Here is my tierlist:

Offering multiple packaging / deployment options is of course very nice.

I run on proxmox, and prefer to have each app in its own debian LXC container.

What is your favorite way for software to be delivered, and what is your stack?

Hey ,

We've been building Lightpanda for the past 3 years

It's a headless browser written from scratch in , designed purely for automation and AI agents. No graphical rendering, just the DOM, JavaScript (v8), and a CDP server.

We recently benchmarked against 933 real web pages over the network (not localhost) on an AWS EC2 m5.large. At 25 parallel tasks:

• Memory, 16x less: 215MB (Lightpanda) vs 2GB (Chrome)

• Speed, 9x faster: 5 seconds vs 46 seconds

Even at 100 parallel tasks, Lightpanda used 696MB where Chrome hit 4.2GB. Chrome's performance actually degraded at that level while Lightpanda stayed stable.

Full benchmark with methodology:

It's compatible with Puppeteer and Playwright through CDP, so if you're already running headless Chrome for scraping or automation, you can swap it in with a one-line config change:

docker run -d --name lightpanda -p 9222:9222 lightpanda/browser:nightly

Then point your script at ws://127.0.0.1:9222 instead of launching Chrome.

It's in active dev and not every site works perfectly yet. But for self-hosted automation workflows, the resource savings are significant. We're AGPL-3.0 licensed.

GitHub:

Happy to answer any questions about the architecture or how it compares to other headless options.

I’m lost for what to try next, so I’m asking here in the hopes that there’s someone who understands authentik forward auth better.

I have two servers, A and B, both of which use Caddy as a reverse proxy.

I run an instance of authentik on A, reverse proxied via Caddy on the same server and accessible at auth.example.com, plus a dedicated proxy outpost at outpost.auth.example.com.

I run various services on B and I want to make them accessible through forward auth, via the instance of Caddy also on B, at app.example.com.

However, when I try to load the app at app.example.com, I get the error:

{
    "Message": "no app for hostname",
    "Host": "outpost.auth.example.com:443",
    "Detail": "Check the outpost settings and make sure 'outpost.auth.example.com:443' is included."
}

I have the following Caddyfile on B:

app.example.com {
        route {
                reverse_proxy /outpost.goauthentik.io/* https://outpost.auth.example.com {
                      header_up Host {http.reverse_proxy.upstream.host}
                }
                forward_auth https://outpost.auth.example.com {
                        uri /outpost.goauthentik.io/auth/caddy
                        copy_headers # ..authentik headers..
                        trusted_proxies 12.34.56.78  # IP address of A
                }
                reverse_proxy app:1234  # name and port of app container
        }
}

I'm not sure what's going on here. I guess the wrong Host is getting passed to the authentik outpost? But this is based on the .

I've looked over the Caddy docs for the and it seems like what I've written is correct.

I saw people getting a similar error who solved it by restarting the authentik worker, but I've done this to no avail. I've also tried this with the authentik Embedded Outpost, which didn't work either.

Any help would be really appreciated :)

I cant keep up with this sub, i used to love just being able to browse and find some really awesome projects that have really changed my life. Its not an overexaggeration at all, as an IT person, this place has opened my eyes and have let me discover peace in todays fast paced world where everything is about subscriptions and our private data, selfhosting allowed me to slow down and take a breath, i have built servers, deployed countless ideas and for a moment i finally felt like im free of every corporate bullshit out there.

after all these, the reason im writing this is because the amount of posts that are influenced by ai. dont get me wrong, i can think of it like any other handy tool, but thats only my view and current trends seemingly dont align with it, because there are so much new projects popping up i cant even keep up. It seems like every day some random user reinvents the wheel with their low quality vibecoded project and spams the whole sub with it, thats not good. Its not the fault of ai sadly, its the human behind it, you can elevate your efficiency with ai and still be trusted in my opinion, its about how much you actually care. If i see someone post a fully ai generated marketing letter and then i see that the projects whole git history is basically claude vibing… that someone probably doesnt really care and just wants attention or fame. If you are that person, let me tell you if you want those meaningless github stars then create something that you feel you can put lots of effort in it, dont just vibecode something in a day since we can do that too, thats not really adding any value.

tl;dr: if your project is using ai then at least put an ai disclaimer in your posts…

Wanted to flag some stuff about BookLore that I think people need to hear before they commit to it.

The code quality issue

There's been speculation for a while that BookLore is mostly AI-generated. The dev denied it. Then v2.0 landed and, well: crashes, data not saving, UI requiring Ctrl+F5 to show changes, the works. These are the kinds of bugs you get when nobody actually understands the codebase they're shipping.

The dev is merging 20k-line PRs almost daily, each one bolting on some new feature while bugs from the last one go unfixed. And the code itself is a giveaway: it uses Spring JPA and Hibernate but is full of raw SQL everywhere. Anyone who actually built this by hand would keep the data layer generic. Instead, something like adding Postgres support is now a huge lift because of all the hardcoded shortcuts. That's not a style preference, that's what AI-generated code looks like when nobody's steering.

How contributors get treated

This part is what really bothers me.

People submit real PRs. They sit for weeks, sometimes months. Then the dev uses AI to reimplement the same feature and merges his own version instead. Predictably, this pisses people off. At the time of writing this, the main dev has alienated almost all of the contributors that were regularly supporting, triaging issues and doing good work on features and bugfixes.

When called out, he apologizes. Except the apologies are also AI-generated. And more than once he forgot to strip the prompt, so contributors got messages starting with something like "Here's how you could apologize—"

One example I'm familiar with, because I was following for this feature for a while (over 2 months?): someone spent serious time building KOReader integration. There was an open PR, 500+ messages of community discussion around it. The dev ignored it across multiple releases, then deleted the entire thread and kicked the contributor from the Discord. What shipped in that release instead? "I overhauled OIDC today!" Cool.

Every time criticism picks up in the Discord, the channel gets wiped and new rules appear. This has happened multiple times now.

The licensing bait-and-switch

This is the part that should actually scare you if you're thinking about deploying this.

BookLore is AGPL right now. The dev is planning to switch to BSL (Business Source License), which is explicitly not an open source license. He also plans to strip out code from contributors he's had falling-outs with. Everyone who contributed did so under AGPL terms. Changing that out from under them is a betrayal, full stop.

The main dev had a full on crashout on another discord, accusing people of betrayal etc because they were....forking his code? I am not going to paste the screenshots of the crashout because it is honestly just unhinged and reflects badly on him, maybe its something he'll regret and walk back on - hopefully.

It gets worse. There's a paid iOS app coming with a subscription model. What does that mean concretely? You'll be paying a subscription to download your own books offline to your phone. Books you host yourself. On your own hardware.

The OIDC implementation, which should be a standard security feature, is being locked down specifically to block third-party apps from connecting, so the only mobile option is the paid one. Features the community helped build are being turned into a paywall funnel.

The dev has said publicly that he considers forking to be "stealing" and wants to prevent it. He's also called community contributions "AI slop." From the guy merging AI-written 20k-line PRs daily. Make of that what you will.

Bottom line

• Contributors get ignored, reimplemented over, and kicked out

• AGPL → BSL relicense is coming, with contributor code being stripped

• Paid iOS app will charge you a subscription to access your own self-hosted books offline

• OIDC is being locked down to kill third-party app access

• The dev thinks forking is theft and has open contempt for OSS norms

- some examples. I couldn’t grab some from the official discord, seeing as how ACX has a habit of wiping that one whenever some pushback is posted.

