-progress and provided for testing/review/feedback purposes. it would be great if you can tell me what you think.

Some of the features of the app include:

• Free
• Decentralised
• No cookies
• P2P encrypted
• No registration
• No installing
• Group messaging
• Text messaging
• Multimedia messaging
• Offline messaging (LAN/hotspot)
• File transfer
• Video calls
• Data-ownership
• Selfhosted (optional)
• Screensharing (on desktop browsers)
• OS notifications (where supported)

With no registration or installation required, its easy to get started.

Is there a feature in a CI/CD pipeline that creates a snapshot or backup of a service's data prior to running a deployment? The steps of a ideal workflow that I am searching for are similar to:

1. CI tool identifies new version of service and creates a pull request
2. Manually merge pull request
3. CD tool identifies changes to Git repo
   1. CD tool creates data snapshot and/or data backup
   2. CD tool deploys update
4. Issue with deployment identified that requires rollback
   1. Git repo reverted to prior commit and/or Git repo manually modified to prior version of service
   2. CD tool identifies the rolled back version
      1. (OPTIONAL) CD tool creates data snapshot and/or data backup
      2. CD tool reverts to snapshot taken prior to upgrade
      3. CD tool deploys service to prior version per the Git repo
5. (OPTIONAL) CD tool prunes data snapshot and/or data backup based on provided parameters (eg - delete snapshots after _ days, only keep 3 most recently deployed snapshots, only keep snapshots for major version releases, only keep one snapshot for each latest major, minor, and patch version, etc.)

Syncing password between firefox clones

I use floorp at home and firefox at work and I would like to sync password between those in a self-hosted way. I saw some mozilla server code somewhere to do so, but seems abandoned.

I would prefer a native mozilla-like solution instead of installing an extension, but if nothing else, that is also an alternative... suggestions?

cc @selfhost@lemmy.ml @selfhosted@lemmy.world

I'm starting a project along with my siblings to scan all of the family negatives, slides, and photos in an effort to preserve them.

I currently have Immich as well as Nextcloud Memories internally. That said, neither seem to be ideally suited to this task. I'm looking for a solution that would allow all siblings the option to view and upload scanned pics to the same library as we work through the shoeboxes full of memories. While Immich and Nextcloud both have account support, I can't seem to find a way to share a library amongst all accounts.

Does anyone have any recommendations for this project? I would then backup the scanned pictures on my server as well as B2 storage for redundancy and each sibling should have the option to download and backup the same library however they see fit.

I'm running an Unraid server as well as NextcloudPi on a Pi4. I also have two very basic VPSes that I rent.

I've looked at both ente.io and PiWiGo, but am currently having trouble getting either to work (still learning this selfhost stuff). I'd like to know if anyone has used either in this type of capacity before I spend more time trying to figure out what I'm doing wrong.

Question about #restic

Currently I'm backing up my personal computer on a local server and a remote repository. The easiest solution is to have a cronjob for 2 processes. However, I'm wondering if it is possible to scan the files only once and send the backup updates to both repositories instead of doing two scans... suggestions?

cc @selfhost@lemmy.ml @selfhosted@lemmy.world

The ports 80 and 443 are already used by Adguard Home. I didnt find any way to change those ports for Bitwarden.

hi i would like to build a media/download/nass that more expandible drive wise (needs to be able to stream media(jellyfin /use docker containers and have 3 a4 sata ports)

i currently im thinking on buying this motherboard/with built in cpu asrock-j3455-itx-mini-itx- and planning on adding cheap 16 gig ddr3 stics

the nice thing is its got 4x sata 3 ports and a m.2 for like 65 euro total

so my question is should i get one .if its still wort it .and would this work with my specified needs also what do i use as a psu /how much psu power do i need for 4 drives

and what are my exspansion options with the picie .and m2

would love to ad more sata conections trough the m.2 and pcie if posible

i kinda need a nass/media dowload pc /that has a few sata ports .and can run sonarr/prowlarr/jellyfin /qbittorent -running dietpi os /or debian

and run a few ssd/or/hd drives in raid 0 that is about it (ive have no need for drive redundancy thb it all gonna be torrented anime anyway) best leave no evidance of pireacy lol

I know it's a rude question, but it's been on my mind… I'm wondering roughly what I should be expecting to outlay when I finish my set-up? So I'm assuming it includes things like domain names, hosting for backups, email providers, VPN, etc. What's a good budget to set?

cross-posted from: https://lazysoci.al/post/13140041

> Biggest takeaway… congratulations to Immich and Futo!

