Which self-hosted read-it-later application are you using and why?

Linkwarden? Karakeep? Readeck? Something else?

Bonus points for good mobile apps (Android and iOS).
#Pocket #ReadItLater #SelfHosting #HomeLab @homelab@fedigroups.social @homelab@selfhosted.forum

I went one step further and upgraded to PostgreSQL 19 beta 2 #selfhosting #homelab #postgresql

Hey Mastodonian #selfhosting #homelab crowd. Any suggestions for a small inexpensive UPS for my little collection of ewaste servers. Nothing fancy, but I've just had bad experiences with Amazon basics electronics.

The Kami that inhabited my old eBay special have departed in search of a spot less dusty than behind the credenza.

#XMPP Community

XMPP talk at #FOSSY 2026 in about an hour: When #Data Gets Heavy: Voice and Video for Large Groups by Christopher Vollick

https://xmpp.org/2026/07/xmpp-at-fossy-2026/

#jabber #chat #selfhosting #rtc #opensource #federation #messaging #ubc #Vancouver #Canada

Alt...

The XMPP Community Banner with the XMPP Logo and a triangle with three encircled colored person icons next to it.

#XMPP Community

XMPP talk at #FOSSY 2026 in about an hour: Adventures in Onboarding: Episode V - The #Server Goes Down by Gideon Mayhak

https://xmpp.org/2026/07/xmpp-at-fossy-2026/

#jabber #chat #selfhosting #rtc #opensource #federation #messaging #ubc #Vancouver #Canada

Alt...

The XMPP Community Banner with the XMPP Logo and a triangle with three encircled colored person icons next to it.

#selfhosting
learning #gitea to delete #github

#XMPP Community

XMPP talk at #FOSSY 2026 in about an hour: “Beautiful XMPP Testing” revisited – How to Overcome the Mind-Body Duality by Staring at #XML by Phillip Davis

https://xmpp.org/2026/07/xmpp-at-fossy-2026/

#jabber #chat #selfhosting #rtc #opensource #federation #messaging #ubc #Vancouver #Canada

Alt...

The XMPP Community Banner with the XMPP Logo and a triangle with three encircled colored person icons next to it.

Linux ist geblieben.
Was im Mai als Versuch mit CachyOS begann, ist heute mein Alltag: OBS, Stream Deck, Drucker, Scanner, Gaming – fast alles läuft. Dazu eigene Cloud statt Google & Microsoft.

Mein Erfahrungsbericht über Linux, Selbsthosting und Datenhoheit:
https://einfachbernie.de/blog/linux-ist-geblieben/

#Linux #CachyOS #OpenSource #Selfhosting #Datenhoheit #Datenschutz #LinuxDesktop #Nextcloud #OBSStudio #DigitalSovereignty

Alt...

Comicartiges Social-Media-Bild: Ein Mann mit verschränkten Armen steht selbstbewusst zwischen zwei Welten. Links sieht man eine dunkle, mit Ketten, Kabeln und Windows-Symbolen dargestellte, geschlossene Computerwelt. Rechts befindet sich eine helle, grüne Linux-Welt mit Tux auf dem Monitor, Server, Pflanzen und Symbolen für Selbsthosting und Offenheit. Groß im Vordergrund steht: „Linux ist geblieben – Meine Reise zu CachyOS, Selbsthosting & Datenhoheit“.

☀️ Hitze, 🛋️ Wochenende, 🥱 Langeweile – was macht man da?

Genau: Sinnfreie Statusseiten mit eigenem Design bauen. 😄

Da sich unser tolles Werkzeug #UptimeKuma ja so *hervorragend* designen lässt (Ja! Das war dezente Kritik. Dennoch: Danke für dieses tolle Stück Software! ;) - musste ich für die Optik mit der API ran.