This is the huntarr situation all over again. Deploy with caution, or honestly, wait and see if a community fork shows up under a license that actually holds.

Edit: forgot to add one thing, because this isn’t really made clear and may not be known by people. It has Opt-out telemetry, so it sends out stuff (not sure what, haven’t looked into that yet) to the developer by default. Usually, these kind of things are displayed prominently to the user on first setup and is opt-in, and most selfhosted users would disable it, but with the documentation around this in such disarray (because of the rapid feature bloat) I think people may not be aware of this. So what you can do is lock down your current version if it works well, and turn telemetry off.

To turn it off, go to the app -> settings -> application and at the bottom there should be an option to turn off telemetry.

Edit2: Okay, turns out the telemetry is worse than I thought, and sends data to the devs server regardless of whether you have it on or not. Have a look at these:

Edit3: A community member has now raised a PR and gotten it merged which disables this telemetry behaviour, so once this gets released, should be a safe version to pin on or fork from.

UPDATE :

⚠️⚠️ EDIT : [Company A] CEO reached out to me with a nice tone and his point of view, which I really appreciate, also with a mild apology for sending the legal doc first without communication (the got the message we wanted to deliver). I hold nothing against their business personally and I am always more than happy to comply with reasonable demands (like removing trademarked name parts from project), but I don't think the exporter is against the rules (I have my own logic for fair business practice) and now the CEO wants to meet for a quick call (I hope friendly), to discuss and reason things out. I need to present my points fairly as well and don't want to get pressured/voiced down, just because I am alone with my logic. I am sure as a company with > 1 million $ revenue they have a larger backing.

⚠️⚠️ I am already in chat with as a legal representative, but we are in a different time zone. If anyone else in addition would like to take a look to help me, present their view, or get involved, I am more than happy to talk and get some feedback on how can I present my idea (reach out only If you are a lawyer, but please note I am not in a position to pay any fees). It's best if you have knowledge of EU legal rules and data protection policy, GDPR etc. Please reach out to me as this is the right time to make the reasoning and requests. feel free to email me to or send me a chat here. I might not reply until morning, as it's quite late here now.

None of these would have happened only if they sent me this same email before sending the letter.

💜💜 Thanks to the and and community we were able to reach to this stage in record time. As in individual, you can voice your opinion. It proved again that what opensource communities can do and this thread is a living proof of that.

--------

TL;DR: I made an because the biggest corporate player in the space locks your older data behind a paywall. They found my GitHub, tracked my Reddit posts, and hit me with a legal notice for "unfair competition" and trademark infringement.

Long version: I maintain a few small open-source projects. About two weeks ago, I released a free, self-hostable tool that lets drone pilots collect, map, and analyze their flight logs locally. I didn't think much of it, just a passion project with a few hundred users.

I can’t name the company (let's call them "Company A") because their legal team is actively monitoring my Reddit account and cited my past posts in their notice. Company A is the giant in this space. Their business model goes like this:

• You can upload unlimited flight logs for free.

• BUT you can only view the last 100 flights.

• If you want to see your older data, you have to pay a monthly subscription and a $15 "retrieval fee."

• Even then, you can't bulk download your own logs. You have to click them one by one. They effectively hold your own data hostage to lock you into their ecosystem. I am not sure if they are even GDPR complaint even in the EU

To help people transition to my open-source tool, I wrote a simple web-based script that allowed users to log into their own Company A accounts and automate the bulk download of their own files. Company A did not like this. They served me with a highly aggressive, 4-page legal demand (CEASE and DESIST notice). They forced me to:

1. Nuke the automated download tool entirely from GitHub.

2. Remove any mention of their company name from my main open-source project and website (since it’s trademarked). I originally had my tagline as "The Free open-source [Company A] Alternative," which they claimed was illegally driving their traffic to my site.

3. Remove a feature comparison chart I made. (I admittedly messed up here, I only compared my free tool to their paid tier and omitted their limited free tier, which they claimed was misleading and defamatory).

I'm just a solo dev, so I complied with the core of their demands to stay out of trouble. I scrubbed their name, took down the downloader, and sanitized my website. My main open-source logbook lives independent of them.

I admit I was naive about the legal aspects of comparison marketing and using trademarked names. But the irony is that they probably spent thousands of dollars on lawyer fees to draft a threat against my small project that makes close to zero money (I got a few small donations from happy users).

Has anyone else here ever dealt with corporate lawyers coming after your self-hosted/FOSS projects? It’s a crazy initiation :)

EDIT : Lot of people think the company is DJI, it's NOT DJI. I love their drones and their customer service. It's not them.

This is not about vibe-coded apps. It's about the literal posts. It looks like every other post on here is written by some AI chatbot. Of course, they have been for a while, but is it just me or has it been getting even worse?

I just can't understand it. Why on earth would you generate a /Reddit post/ with AI?

Recently I've been thinking about looking for private communities, but I keep realizing I wouldn't want to join one in the first place. There's tremendous value in having new people be able to participate whenever they want and having a space to ask questions. That's something that needs to be preserved and protected. Especially from the likes of ChatGPT.

This sucks. I know how to make it better and I'm afraid that no-one really does.

Edit: To the people who think there are too many posts complaining about AI: Try sorting this sub by New. Those of us who do filter all the most egregious slop out, that's why you're not seeing it.

This is a follow up to my regarding the C&D notice I received. I have some incredible news for the community: the matter is officially resolved in favor of the entire drone community.

TLDR: AirData UAV has complied with community concerns, implemented a robust data takeout solution, and we have settled the matter gracefully.

The free OSS project in question :

---------------

Since the legal threat is no longer active, I can finally name the company. It was AirData UAV, a US based drone log analysis and reporting service. Eran said it's my choice to name them or not name them here in this update post, I choose to name, because I don't have anything bad to say anymore.

Despite the first approach was a C&D, the final outcome was actually better than I hoped for (surprised actually!). A massive thank you goes to , who acted as my legal representative pro bono (for free!! and denied donations). He prepared a powerful response and helped me pass this with confidence. He has even started a new subreddit, , to help other indie devs in similar situations.

The Meeting with the Airdata UAV CEO Eran Steiner

In response to the traction the gained, AirData CEO Eran Steiner reached out for a face to face meeting via email within 6 hours of the post going live. He expressed regret over the legal route they initially took (he took the responsibility for that as well as CEO) and personally saw to it that the following changes were made before we even spoke:

• Official Data Takeout Solution: This was the main goal (and my demand for data portability and fairness, because it's painful to export files one by one, clicking one after another and waiting). AirData UAV now provides a central takeout solution, making them fully GDPR compliant. You can now download your data in its original format without needing my 3rd party automation "patch.". If you are interested, .

• Trademark Resolution: We agreed that fair representation and disclaimers are the way to go. I have already added these to my project, and I am free to use their name when representing truthful facts, as permitted by EU laws. I won't go into more technical/legal aspects than this of what trademark rights they actually hold or not.

• Account Restoration: As a gesture of goodwill, they have fully restored my account and all my log files before I asked. ❤️

• We agreed to drop all allegations and, in the future, talk through any issues personally rather than involving lawyers.