cross-posted from: https://lemmy.ml/post/15121280

> preferably with a web console (not required)

Edit: I went with this as a solution for now: https://github.com/Ashfaaq18/OpenNetMeter

This morning I was going through my usual routine of doing a docker pull and I saw that Paperless had an update. Upon checking the Github, I noticed that my version was a lot older than what's currently available. After a bit of digging, I realised that Linux Server deprecated their repository. Cool, no worries, let me switch to the new repository. I delete my Paperless and run the installer on the official repository and all was going perfectly. But I had a power cut. No worries, I go to the fuse box, reset the tripped switch and then manually pull in the Paperless directory to finish the installation. Only problem, I can't get it to work. I assume that something fucked up and so delete everything and try again. Only now, when it gets to creating the yaml files it says "no permission". I check the permissions and they're the same as everything else. Anyone got any idea of what's happening or how to fix it?

cross-posted from: https://slrpnk.net/post/8966140 Zoraxy describes itself as: > "General purpose request (reverse) proxy and forwarding tool for networking noobs. Now written in Go!".

Yet it seems to be packed with goodies and features, such as Geo-IP & Blacklist, ZeroTier controller integrated GAN, IP Scanner, Real Time Stats and even built in Uptime monitor. Addtionally, it can run via a single binary for those who don't want to rely on Docker. There is also an Unraid Template available from IBRACORP. Lastly the project is under the AGPL license 🌻

I also checked, and saw this was recommended on this community 9months ago, but didn't seem to get much attraction then. Has anyone tried this yet? It seems like a good alternative to say NGINX proxy manager and am wondering if I should switch, but wanted to hear thoughts first!

Zoraxy's Github list the following features:

Features

• Simple to use interface with detail in-system instructions
• Reverse Proxy (HTTP/2)
  • Virtual Directory
  • WebSocket Proxy (automatic, no set-up needed)
  • Basic Auth
  • Alias Hostnames
  • Custom Headers
• Redirection Rules
• TLS / SSL setup and deploy
  • ACME features like auto-renew to serve your sites in https
  • SNI support (one certificate contains multiple host names)
• Blacklist / Whitelist by country or IP address (single IP, CIDR or wildcard for beginners)
• Global Area Network Controller Web UI (ZeroTier not included)
• TCP Tunneling / Proxy
• Integrated Up-time Monitor
• Web-SSH Terminal
• Utilities
  • CIDR IP converters
  • mDNS Scanner
  • IP Scanner
• Others
  • Basic single-admin management mode
  • External permission management system for easy system integration
  • SMTP config for password reset

Screenshots

!Image 1

!Image 2

!Image 3

!Image 4

!Image 5

!Image 6

!Image 7

!Image 8

!Image 9

!Image 10

!Image 11

!Image 12

!Image 13

!Image 14

!Image 15

!Image 16

!Image 17

!Image 18

My journey with docker started with a bunch of ill fated attempts to get an OpenVPN/qBittorrent container running. The thing ended up being broken and never worked right, and it put me off of VPN integration for another year or so.

Then recently I found Gluetun…and holy fucking cow. This thing is the answer to every VPN need I could possibly think of. I have set it up with 3 different providers now, and it has been more simple and reliable than the clients made by the VPN providers themselves every time.

If you combine the power of Gluetun with the power of Portainer, then you can even easily edit settings for your existing containers and hook them up to a VPN connection in seconds (or disconnect them). Just delete the forwarded ports in the original container, select the Gluetun container as the network connection, and then forward the same ports in Gluetun. Presto, you now have a perfectly functioning container connected to a VPN with a killswitch.

So if any of y’all on the high seas have considered getting more serious about your privacy, don’t do what I did and waste a bunch of time on a broken container. Use Gluetun. Love Gluetun. Gluetun is the answer.

I'm looking into hosting one of these for the first time. From my limited research, XMPP seems to win in every way, which makes me think I must be missing something. Matrix is almost always mentioned as the de-facto standard, but I rarely saw arguments why it is better than XMPP?

Xmpp seems way easier to host, requiring less resources, has many more options for clients, and is simpler and thus easier to manage and reason about when something goes wrong.

So what's the deal?

A few years ago I turned a pine64 rock64 SBC into a kodi box, and saw immediate performance improvement over the stock Roku chip on my TCL TV when streaming from SMB. As always "better" becomes... ehhhhh I want more. I want to stick with an SBC because of power consumption on a box that I'm going to leave running 24/7. So my question is: What's the best price to video performance SBC out there?