Für zwei von drei Welten gibt es nun kleine eigene Statusseiten die zwar schon bestanden und auch weiterhin bleiben, aber eben im eigenem Kuma-Design.
Beide greifen auf die API ihres jeweiligen Origins zu:

🌐 #AWsite – mit eigener Subdomain:
https://status.weindl.biz

🌐 #FEROX – bekommt einen Pfad:
https://ferox.cc/status

Einzig #AWiT bleibt vorerst beim Kuma-Standarddesign. AWiT bekommt aber in absehbarer Zeit ein komplettes Redesign, sobald die Vereinsgründung abgeschlossen ist.

Nun aber: Weil ich heute durch einen anderen Post auf den Geschmack gekommen bin, heißt es jetzt #Couchen und #DemolitionMan in OV schauen. 📺

Sanfte Grüße 🌙 und wer Probleme mit seinem Bidet hat -> die 3 Muscheln benutzen!

#SelfHosting #OpenSource #StatusPage #Webdesign #Mastodon #Fediverse #Uptime #Homelab #Linux #Die3Muscheln

Upgraded all my PostgreSQL 17 containers to 18 this morning #selfhosting #homelab #postgresql

I've been heavily poking at littleFedi by @stefano and quite excited about it.

I wrote about it in another Blaugust attempt: Big hopes for littleFedi. Also available on my test account ​@shom@littleone.littlefedi.social's post/blog.

#littleFedi #Blaugust #Fediverse #Selfhosting

Big hopes for littleFedi

The Fediverse is exciting, I've formed genuine connections with interesting people. GoToSocial got me hosting my own presence. And I hope littleFedi is what gets to hosting a community.

Thoughts/context on Fediverse {#thoughts-context-on-fediverse}

The federated universe (Fediverse) is awesome: different applications, networks, sub-cultures all able to interact with each other via a rather lightweight protocol, ActivityPub. It's this very lightweightness is interesting because not all the servers are architected to be lightweight because they are architected to scale. There's a lot of debate about the role of centralization, discoverability, "flagship" instances this post isn't that. BUT, decentralization is a big selling point of ActivityPub and being able to run many small instances on low power hardware democratizes participation. I'm all about that, GoToSocial fits the bill perfectly and I have been very happy hosting it and the team is doing great and thoughtful work.

Why am I excited about littleFedi!? {#why-am-i-excited-about-littlefedi}

Well maybe it's a better idea to talk about what is littleFedi is?! I'll let Stefano talk about that: littleFedi: a Fediverse Server That Doesn't Need a Data Centre. That blog is actually served directly by littlFedi and the post was created as any other regular post AND the blog is statically served AND a regular post can be retroactively turned into a blog post AND it supported threaded comments (since it also remains a regular ActivityPub post). littleFedi has a load of other great features as well and I don't want to take away from that but this is definitely what sets it apart from GoToSocial.

Blogging vs Microblogging {#blogging-vs-microblogging}

Blogging and maintaining a separate social feed is difficult. The ability to do it all in one platform and also convert existing posts into blog posts if they need to be persisted as a "body of work" is great for folks who don't want to mess around with tech and just want to share with their community. Also it's cognitively easier to write a series of posts instead of sitting down to write a blog post and being able to convert it later is great.

What's next? {#what-s-next}

I'm on the test instance and have been doing some testing and providing feedback. Stefano is both very prompt and gracious in receiving feedback and fixing issues. The project will be released as a MIT licensed self-hostable application and I plan on trialing a niche community hub (more on that later) using littleFedi. I wish the project well and will be following it closely and eagerly.

This was originally posted on my blog.

Fediverse #Selfhosting #Blaugust #littleFedi

Alt...

"Screenshot of littleFedi default teal and black theme showing a social post with nested comments and likes and boosts metadata

Alt...

Same post as a static blog" alt="The same content has been rendered into a distinct blog interface and the comments from the fedi post are displayed as nested blog comments.

#XMPP Community

XMPP talk at #FOSSY 2026 in about an hour: Encrypted messaging #interoperability with hybrid bridges in XMPP by Marvin W.

https://xmpp.org/2026/07/xmpp-at-fossy-2026/

#jabber #chat #selfhosting #rtc #opensource #decentralization #federation #messaging #ubc #University #Vancouver #Canada

Alt...