I am just a solo dev working in my free time, and I have no intention of competing with an established company. I am just thrilled that the community now has true data portability as I hoped for, and they are free to choose as they please based on what features/interface they like. Thank you Eran for making this happen so quick without any drama/delay or missed promise. AirData no longer "holds your data" to keep you on their platform. To be fair, they do have a functional and data rich toolset that many in the community still enjoy (including myself!) - They also have a very robust data sync solution which works very well. I am not paid or bribed or sponsored by them, I am just giving credit where it's due.

Thank you for all for the support. It made all the difference! Open Source for the WIN!

Is there any self-hosted tool for tracking houseplants?

Something like the mobile apps that remind you to water plants, but self-hosted.

Thank you in advance!

Basically, what was it that turned on the light?

For me, it was the Raspi Bolt project. Walked me through setting up a headless Linux server on a raspberry pi, hardening it, ssh, ufw, fail ban, OpenSSL, nginx, and Tor... All before installing the Bitcoin client.

Work notes, personal stuff -> didn't want any of it leaving my machine.

AnythingLLM + Ollama on Windows, embeddings via nomic-embed-text, LanceDB local vector store. Nothing goes anywhere.

Writeup here:

I currently have a B450 MB, Ryzen 5, 1660ti, as my server build with 28TB. I am running unraid, with multiple containers. I want to make a photo server for my wife, she's constantly having to buy more iCloud space. I was thinking of using one of my many PIs that are sitting around doing nothing. I have been leaning towards just getting a Synology, just for ease. But what about a pi4 with OMV and an external 2TB ssd? Since I have all those parts laying around. Or is an hdd better?

I just set up a new Asustor NAS on my home network and am using it to host a Jellyfin media server. The server is part of a Tailscale tailnet that includes my phone, my personal computer, and the NAS. I would like to cast media from the Jellyfin server to Google-cast enabled TVs, including those that are not in my tailnet or home network. Ideally, I would like to do this via the Jellyfin iOS app, but I would be open to a PC-based option if that's somehow preferable.

The key problem I'm running into is that Google cast requires an HTTPS connection to cast.

I'm relatively new to the self-hosting space, but the how-to and help-me docs I've been able to find (including quite a few from the current subreddit) make it sound like the gold-standard solution to this problem is to expose my Jellyfin server to some flavor of the (more) public internet via a reverse proxy, with the typical recommendation being an integration with Caddy.

While I am open to this option, there are two reasons I'd prefer something simpler:

1. This is my first true foray into web hosting, and there are a lot of details about Caddy, SSL certs, and how to interact with the (seemingly clunky) command-line interface on my NAS that I don't understand.

2. It feels a little overbuilt for my use case. At the end of the day, all I really want to do is (a) access my content from an outside network (which I can already do via Tailscale); and (b) cast to a Google-cast-enabled TV without any up-front configuration (primarily for use when I'm traveling or staying with my SO).

Based on the Tailscale documentation, it seems like I should be able to accomplish the latter simply by provisioning my NAS with an SSL cert via the tailscale cert command.

However, simple attempts to do so have failed so far. After using Tailscale's built-in terminal to SSH into my NAS and run the relevant command (providing my tailnet's magic DNS name as an argument), the cert seems to have been installed, but Chrome consistently provides a "not secure" warning when I try to access the NAS's online admin panel via the corresponding HTTPS port. (HTTPS has been enabled on the NAS and the same warning appears when I try to access the admin panel via the ordinary IP, the tailscale IP, and the tailscale magic DNS name).

Poking around the NAS's settings, I also tried to manually import the tailscale cert via the NAS's certificate manager, but this resulted in an error message that seemed to amount to "this cert is real, but it's not for the thing you're trying to access" (again, when trying to securely access the NAS's admin panel). I suspect this may be because the manual import location was outside of the Docker container running tailscale, but I don't have a deep understanding of how any of that works.

Having reached the limits of my understanding, I'm looking for advice on how to troubleshoot the issue(s) with my NAS's SSL cert.

Or, barring that, I would welcome implementation advice for how to configure a simple reverse proxy on my NAS and integrate it with Jellyfin-- keeping in mind that I know very little about domain hosting, Caddy, or working with the command line on an an Asustor NAS.

After few weeks my migration from Calibre to Booklore is finished and very satisfied about it. I had to merge metadata in calibre using ebook-polish, then flattem them all in single folder and after that it was easy to migrate all my epub files to Booklore with preserving all Calibre custom metadata.

Next I created shelfes, magic shelfes, Kobo sync, KOReader sync, Hardcover progress sync, etc. Anything that is useful to me and Booklore supports. All is working.

Last step is the book importing. Here my current flow is same as it was for last year or more. Using Prowlarr I search for a book, then grab it and my torrent or usenet client would fetch it but always put it in usenet/completed or torrent/completed folder. Still need to copy it manualy and go over bookdrop import procedure.

I heard about Readarr (abandoned project?), but no other tool is known to me, that could automate fetching books from my favourite authors (defined list of wanted books) automatically after they are released.

How do you automate monitoring, fetching and importing? Manualy like me or is there an all-in-one selfhosted application that can do that?

Hey guys, head IT admin (read: the only IT person) at a small charity here. We have a Synology NAS set up all nice with access control and organization, but the boss came from a big company and has experience with MS SharePoint. She really wants collaborative document editing (and everyone really does need it), but it seems nothing really integrates well with what we have. And also Microsoft wants at least €140 per person for the nonprofit discounted price and that's if we move everyone over to whatever system MS has after spending months wrangling everyone onto the Synology NAS.

I've tried nextcloud, and aside from a roadblock error of getting a 404 for /index.php/login, it having its own account system makes it seem like it wouldn't integrate well, given we're doing the access control and accounts in the NAS itself.

Is there any solution that you guys think would work? Docker on the NAS itself doesn't seem the most reliable (only office document server was a non-starter literally), web hosting is doable, though not perfect as mentioned above with the 404.

im hating the idea, not the person ;), also look down for a temp solution

Title speaks for itself, almost every single post in the last few weeks is just someone promoting their vibecoded bs app that is either something simple like file transferring (there is already some well trusted ones that are faster better etc.), or something really complicated that ai cant do without security flaws... (Huntarr).

idc how this post looks, how it sounds, if vibecoders get offended, i just want the mods to actually remove this and not just try to "prevent" it with the rules they changed..

upvote if u think so 2 so it gets to the top, in my opinion commenting on someones post saying its slop wont do anything, wont help anyone.

shout out to for this:

It's a shame the Vibe Code and Built with AI labels were removed as it made it incredibly easy to filter out these posts with ublock.

! Enough Vibe Coded bullshit
sh.reddit.com,www.reddit.com##shreddit-post:has-text(/.*Vibe Coded \(Fridays!\).*/)
sh.reddit.com,www.reddit.com##shreddit-post:has-text(/.*Built With AI \(Fridays!\).*/)

Another good way of filtering out the AI generated posts is filtering out on the characters that hardly anyone actually uses in casual online postings.