The XMPP Community Banner with the XMPP Logo and a triangle with three encircled colored person icons next to it.

#XMPP Community

XMPP talk at #FOSSY 2026 in about an hour: Beyond Chat: Delivering mini “apps” with great #UI by Stephen Paul Weber

https://xmpp.org/2026/07/xmpp-at-fossy-2026/

#jabber #chat #selfhosting #rtc #opensource #decentralization #federation #messaging #ubc #University #Vancouver #Canada

Alt...

The XMPP Community Banner with the XMPP Logo and a triangle with three encircled colored person icons next to it.

New instance, new #introduction! Following the announcement of toot.community's upcoming closure, I took the matter in my own hands and deployed very own GoToSocial instance.

I am a #developer, #photographer and #tinkerer from Paris, France; I mostly post about  #technology and its impact on society (would you believe how anxious I am rn?), my #SelfHosting adventures and whatever I find interesting or funny. I also have a blog where I post things that do not fit in a toot or would be of public interest; you can find a few of my recent posts in my profile.

See you around!

Stefano Marinelli (creator of the excellent FediMeteo) is working on a new type of lightweight Fediverse server called "littleFedi".

It's still in its early days and under development, but the first test server is now open and Stefano is gathering feedback about it. More info in the quoted post at https://littleone.littlefedi.social/@stefano/a105002b-5749-437d-a3cd-da54dfa70395 and more detail at https://littleone.littlefedi.social/@stefano/4252ae6f-b949-42f8-a021-fd2b698f8b37

You can follow Stefano at @stefano@bsd.cafe or on his littleFedi account at @stefano@littleone.littlefedi.social

#LittleFedi #Fediverse #ActivityPub #SelfHosting

Michael Boelen boosted

Stefano Marinelli - littleFedi » 🌐 2026-08-05
@stefano@littleone.littlefedi.social

Hi everyone, I'm Stefano

Also known as the BSD Cafe and illumos Cafe barista - @stefano@bsd.cafe and @stefano@illumos.cafe

This is the first post from littleOne (littleone.littlefedi.social), the first littleFedi instance open to outside users.

littleFedi is a new ActivityPub server, still in active development, written in Go and shipped as a single binary. It speaks standard ActivityPub, so it federates normally with Mastodon, snac, GoToSocial, Akkoma and the rest of the fediverse, and it exposes a Mastodon-compatible API, so most existing apps already work with it.

A few things about it that aren't the usual fediverse defaults:

• Catch-up instead of an algorithm. Timelines stay chronological, full stop. There's a separate /catchup page, visited on demand, that ranks what you missed using only signals this instance already has locally - who you follow boosted it, replies and favourites delivered here, hashtags you follow. No external popularity data comes in, nothing about what you read is tracked. It answers "what did I miss" without turning into a feed that decides for you.

• Static blogging built in. Any post can be marked as a blog post and gets published as a plain static page under /@username/blog/, with its own permalink, Atom feed, and no JavaScript or database hit per view, while still being a normal federated post underneath. A proper home for longer writing that doesn't need to compete with a timeline.

• Self-expiring posts. Any post can be given a timer and auto-delete on its own.

• Bubble timeline. A middle ground between local and federated: a timeline scoped to a set of instances you've chosen to group together, not just your own or everything.

• littleMesh. A way to federate without a public domain, certificate, or open port at all - meant for something like a Raspberry Pi behind NAT. Instances get an address derived from an Ed25519 key pair and reach each other through pinned relays that never see plaintext.

• No trends, no suggestions. These are intentionally left empty. Nothing here is trying to surface "popular" content or keep anyone scrolling longer.

• Security defaults taken seriously. Signed federation (HTTP Signatures), optional Object Integrity Proofs, TOTP MFA, audit logs, and full account export, migration and deletion if you ever want your data to live somewhere else.

This instance is here to test all of that with real accounts, not just a small group ones'. In the next few days I'll be reaching out to everyone who already told me they were interested, to set the first accounts up - an invite is coming. If you'd rather just follow along and see how it goes, that works too.

It's a test instance, so expect the occasional rough edge. If something breaks or feels wrong, tell me - that's exactly what this phase is for.

#littleFedi #littleOne #Fediverse

Weekly #26 est en ligne.

* Coldcard : mise à jour et remplacement des seeds concernées
* ChainDrop : 444 paquets et 1 381 versions npm compromis
* Proxmox VE 9.2 sur ARM64
* Home Assistant 2026.8
* FFmpeg 9.0

https://cryptolab.re/posts/2026/weekly-26/

#SelfHosting #Cybersécurité #OpenSource

Das Team von Anoxinon hat ganze Arbeit geleistet und den Mastodon Server wieder in einen funktionsfähigen Zustand gebracht. Lange hat es gedauert bis der ganze Queue abgearbeitet wurde, doch nun ist es so weit. Ich freue mich euch wieder von hier aus mit frischen News zu #Linux #Selfhosting #Android und mehr zu versorgen. Folgt mir auch auf PeerTube wenn ihr direkt über neue Videos von mir informiert werden möchtet: https://tube.sp-codes.de/c/tuxwiz/videos

#freesoftware #linuxmobile #peertube

Mein Sohn hat auf seinem Handy immer mehr wichtige Bilder... Google Fotos speicher Läuft über...

Zeit für #immich Hab bereits seit Monaten bei mir alles umgestellt... Nun Multi User Platform 😁

Früher: Googlen wie das geht - über web Interface Durchquälerei - Frust vorprogrammiert

Heute: eine Nachricht an mein #hermes KI Agent - der macht alles über immich API - Sendet mir ne txt mit allen nötigen Infos - Sohn richtet es ein - 5 Minuten läuft sein Backup

Und ich "weiß" wie das umgesetzt ist:

Technische Umsetzung der Trennung:

Immich isoliert jeden Benutzer sowohl in der Datenbank als auch im Dateisystem komplett:

- Dateisystem: Jeder User bekommt ein eigenes Verzeichnis nach seiner UUID. Jakobs Daten liegen unter `/mnt/immich-data/upload/upload/a5a86a77-.../`, deine unter `/mnt/immich-data/upload/upload/6f5b4988-.../`. Das gilt für alle drei Storage-Typen: Original-Uploads, Thumbnails und encoded Videos. Keine Überschneidung möglich.

- Datenbank: Jeder Asset-Eintrag hat einen `ownerId` Foreign Key auf den User. Immich filtert bei jeder Abfrage nach dem eingeloggten User — Jakob sieht nur seine eigenen Fotos, du nur deine.

- Backup: Das Borg-Backup sichert `/mnt/immich-data` komplett, also beide User-Bereiche.

Aktuelle Verteilung:
- Lars: 33.364 Assets, ~254 GB
- Jakob: 8 Assets, ~1,7 GB
- Disk: 332 GB von 697 GB belegt (48%)

Alles sauber getrennt. Jakob hat seinen eigenen Bereich, kann deine Fotos nicht sehen und umgekehrt. Falls du später teilen wollt, kann Immich das über **Shared Albums** — aber das müsstet ihr aktiv anlegen.

#vibeops #selfhosting #linux #sysadmin

One of my repositories on my self-hosted forgejo instance is being hit by Anthropic crawlers. They have an infinite loop to download a tar archive of the repository leading to somewhat like 200GB of archives. My backup process struggled to send snapshots remotely on my 6 Mbps upload line. I've made the repository private. And now I'm considering putting Anubis in front of the service.