! AI Slop (No you don't really "use" EM dashes in informal discussion online) 
! See:
! https://www.pieceofk.fr/the-rise-of-the-em-dash-in-ecology-abstracts/
! https://www.reddit.com/r/dataisbeautiful/comments/1kfg9b8/oc_em_dash_usage_is_surging_in_tech_startup/
sh.reddit.com,www.reddit.com##shreddit-post:has-text(/—/i)
sh.reddit.com,www.reddit.com##shreddit-comment:has-text(/—/i)

Readme updated today:

This repository is no longer actively maintained.

The TrueNAS build system previously hosted here has been moved to an internal infrastructure. This transition was necessary to meet new security requirements, including support for Secure Boot and related platform integrity features that require tighter control over the build and signing pipeline.

No further updates, pull requests, or issues will be accepted. Existing content is preserved here for historical reference only.

Wondering if this is just the first step towards doing a in the future.

PWA's can do a lot these days. using things like the filsystem api, you can store files and manage directories. you can also use service workers, to prevent fetching new statics for a local-first approach.

would that be considered selfhosted? or do you have you be serving the files from your own static server?

i first investigated about this questions with an open source example as seen here. its clear how that can be selfhosted from the readme.

github:

open source demo:

in contrast, i have a separate version of the app that is close-source... so you cant selfhost it, but its still a PWA using local-resources for details like data storage.

close source demo:

in either case, you have "source code available", but one is ubfuscated while the other isnt minified. so i was wondering where the lines are blurred for what is considered selfhosted.

Hello everyone,

I'm fairly new to the whole Self-hosting topic but have a software development background.

Currently, I'm setting up a server that should expose a few services to the public internet.

I already learned that one part of the security should be separating the server network from the home network. Sadly, when I bought my last router I decided for the cheaper one not supporting VLANs, because back then I knew what they are but not why I should ever need them at home. The router I bought is a Fritzbox 5530 Fiber.

While it does not support VLANs it has the capability to provide a fully separated Guest LAN. So in theory I could just attach the Server to the guest LAN, but fully separated means that I also don't have any local access to the server and would need to expose SSH and any maintenance services to the public Internet to access them. That's something I want to avoid

I currently have two vague ideas to solve this issues, for both ideas I don't know yet if they would work and how to archive them:

Idea 1: Using spare Fritzboxes for Subnets

I have a few Old fritzboxes lying around:

• 1x Fritzbox 7560

• 2x Fritzbox 7490

The idea is to use one or two of these to create separate Networks. How exactly? That's something I need to figure out

Idea 2: Getting a VLAN Capable router for a Subnet

While doing some research I stumbled across the TP-Link ER605. It's a cheap VLAN capable router with up to four WAN Ports.

My rough Idea:

• Home Network stays connected to the Main Fritzbox.

• Connect the first WAN port of the TP-Link to the guest LAN of the Fritzbox. This connection is used to connect the server with the internet.

• Connect the second WAN Port of the TP-Link with the normal LAN of the Fritzbox. Restrict this connection as much as possible: Blocking everything from the Server to the home network, Only Opening ports for http(s), ssh and dns from my home into the server network.

• Connect the server to one of the TP-Links Lan ports

Do you guys think, these are ideas that could work and have opinions which is better? Or do you think that these ideas are stupid?

After months of planning and building, I finally have a fully self-hosted setup that replaced almost everything I was paying for or trusting to big tech. Put together a video walking through the whole build if anyone's interested.

What I replaced:

• Google Photos → Immich

• Google Drive / OneDrive → Nextcloud (file sync across all devices)

• Ring / Nest cameras → Frigate NVR (Coral AI detection + Home Assistant integration)

• Various streaming → Plex (with full *arr stack)

• Commercial router → pfSense (firewall, DNS, DHCP, WireGuard VPN, ntopng monitoring)

• LastPass → Vaultwarden

• DNS ad blocking → Pfblocker

Hardware:

• 3x Lenovo M720q + 1x M920q (Proxmox cluster + pfSense)

• Terramaster D5-310 DAS with 42TB raw storage

• Google Coral USB TPU

• All mounted in a 3D printed KWS Rack V2 (12U, 10-inch)

• Total: $3,737 CAD

The honest take:
Setup time is real. This isn't a weekend project — it took weeks of configuring, breaking, and fixing. But now everything runs 24/7, I own my data, and the monthly cost is basically just electricity (~$10-15/month).

The biggest win? Immich. Having Google Photos-level search (face recognition, location, object detection) on hardware I own, with zero cloud dependency — that alone justified the build.

Video (full build walkthrough):

I'm a plumber by trade who fell into self-hosting, so if I can set this up, anyone can. Happy to answer questions.

Seerr is the new unified successor to Overseerr + Jellyseerr. The two teams have merged into one project + one shared codebase, combining all existing Overseerr functionality with the latest Jellyseerr features, including Jellyfin + Emby support.

Highlights

• Jellyfin + Emby support (alongside Plex)

• Optional PostgreSQL support (in addition to SQLite)

• Blocklist (movies/series/tags) + Override rules for smarter request defaults

• TVDB metadata support (experimental) + TVDB indexer

• DNS caching (experimental) to reduce DNS spam (Pi-hole/AdGuard friendly)

• Dynamic placeholders in webhook URLs

• Notification QOL (e.g., optional embedded posters) + lots of bug fixes

Migrating from Overseerr/Jellyseerr

You must follow the migration guide linked below carefully. BACKUP FIRST so you can roll back if needed Release notes:

Release announcement:
Migration guide:

If you hit any issues during upgrade/migration, please report them in our Discord (with steps/logs) and we’ll help you out!

Curious how this sub's workflows compare to the average "just use Google Drive" crowd. I'm a med student running a mix of .csv exports, Jupyter notebooks, PDFs and way too many browser tabs. I've noticed how fragmented everything gets once you're managing 50GB+ of local files across different formats.

So what does your day-to-day actually look like? What file formats are you drowning in, what tools tie it all together, and what's the most annoying gap in your setup?

I've set up headscale with a VPN on a VPS using some ansible scripts already so I can spin it up from scratch easily. I'm quite happy with this.

I'm investigating doing the same thing with proxmox on a home server - which i'll be using to do stuff like run immich and homeassistant.

My goal would be to have the state of my homelab checked into the same git repo and to be able to either recreate it from scratch quickly on a new server with very few steps or upgrade stuff like immich by tweaking a file and running a sync script.

A cursory google suggests that some people do this with terraform, ansible, pulumi or nixos or some combination but it's not clear if any of these are generally preferred methods or have pitfalls or if they're all just too complicated and it's not really worth doing.

first off, thank you. legitimately. i work i finance. i have zero technical expertise in this area, but y'all have made this so fucking simple that even a dumbass like me can selfhost a server with a bunch of rad life-improving tools. and this community has been really great, both to follow, and for help/support.

but why the hell do you all just give these things away for free? i ask this as a genuine question. i don't really understand how this works.

-is it career development? does writing/maintaining/contributing to open source projects help pad resumes?

-i know a lot of projects have a small group of dedicated maintainers, but there are a lot of projects where thousands of people have made contributions. is contributing actually easy for someone with your skill set? i understand building something from the ground up is a significant investment. and i understand that everyone has competencies and proficiencies in their respective fields. but all of this is greek to me. how difficult is it for those of you who are technically skilled in this area to make bug fixes or other contributions?

-separately, what motivates you to do that for free? or are there a lot of people who are employed by companies that rely on open source projects that pay their devs and engineers to maintain upstream products as well?