#forgejo #anubis #ai #anthropic #selfhosting #homelab

Bin seit 3 Jahren Vorstand vom Förderverein Grundschule Betzenberg eV #Ehrenamt #Ehrenmann :P

Wir organisieren immer kleinere Aktionen in der Schule - wiederkehrende Abläufe

4 Personen im Vorstand (Kassenwart + Schriftführer)

IT-Situation:
- Homepage bei Schulträger mit gehostet (Wordpress 🐌 )
- Jeder hat sein Daten bei sich liegen

Ich hab Kudelmudel an Daten wo ich nie die richtige Datei finde

Viel Reibung in den Abläufen - unstrukturierte Arbeitsweisen(letztes Protkoll von Sitzung liegt in WhatsApp)

Hand hoch wer es kennt ✋

Jetzt im Urlaub und am Vorbereiten der Einschulungsfeier - mit zu viel #resttoken am ende der Woche - ist es passiert...

Ich hab das was ich die letzten Monate auf Arbeit gelernt habe auf mich selbst angewendet...

Lets do vibeops in förderverein

1. Schritt - ionos vps s gemietet
2. Schritt - #hermes drauf installiert
3. Schritt - #glm52 zur party eingeladen
4. Schritt - Homepage gebaut
5. Schritt - mit #syncthing / #filebrowser eine einfachen gemeinsamen Storage angelegt
6. Schritt - hermes mit cronjobs zur selbstverwaltung eingestellt (update / watchdog)
7. Schritt - aus meinem Datenmüll aus verschiedenen Dateien eine neue parallel Workflow basierte Ordnerstruktur aufgebaut (na klar mit hermes) - kann man auch noch als WebApp weiter spinnen

https://fvgs-betzenberg.de/

Ein bissel Fehler behoben und das Mitglied werden PDF interaktiv erstellen lassen

Arbeitszeit 3h

Wenn man das jetzt weiter spinnt können wir uns da jetzt unsere mitgliederdatenbank anlegen - vllt irgendwann die buchhaltung darüber laufen lassen

Monatlich 1€ für VPS - 0,50€ für die URL

jetzt müssen die anderen Vorstände sich das mal anschauen

krass was mal wieder aus eine impuls passieren kann - früher irgendwie joomla augesetzt und dann die lust verloren - jetzt booooooom

#selfhosting #linux #sysadmin

🚨LIVE NOW!🚨 DevOps/SRE Instructor Livestream

On this lovely Thursday, let's chat about #Linux #SystemAdministration, #SelfHosting, or any other topic in the #DevOps and #SRE space you're interested in!

Owncast: https://live.monospacementor.com/

MediaGoblin is a decentralized platform for hosting multiple media types such as audio, photo, and video.

Google YouTube, Flickr, and SoundCloud alternative.

SUPPORTS

Built-in comment system.
Creating a custom theme.
Transcode/convert files.
Self-hosting.

Website: https://mediagoblin.org
Mastodon: @mediagoblin

#MediaGoblin #Multimedia #SelfHosting #FreeSoftware #FSF #GNU #deGoogle #Decentralized #Privacy #SelfHost #YouTube #Flickr #SoundCloud #FOSS #FLOSS #Audio #Video #Photo #Photography

Alt...

MediaGoblin logo.

#XMPP Community

XMPP at #FOSSY 2026 from 6th to 9th August 2026, #University of British Columbia, #Vancouver, #Canada. Seven presentations take place on Sat & Sun!

https://xmpp.org/2026/07/xmpp-at-fossy-2026/

#jabber #chat #interoperability #selfhosting #rtc #opensource #decentralization #federation #messaging #ubc

Alt...

The XMPP Community Banner with the XMPP Logo and a triangle with three encircled colored person icons next to it.

@gamingonlinux Lost interest with computers, honestly. Fuck Linux, fuck selfhosting, fuck all that crap. Rich normies who discovered Linux is a thing are flaunting their selfhosting crap and it ain't helping.

I'm more into batteries and solar panels these days. I'm just earning some money so I can do more with that hobby.

#batteries #electronics #pcgaming #gaming #ram #linux #selfhosting

The XMPP Newsletter for July 2026 is out!

Read about the latest updates in the #XMPP universe and our #standards!

https://xmpp.org/2026/08/the-xmpp-newsletter-july-2026/

Enjoy reading! ☕

#jabber #chat #interoperability #SelfHosting #rtc #opensource #decentralization #federation #messaging #newsletter #xep

Alt...

The XMPP Newsletter banner with the XMPP logo and a letter symbol on the side.

🚨LIVE NOW!🚨 DevOps/SRE Instructor Livestream

On this lovely Wednesday, let's chat about #Linux #SystemAdministration, #SelfHosting, or any other topic in the #DevOps and #SRE space you're interested in!

Owncast: https://live.monospacementor.com/

If you're into photography, there is a free open Flickr-style photography platform which you can host yourself called Vernissage. It also has Fediverse compatibility so people can follow Vernissage accounts from Mastodon, Pixelfed etc. More info at:

🌱 https://joinvernissage.org

You can follow at:

🌱 @vernissage

For techy people who want to install their own Vernissage manually, docs are at:

🌱 https://docs.joinvernissage.org/documentation/vernissageserver

#SelfHosting #Fediverse #ActivityPub #Flickr #Alternatives #Photography

Come join me and @Gina in Luxembourg this October!

#OSCL26 (Open Source Conference Luxembourg) has a brand new track devoted to “Decentralized Technologies for Digital Sovereignty”:

🔗: https://conference.opensource.lu

We are looking for speakers interested in discussing these topics:

• Federated technologies in the public sector
• Decentralized platforms for video, chat, communications, code, etc.
• Fediverse successes and challenges
• Self-hosted solutions for individuals and institutions
• Interoperability for resilience

Apply here:

🔗: https://pretalx.com/open-source-conference-luxembourg-2026/cfp

The conference takes place on Wednesday October 7th in Belval, Luxembourg.

Please share! 🚀​

#Fediverse #FediAdvocacy #conferences #OpenSource #FOSS #FLOSS #TheFutureIsFederated #selfhosting #interoperability #DigitalSovereignty #activism

I finally spent the afternoon to migrate my Docker setup from "Docker in a VM" to "Docker in TrueNAS". Apart from a single container that fails to start and a false start copying data from the VM, it has been pretty eventless, thanks to some exploratory work yesterday.
#Docker #SelfHosting #TrueNAS

Finally migrated my gitea instance to forgejo. Was simple enough and took like 5 minutes to accomplish.

It's basically just modify the docker compose file to reference the correct forgejo version to replace gitea and bring it up. This is an internal home lab system so no 2fa/oauth or whatever to reverse engineer as part of the process.

<doing proper fs and db backups beforehand are implied in these statements>

#gitea #forgejo #homeLab #Selfhosted #SelfHosting

https://blog.haschek.at/2026/you-should-selfhost-your-mail.html

#selfHosting #email

Some pictures of my solar-powered web server.

More work to be done on optimising page sizes when I have some time

https://www.uplode.org/posts/inhabitants/webserver/

#solar
#selfhosted
#selfhosting
#energy
#permacomputing
#sustainability
#computing
#lowtech

Hab nur ich die Probleme, oder hat die #Hetzner #Storagebox gerade etwas mit Verbindungsabbrüchen generell zu kämpfen?

#selfhosting

I created #GeoPulse accounts for each family member and migrated all location history data from the #Owntracks recorder. The last bit was to switch #HomeAssistant location reporting to it.

I'm not sure we will use GeoPulse often, but it's nice to know we have #SelfHosted location history.

Can't wait to integrate it with #Immich, once we move there.

#homelab #selfhost #selfHosting #LocationHistory #GPS

Alt...

A list of three profiles with funny profile pictures. Two names are censored, but the third one says "Yehor". There is a date range picker above the list showing the date range from 27.08.2026 to 03.08.2026. There is also a count next to each profile displaying the numbers 37, 20, and 36.

Why do I run FreeBSD for my home servers // Mathieu Aumont

https://aumont.fr/posts/FreeBSD-Home-Server/

#freebsd #bsd #selfhosting

Here it is 🎉
One of three new Wi-Fi access points based on #NixOS, deployable via #colmena and monitored using #Beszel.