-how much of this is companies getting people to try their product at home and then advocate for it in the office when they see its benefits?

i live near the trailhead of an awesome group of hiking/mtb trails. i will go out occasionally with a group once or twice a year to do some trail maintenance. is it anything like that?

all of this to say, i have no idea why you all do this, but i am sincerely grateful. i've tried to buy a coffee for almost every major project i use, but that feels like small gratitude for what i've got in return. this is such a fun hobby, one i never would've guessed would even be possible for someone with my background and limited capability, but its captured me like nothing else really. so thank you to everyone!

Hello, I have a set up on unraid. I have managed to get traefik + tiny auth * pocket id running. I have my domain pointing at a tailnet ip.

I was wondering if it was possible for me to keep the one en point in pocket id (the tinyauth) and default access to admins. However if I wanted to add my friends to my tailnet or even other people, is it possible to overide access or something to allow media group? Tiny auth **is** small enough I could always just spin up another instance so I can restrict user groups via two different apps but like it’d be nice to have one. I also have an authentik container ready to be set up if it would be better but I already need pretty minimal security tbh.

Edit: Or actually I could add the same tiny auth instance to pocket I twice?????

As a self-hosted project creator (homarr) I’ve observed the space grow in the past few years and now it feels like every day there is a new shiny selfhosted container you could add to your stack.

The rise of AI coding tools has enabled anyone to make something work for themselves and share it with the community.

Whilst this is fundamentally great, I’ve also seen a bunch of PSAs on the sub warning about low-quality projects with insane vulnerabilities.

Now, I am scared that this community could become an attack vector.

A whole GitHub project, discord server, Reddit announcement could be made with/by an AI agent.

Now, imagine this new project has a docker integration and asks you to mount your docker socket. Suddenly your whole server could be compromised by running malicious code (exit docker by mounting system files)

Some replies would be “read the code, it’s open source” but if the docker image differs from the repo’s source you’d never know unless manually checking the hash (or manually opening the image)

A takeaway from this would be to setup usage limits and disable auto-refill on every 3rd party API you use, isolate what you don’t trust.

TLDR:

Running an un-trusted docker container on your server is not experimentation — it’s remote code execution with extra steps (manual AI slop /s)

ps: reference this post whenever someone finds out they’re part of a botnet they joined through a malicious vibe-coded project

I have a 4TB music library and between mismanaged Beets and Picard edits, things are a mess. Lots of %artist% and %title%, unkown artists, etc.

I am looking for any suggestions on a tool, script, repo, etc that can help me fix this without listening to every track...

Hey, I've used a variety of note taking apps in the past but I've always gone back to writing notes because I like pen to paper.

I also tried a Remarkable but again, I didn't like the feel of writing on a screen - however close they suggest it feels to pen on paper.

So, I'm wondering if there's a self hosted app where I can either type or upload an image of my written notes which is then turned into text for easy search/edit? Kind of like Remarkable but without writing on a tablet.

I do host my own open webui so I'm guessing something must be possible! I'd like the note taking experience to be as streamlines as possible.

I want to share one stage of my self-hosted hobby infrastructure: how far I pushed it toward Go.

I have one public domain that hosts almost everything I build: blog, portfolio, movie tracker, monitoring, microservices, analytics, and a small game. The idea is simple: if I make a side project or a personal utility, I want it to live there.

I tried different stacks for it, but some time ago I decided on one clear direction: keep the custom runtimes in Go wherever it makes sense. Standalone infrastructure is still whatever is best for the job, of course: PostgreSQL is PostgreSQL, Nginx is Nginx, object storage is object storage.

Why did I go this hard on Go? Mostly RAM usage, startup behavior, and operational simplicity. A lot of my older services were Node.js-based, and on a 4 GB VPS I got tired of paying that cost for relatively small apps. Go ended up fitting this kind of setup much better.

The clearest indicator for me right now is memory usage, especially compared to the Node.js-based apps I used before.

I want to share what I have now, what I changed, and what is still left. If there was already a solid self-hostable project in Go, Rust, or C, I preferred that over writing my own.

First, here is the current docker stats snapshot. The infrastructure is deployed via Docker Compose, and then I will go through the parts I think are worth mentioning. These numbers are from one point-in-time snapshot, not an average over time.

VPS CPU arch: x86_64, 4 GB of RAM.

Insights

Note: not every container here is Go. The obvious non-Go pieces are the Postgres databases, Nginx, and the current CMS on Bun. But most of the services I picked or wrote are now Go-based, and that is the part I care about.

I will go one by one through what Go powers here and why I kept each piece.

Worth mentioning that when I say Go here, I mean the runtime. Some services still use Next.js, Vite, or Svelte for statically served UI bundles.

Standalone image deployments

I will start with open source solutions I use and did not write myself. Except for Nginx, the standalone services in this section all have a Go-based runtime.

• minio1-1, minio2-1, minio3-1: MinIO S3-compatible storage. I currently run 3 nodes. It worked well for me, but I started evaluating RustFS and other options after the MinIO GitHub repo was archived in February 2026.

• imgproxy-1: imgproxy for image resizing and format conversion. It gives me on-the-fly thumbnails for all services without adding a separate image CDN layer.

• cache-proxy-1: Nginx. Written in C, but I still Go-fied this part a bit. I used to run Nginx + Traefik. I liked Traefik's routing model, but I had enough issues with it that I removed it. Managing routes directly in Nginx was annoying, so I wrote a small Go config generator that reads routes.yml and builds the final config before Nginx starts. I like the simplicity and performance of this kind of proxy setup.

• memos-1: Memos for personal notes. Private use only.

• watcharr-1: Watcharr for tracking movies and series. Lightweight enough for my setup and I use it only for myself.

• gatus-1: Gatus for public monitoring and uptime status. I tried a few Go/Rust-based options and liked this one the most. With some tuning I got it from roughly 40 MB to about 10 MB RAM usage.

• whoami-1: Traefik whoami. Tiny utility container for debugging request and host information.

My own services

• blog-1: My personal blog. Originally written in Next.js with Server Components. Now it is Go + Templ + HTMX. I ended up building a small framework layer around it because I wanted a workflow that still feels productive without keeping the Node runtime.

• sea-battle-client-1: Next.js static export for the Sea Battle frontend. A custom micro server written in Go serves the UI.

• sea-battle-1: Backend for the game. It uses gqlgen for the API and subscriptions and has a custom game engine behind it. That was probably the most interesting part to implement in Go: multiplayer, bots, invite codes, algorithms, win-rate testing for bots, and tests that simulate chaotic real-world user behaviour. It was a good sandbox for about a year to learn Go. A lot o rewrites happened to it.

• l-you-1: My personal website. Small landing page, nothing special there. A Go micro server hosts it.

• lovely-eye-1: website analytics built by me. I made it because the analytics tools I tried were either too heavy for my VPS or just not a good fit. Go ended up being a very good fit for this kind of project. For comparison, Umami was using around 400 MB of RAM per instance in my setup, while my current analytics service sits at about 15 MB in this snapshot.

What's remaining

cms-1: CMS that manages the blog and a lot of my automations. Right now it is still PayloadCMS on Bun. In practice it usually sits around 450-600 MB RAM. For the work it does, that is too much for me. I want to replace it with my own Go-based CMS, similar to PayloadCMS.

I already started the rewrite. That's the final step to GOpherize my infrastructure.

After that, I want to keep creating and maintaining small-VPS-friendly projects, both open source and for personal use.

If you run a similar public self-hosted setup, what are you using, especially for the CMS/admin side? If you want details about any part of this stack, ask away. This topic is too big to fit into one post.

Every single cert pulled is for a separate subdomain. It's driving me nuts. Please help.

from static config:

providers:
  file:
    directory: /etc/traefik/conf.d/

entryPoints:
  web:
    address: ':80'
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
  websecure:
    address: ':443'
    http:
      tls:
        certResolver: letsencrypt
        domains:
          - main: domain.tld
            sans:
              - '*.domain.tld'

  traefik:
    address: ':8080'

certificatesResolvers:
  letsencrypt:
    acme:
      email: "address@domain.tld"
      storage: /etc/traefik/ssl/acme.json
      dnsChallenge:
        provider: porkbun
        disablePropagationCheck: true
        delayBeforeCheck: "60"

from dynamic config:

http:

 routers:

   thing:
     entryPoints:
       - "websecure"
     middlewares:
     rule: "Host(`sub.domain.tld`)"
     service: thing
     tls:
       certResolver: letsencrypt

 services:

   thing:
     loadBalancer:
       servers:
         - url: "http://ipaddress:port"

Hey ,

It's been a minute. Sprout Track is a self-hostable mobile first (PWA) baby activity tracking app that can be easily shared between caretakers. This post is designed to break up your doom scrolling. It's long. If you wish to continue doom scrolling here is the TL;DR

Sprout Track is over 1 year old and has hit 1.0 🥳! Here is the

AI Disclosure: I have built this with the assistance of AI tools for development, graphics generation, and translations with direct help from the community and my family.

Get it on docker: docker pull sprouttrack/sprout-track:latest or from the github repo.

Cheers! and thank you for the support,

-John

Story Continued...

Last time I posted was the , and at that point I had outlined some goals for 2026. Well, the first two months were a slow start. Winter hit hard, seasonal depression is real, and chasing a 15 month old doesn't exactly leave a lot of energy for side projects. But something clicked recently and I've been on a tear. Probably the warmer weather we had in early March and the excess vitamin D.

What just released in v0.98.0

Earlier this week I deployed the localization and push notifications release. This one had been in the works since early January...

Localization is now live with support for Spanish and French. Huge thank you to WRobertson2 and ebihappy for their help and feedback on the translations. I'm sure these translations are still not perfect, and I am grateful for any corrections sent in PR's.

Push notifications - This utilizes the . You can enable and manage them from the family-manager page and works regardless of deployment of Sprout Track. HTTPS is required for this to work. Oh yeah, push notifications are also localized per the user setting receiving the notification. This was an intimidating feature to setup, and took a lot of work and testing for Docker, but it's here and I'm super proud of it.

Also squashed some bugs in this release: pumping chart values were off, some modals were showing up blurry, and auth mode wasn't switching correctly when you set up additional caretakers during the setup wizard.

What releases right now in v1.0.0

After getting v0.98.0 out the door I kept going. The rest of this week has been a sprint and I've covered a lot of ground. Fighting a cold, working full time, and spending every spare minute on this... I'll probably hear about it from my wife during our next retro.

Webhooks for Home Assistant and Other Tools - This one is done. Family admins can manage webhooks directly from the settings page. If you're running HA alongside Sprout Track, you can fire webhooks on activity events. Log a feeding? Trigger an automation. Start a nap? Dim the nursery lights. A few people have asked for this, and here it is. I built this to allow connections over HTTP from local networks and localhost, but it requires HTTPS from devices coming from outside your network. All you do is create an API key, and plug it into your favorite integration. There are also some basic API docs in app. More detailed docs can be found here:

Nursery Mode - Also done. This turns a tablet or old phone into a dedicated tracking station with device color changing, keep-awake, and full-screen built in (on supported devices). Think of it as a purpose-built interface for the nursery where you can log activities quickly without navigating through the full app at 2am. It doubles as a night light too.

Medicine VS Supplements - Before v1.0 you could only track medicine doses. I expanded this so you can track supplements separately since they are usually a daily thing and you don't need to pay attention to minimum safe dose periods. Reports have been added so you can track which medicines/supplements have been given over a period of time and how consistently.

Vaccines - I added a dedicated activity to track vaccines. Now you can track vaccines and I preloaded the most 50 common (per Claude Opus anyways) that you can quickly search and type in. This also includes encrypted document storage - mainly because I also host Sprout-Track as a service and I don't want to keep unencrypted PHI on my servers. You can also quickly export vaccine records (in excel format) to provide to day cares or anyone else you want/need to give the information to quickly.

Activity Tracking and Reports - Added support for logging activities like tummy time, outdoor/indoor time, and walks, along with reports for all of them.

Maintenance Page - This is mainly for me, but could be helpful for folks who self host outside of docker. It's called st-guardian, it's a lightweight node app that sits in front the main sprout-track app and triggers on server scripts for version tracking, updates, and supplies a health, uptime, and maintenance page. It is not active in docker, since you can just docker pull to update the app.

Persistent Breastfeed Status - So many people asked for this.. I should have finished this sooner. The breastfeed timer now persists and has an easy to use banner If you leave the app, the timer is still running. Small thing, big quality of life improvement for nursing parents.

Refresh Token for Authentication - Added a proper refresh token flow so sessions don't just die on you unexpectedly. Should make the experience feel a lot smoother. This impacts all authentication types. Admittedly this is a tad less secure, but a nice QoL improvement for folks. Also, if you have built a custom integration using the pins for auth, there is a mechanism to refresh the auth token in a rolling fashion so third party apps as long as they stay active, it will stay authorized.

Heatmap Overhaul - The log entry heatmap now has icons and is more streamlined. I also reworked the reports heatmap into a single, mobile-friendly view instead of the previous setup that was clunky on smaller screens.

Various QoL Fixes:

• Componentized the settings menu and allow regular users the ability to adjust push notifications and unit defaults

• Dark mode theming fixes for when a device is in dark mode but the app is set to light mode

• Diaper tracking enhancements to allow user to specify if they applied diaper cream

• Sleep location masking allowing users to hide sleep locations they don't use

• Regional decimal format fixes for folks that use commas - now sprout track will allow you to enter in commas but will convert them for data storage standardization

• Fixed a bug causing android keyboard to pop up during the login screen

• Added github actions to automate amdx64\arm builds (thanks Beadsworth)

• Fixed all of the missing UTC conversions in reports (also thank you Beadsworth)

What's on the roadmap

After the release I'm shifting focus to some quality of life work on the hosted side of Sprout Track. The homepage needs some love and I have tweaks planned for the family-manager page to make managing the app easier for multi-family setups. Not super relevant to the self-hosted crowd, but worth mentioning so you know the project isn't going quiet.

On the feature side, I want to hear from you. If there's something you need or something that's been bugging you, drop an issue on the repo or jump into the discussions. That's the best way to shape where things go next.

The numbers

The repo is sitting at 227 stars and 26 forks.

Repo:

Demo: ID: 01 | PIN: 111111

Wrapping up

Honestly, it feels good to be back in the zone after a rough couple months. Sometimes you just need the weather to turn and the momentum to build. I've been squashing bugs and building features like a madman this week.