The case design might still need a little adjustment.

#diy #selfhosting #raspberrypi

Alt...

A small aluminum box with a taped WiFi adapter on it

Foto- und Video-Verwaltungstool Immich liegt in v3.1.0 vor
https://linuxnews.de/foto-und-video-verwaltungstool-immich-liegt-in-v3-1-0-vor/ #immich #selfhosting #linux #linuxnews

My homelab has been upgraded to 11.0 🎉

#NetBSD #NetBSD11 #homelab #selfhosting #RUNBSD

Alt...

A screenshot of a NetBSD 11.0 system.

Mein Beitrag zum #diday heute:

Ich habe mir neulich endlich eine eigene Fedi-Instanz aufgesetzt, auf einem Raspberry Pi.

Das ist für mich eher eine Übung, um mehr über #selfhosting zu lernen. Aber es ist schon ein witziges Gefühl, auf den klitzekleinen Server zu blicken, über den meine Posts laufen.

https://zero.slothrop.org/tyrone/p/1785100151.836057

Wallabag is a free open source article-saving platform, similar to Pocket. It lets you save articles from around the internet to read later. More info at:

🌱 https://wallabag.org

You can follow at:

🌱 @wallabag

You can self-host your own Wallabag:

🌱 https://wallabag.org/self-hosting

If you don't want to self-host, you can sign up for an account on their paid service:

🌱 https://wallabag.it

There are Wallabag apps for all major reading platforms.

#SelfHosting #FOSS #Pocket #Alternatives

Anyone else DIY monitor the air quality in their living space with a raspberry Pi and get mobile notifications about status?

Just me?

#prometheus #airquality #RPI #pushover #SelfHosting

Alt...

TIME SENSITIVE noW [RESOLVED] Air Quality (PM... roci has been unhealthy for more than 5 minutes. roci Unhealthy (150+)

Question for those who #selfhost their email servers - has anyone migrated from #postfix to #openSMTPD?

I've been running Postfix for more than a decade on the primary MX, but it frankly feels overkill for a relatively simple multi-domain setup for essentially just hosting my family's email.

I'm already running openSMTPD on #OpenBSD on my secondary, so I've got some limited experience with it.

Nothing against Postfix, it just feels that with my setup I'm using an 18 wheeler to transport a case of beer...

#selfHosting #email

If you want to create your own Fediverse server, there are three ways you can do it:

🌱 Managed hosting is by far the easiest, your hosting company does all the techy stuff for you behind the scenes (installation, maintenance, fixes etc). See this guide for more info: https://growyourown.services/making-your-own-mastodon-server-in-10-steps

🌱 Medium-difficulty option is installing a distro like @yunohost on a VPS or PC. More info at https://yunohost.org

🌱 Most difficult is manual installation using a platform's documentation.

#SelfHosting

LiberaForms is free open source software for creating and managing online forms. More info at:

🌱 https://www.liberaforms.org

You can follow their account at:

🌱 @liberaforms

LiberaForms can be self-hosted manually, or you can use the paid managed hosting service provided by the developers.

If you don't want to make your own server, you can sign up for an account on the developers' own server.

#SelfHosting #CommunityHosting #FOSS #Forms

AdminForge is a German-language website all about self-hosting free open online services:

🌱 https://adminforge.de (in German)

You can follow them at:

🌱 @adminforge (in German)

They also provide a number of libre online services for people who don't want to self-host them.