If you have read this far I greatly appreciate you. As always, feedback is welcome. And if you're already running Sprout Track, thank you. This project keeps getting better because of the people using it. I'm super proud of how far this has come, and to celebrate I'm going to make the family homemade biscuits.

Hi everyone,

I built a self-hosted tool called NebulaPicker (v1.0.0) and thought it might be interesting for people here.

The idea is simple: take existing RSS feeds, apply filtering rules, and generate new curated RSS feeds.

I originally built it because many feeds contain a lot of content I'm not interested in. I wanted a way to filter items by keywords or rules and create cleaner feeds that I could subscribe to in my RSS reader, while keeping everything self-hosted — with no external services, API limits, or subscriptions.

✨ What it can do

• Add multiple RSS feeds

• Filter items based on rules and CRON jobs

• Generate new curated RSS feeds

• Combine multiple feeds into one

• Fully self-hosted

📦 Editions

There are currently two editions:

• Original Edition: Focused on generating filtered RSS feeds

• Content Extractor Edition: Same as the Original Edition, but adds integration with Wallabag to extract the full article content (useful when feeds only provide summaries)

⚙️ Tech stack

• Backend: FastAPI + PostgreSQL

• Frontend: Next.js

It runs easily with Docker Compose.

🔗 GitHub:

I'd love feedback or suggestions from the self-hosting community 🙂

I think im having a deadlock because ofthis loop:

My systemis an proxmox on an SDD and has an OpenMediaVault serving an 500gb HDD via NFS. In this HDD i have 3 container images, and 1 vm image, and the remaining space is used for data for the other containers that are hosted on the root ssd from proxmox.

But my system is freezing every 5 minutes. At the started i had to cut energy to restart, but now i mounted the NFS as:

nfs: OMV_xxxxx export /xxxxxx

path /mnt/pve/xxxxxxxx

server xxx.xxx.xxx.xxx

content snippets

options soft,intr,timeo=50,retrans=3,vers=4.2

prune-backups keep-all=1

This allows my server to survive for 5 minutes, then the io delay wins and the containers starts to freeze and restart, at least the host doesnt freeze now.

But i cant stop to think there must be something im doing wrong that can make this better.

One example of containers config:

arch: amd64

cores: 2

features: nesting=1,keyctl=1

hostname: navidrome

memory: 1024

mp1: /mnt/pve/OMV_xxxxxx1/Music,mp=/opt/navidrome/music

net0: name=eth0,bridge=vmbr0,hwaddr=xxxxxxxxxxxxx,ip=dhcp,type=veth

onboot: 1

ostype: debian

rootfs: OMV_xxxxx1:117/vm-117-disk-0.raw,size=4G startup:

order=20

swap: 512

tags: community-script;music

timezone: xxxxxx

unprivileged: 1

Im lost, tried everything i thought, so im asking for your help, thanks.

I’m going overseas for a month soon and I want a way to view all my shows and movies in our downtime there. Usually I’d leave my server on and then just Tailscale in but since we’re going away for so long I don’t feel so comfortable doing that especially being so far.

So my question is what’s the best client to watch everything downloaded on IOS? I’ve tried StreamyFin and JellyTV but they don’t work the best for offline viewing, any other suggestions?

AI Usage Note: Fireshare began and was originally designed with absolute no AI primarily because it was built before the big AI coding boom. However, I have used AI to assist in some feature development mainly transcoding*. I want to make it clear that while some parts have had AI help with, most of the app is AI free. I am also a professional developer with over 10 years of experience. Anything AI has helped with has been personally vetted by myself and has been thoroughly tested.*

It's been over 4 years since I first developed and shared Fireshare and a little over 2 years since I last posted here about it. In that time, the app has changed quite a bit and a lot of new features have been added.

Just yesterday Fireshare had one of it's biggest updates yet in that time, primarily a complete UI overhaul. Much of the interface has been updated and improved thanks to the contributions of a Fireshare community member over the last couple months.

On top of that, there have been a number of other features added to make the entire experience much better.

What is Fireshare?

Fireshare allows you to add your game clips or media and instantly generates unique links that never change that you can use to share those clips or medias with anyone. Even if you re-install Fireshare on a completely new system from scratch, as long as you have it pointed at the same clips and media the same links will be generated. Meaning you don't need to re-share your media if something happens to your server or even if you lose your Fireshare database.

Features

• Share videos through unique links

• Public / Private feeds (private is link only)

• Video transcoding with CPU or NVIDIA GPU (Your original files are never modified)

• Game-based organization with cover art

• Mobile Device Support Uploads (optional, can be restricted)

• Video view counting

• Open Graph metadata for rich link previews

• RSS feed for new public videos

• LDAP support

Screenshots

Check it out:

GitHub page:

I'm sitting here building a wiki for our pet-sitters and started adding things like circuit breakers and home automations so they'd have low level buttons to push if something goes off center.

I was taking a photo of my breaker box to recreate in tables and thought "Why can't do this in AR so my phone can show the information?"

Unifi does it with their network devices - it's pretty cool and definitely speeds up info gathering.

Anyone know of something like this? Thanks.

As the title says, I need an app that downloads Youtube videos that includes metadata like thumbnails, I've tried multiple like Seal, new pipe, ytdlnis etc

But they either don't include thumbnails (Seal, new pipe), or are very janky and fail to download at seemingly random (Ytdlnis)

So if anyone has any reliable alternatives that'd be really appreciated! Thanks in advance!

I've literally just discovered node-hp-scan-to and I can't believe for years ive been scanning documents using the HP app and saving them to random folders on my PC.

I've heard of Paperless for a while and finally took the leap, for the past week I've been manually scanning everything.

Last night I discovered node-hp-scan-to and it's transformed everything.

I can press scan on my 10 year old printer, it scans and auto uploads to Paperless, then Paperless sorts and tags the document. 👌

Hi,

I am using as my dashboard, as probably many of you, so i want to ask you.

1. The last release has been a while, do you still use the main project or have you created/moved to a fork?

2. How do you handle new functions/features, that you want in your dashboard?

   • Implement it yourself, just use existing/community widgets or use other alternatives

The origin reason i am asking, is because i am considering Kagi as my new search engine (still in testing phase). And i would like to have search suggestions and reverse image search in my glance search bar and only found this with the last release being 9 months ago.

3. Which brings me to my last Question, has someone maybe already integrated that?

Edit TLDR: Tracking the fallout from

Maybe a temporary thing due to likely brigading, but quite concerning:

()

Same with docs:

()

Additionally the subreddit has been set to private:

()

Edit: Also, the maintainer has deleted their reddit account:

()

The docker images still exist for now:

()

Wasn't a member, but looks like the discord invite link from inside the app is invalid:

()

Edit: adding archive links for posterity

The GitHub Org () has been renamed to 'Farewell101' () - ty ()

And now the renamed 'Farewell101' github org is also now down and 404ing per u/

Maintainer's github account it still up for now (), but he's actively deleting or privating other repos.

Edit: And, the main maintainer's github account is removed/renamed and 404ing now

Github account just renamed to () - you can follow the journey with `gh api user/24727006` also to follow the org `gh api orgs/62731045` -

Edit: Removed from the Proxmox Community Helper scripts, , -

I've tried everything from Nextcloud, ownCloud, OpenCloud, and Pydio Cells. But I still can't seem to find exactly what I'm looking for, and I'm wondering why it doesn't already exist. File storage is (in my opinion) one of the most helpful use cases for a self-hosting setup, but I don't understand why there isn't a self hosted cloud storage platform that:

• is cross-platform

• has relatively low resource usage

• uses a flat file structure, not S3-style blobs

• handles thumbnailing for more file types than just images

• has virtual filesystems OR selective sync for common operating systems

• has decent sharing or multi-user tools

• has good upload and download speeds

Essentially, I don't understand why a fully self-hostable and user-friendly Google Drive alternative doesn't exist. I'm a developer and I understand that it would obviously be a large undertaking to build, but it's a type of software that's very common for self-hosters and I don't see why a better option doesn't exist than the established players. NextCloud is too heavy/is trying to do too much, ownCloud is too corporate and a pain to maintain (plus the interface is crap), Pydio is good but the client apps (aside from the web app) are horrendous, Seafile is limited to blobs and is slightly proprietary, FileRun is paid, etc. Just seems to me like a major gap in the space. Anyone have any insight on why something like this doesn't exist?

I have a little problem, and perhaps someone of you has experienced this before.

Since years now, I use Headscale + Tailscale to build my VPN and it works really, very well. VPS acts as a frontend to my homelab services like Jellyfin and friends with a Caddy reverse proxy "pointing inwards". So all of that works really, really well. However, when I use SMB on my laptop to connect to my NAS to transfer files, the speed is complete garbage.

• Host at home: Radxa Rock 5 ITX

  • 2x 8TB HDD in RAID0 (mdadm)

  • 2x 10TB HDD in RAID0 (mdadm)

• Firewall at home: OPNSense on a Sophos SG330

  • 1GBit GPON as WAN - 600/300mbit/s confirmed.

• VPS: Hetzner Ampere Altra host, 4 VCPU and 8GB RAM

• My laptop, currently: Semi-public WiFi at a hospital, confirmed 100mbit/s download, 70mbit/s download.

I can establish a direct connection (tailscale status shows a direct connection homeward on my FW's WAN - so that works perfectly fine, UPnP doing it's thing) and if I access services directly, that also works nicely.

But if I transfer over SMB, I get perhaps 1MB per second, it often drops far lower. This is super, super annoying.

Is that an SMB limitation? Here is my config:

[global]
   workgroup = WORKGROUP
   log file = /var/log/samba/log.%m
   max log size = 1000
   logging = file
   panic action = /usr/share/samba/panic-action %d
   server role = standalone server
   obey pam restrictions = yes
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   pam password change = yes
   map to guest = bad user
   usershare allow guests = yes

[homes]
   comment = Home Directories
   browseable = no
   read only = yes
   create mask = 0700
   directory mask = 0700
   valid users = %S

[printers]
   comment = All Printers
   browseable = no
   path = /var/tmp
   printable = yes
   guest ok = no
   read only = yes
   create mask = 0700

[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no
   write list = root, @users

## shares
[bunker]
comment = Bunker
path = /mnt/bunker
valid users = @users, root
browsable = yes
read only = no
create mask = 0644
directory mask = 0755
#force user = root
#force group = sharedaccess
hide unreadable = yes
hide dot files = no

[stash]
comment = Stash Share
path = /mnt/stash
valid users = @users, root
browsable = yes
read only = no
create mask = 0644
directory mask = 0755
#force user = root
#force group = sharedaccess
hide unreadable = yes
hide dot files = no

This should be a very straight forward configuration but I feel like something is missing - those speeds are...quite atrocious. xD

Any idea?

Hey, still pretty new to Proxmox and trying to figure out storage best practices.

My setup: two Proxmox nodes. The main one runs all my Docker services in a VM (Immich, Nextcloud AIO, n8n etc.) on a single 1TB SSD. For backups I have three layers, a dedicated backup SSD on the same node doing daily snapshots, PBS running as an LXC with its own mounted SSD and a Synology NAS as a third offsite copy. Slowly moving away from Synology though and replacing Synology Drive with Nextcloud via WebDAV for file sync.

Right now everything lives on the root disk of my main VM, app and data all mixed together:

VM root disk (350G)
/srv/docker/immich/library <- photos
/srv/docker/immich/postgres <- database

The cleaner approach I keep reading about:

VM root disk(20G) <- OS + app only
VM data disk (300G) <- mounted at /mnt/data, all actual data here

I did this for Nextcloud since it was a fresh install. But for existing services I never bothered.

My main question is around recovery scenarios. If the app or OS breaks, with a separate data disk I just rebuild root and remount, data untouched. But if the whole server goes down I would need to recreate the VM, add the data disk back and set up the mount point again anyway. That part I'm not fully confident with yet since I don't have all the commands memorized.

So three things I'm trying to figure out:

Do you always create a separate data disk even when everything ends up on the same physical SSD? Is there a rule of thumb for when it's actually worth it? And for existing services already running, do you migrate them or just leave it and rely on backups?

Thanks

ive seen a lot of people use proxmox but im not sure if I need it.
Ive got an old desktop pc (debian) and a raspi 4( raspios), both are running portainer with all kinds of containers. What would be the benefits of using proxmox?

Let me start up by saying I’m not the best at typing due to the fact I am visually impaired so I use speech to text. Sorry for grammar mistakes.

I am looking for a self hosted version of the apps mentioned above my goal is to be able to just drag files from my desktop through a Web EY and be able to deploy them and manage them directly. Additionally, if there was IDE to make small changes without having to download the code or push to get hub that would be I do

The world has changed so much in the last year, and AI is so good that it can really replace humans. I don't remember the last time I actually wrote pure code myself.

Open source has always been a community: people write code, they learn, and they do stuff together.
Today, everything I get is AI - mostly, unchecked AI.

People contribute stuff even without checking, without knowing the architecture of what they built.

You get 100% more contribution, 100% more slop, and a lot of spam.

As a single person, it's very hard to maintain something like.

Postiz is not going to change; it's going to be 100% open-source like always, AGPL-3, everything that is inside the commercial version is 1:1 with the open-source. same as it was in the last two years, and I don't see it ever changing.

Code will always remain free, and I encourage people also to open issues (maybe even just provide the "prompt" for the issue)

But I no longer feel I can maintain PRs.
I have so much respect for those people who do!

I know you hate me right now, it goes against open-source, but I literally can't do it anymore.

Hello everyone,

For the past few years I operated a small SHA-256 ASIC mining setup. The infrastructure was designed to run continuously with relatively high power loads.

The setup includes:

• ~30–40 kW electrical capacity

• Dedicated electrical distribution panel with multiple circuits

• Industrial airflow ventilation and heat extraction

• Air conditioning installed

• Fiber internet connection (1 Gbps)

Since I am transitioning away from mining, I am now exploring what other types of projects could make use of this kind of infrastructure.

Some ideas I’ve been considering:

• GPU compute nodes

• AI / machine learning workloads

• Rendering clusters

• Blockchain nodes

• Self-hosting environments

I’m curious what people in this community would run on a setup like this.

If anyone has experience repurposing mining infrastructure for other computing workloads, I would love to hear your thoughts.