#SelfHosting #CommunityHosting #Deutsch

LinkStack is a free open source self-hostable alternative to Linktree, which lets you manage and share your links on an easy-to-use landing page. You can find out more at:

🌱 https://linkstack.org
🌱 https://linkstack.org/get-started/ (manual installation)
🌱 https://linkstack.org/hosted/ (managed hosting)

You can follow them on here at:

🌱 @linkstack

If you don't want to self-host, there are existing servers you can sign up on instead:

🌱 https://linkstack.org/instances

#FOSS #SelfHosting #LinkTree #Alternatives

Migration von Certbot zu Lego

Ich glaube jeder der selber Dienste hosted kenn das Problem. Da will man nur mal eben eine kleine Änderung auf dem VPS oder auf dem Server im Homelab machen, und dann stolpert man über dieses kleine nervige Problem was man einfach seit Monaten ignoriert hat.

das ist mir heute mal wieder passiert. Eigentlich wollte ich nur eine neue Webapp ausprobieren, aber dafür brauch ich nun einmal ein TLS Zertifikat. Eigentlich kein Problem, aber als ich in mein OVH Dashboard schaue um die Domain anzulegen viel mir auf das der Certbot auf meinem Debian 12 Server immer noch an einen doofen Bug leidet durch den die DNS-01 Acme Challenges nicht mehr richtig gelöscht weren, nachdem die Zertifikate darüber validiert hat: https://github.com/certbot/certbot/issues/10492

Ja ich weiß: das ist an sich nur ein kosmetisches Problem. Aber es ist nicht das einzige Problem was ich mit Certbot in den vergangenen Monaten hatte. Erst im März habe ich gemerkt das das OVH DNS Addon in Trixie einfach nicht mehr vorhanden ist.

Um das Problem zu lösen könnte ich einfach Certbot via Docker installieren, so wie ich es auf meiner Debian Trixie Maschine getan habe. Leider würde das aber zu einem anderen Problem führen. Eine meiner Domains lasse ich inzwischen von einem coolen deutschen DNS Anbieter namens desec.io verwalten. Leider gibt es keinen offizielles Docker Image mit deren DNS-01 Certbot Plugin. Ich müsste also ein eigenes Image erstellen und auch Pflegen. Da hab ich jetzt nicht wirklich bock drauf.

Also was mach ich jetzt. Mit einer nativen Certbot Installation pypi, venv etc. will ich mich echt nicht rumschlagen. Gang ehrlich dieses ganzen Python universum war nie wirklich intuitiv für mich. Im März hatte mir jemand im Fediverse zu Lego einem Acme Client der in Go geschrieben wurde geraten. Das Programm unterstützt ca. 200 DNS-01 Challanges verschiedener DNS Provider und kommt als eine statische Go Binary. Das find ich schon extrem cool, also einfach runterladen, entpacken, ausführbar machen und man kann loslegen. Vielleicht schreib ich mir in Zukunft mal ein kleines Script für solche updates.

Ich wollte unter Lego direkt mit der Config Datei arbeiten, damit die automatisierungen hinterher einfacher von der Hand gehen. Auf den ersten Blick schien das recht aber wenn man sich die Config Datei anschaut dann versteht man recht schnell was man davon braucht und was nicht.

In meinem Fall muss ich zwei DNS Provider mit DNS-01 verifikation anlegen und einen mit einer http-01 webroot challenge. Tja Strato hat immer noch keine DNS API für sowas. Das alles hat den Vorteil das der Acme Client nie an Port 80 etc. ran muss und der Webserver so die ganze Zeit online bleibt.

Das ganze zum laufen zu kriegen war recht eifnach. Lego binary von Github downloaden, entpacken, an einen passenden Ort verschieben (ich nehme /usr/local/sbin) und via chmod +x ausfürhbar machen. Danach habe ich den Ordner /etc/lego erstellt wo dann die ganzen Config Dateien und Zertifikate landen.

Nun kann man sich direkt einen Account (eigentlich einen privaten Schlüssel) anlegen, ich habe als Account Namen einfach meine Mail Adresse genommen:

lego accounts register --email johndoe@example.com -a --path /etc/lego

Wie es weiter geht hängt ein bisschen davon ab wie man seine Domian gegenüber Lets Encrypt verifiziert. Hier ein Beispiel wie ich das bei meinen Domains mache die bei OVH liegen und bei denen ich DNS-01 nutzen. Ich arbeite mit .env- Files um die Zugangsdaten und Einstellungen der jeweiligen DNS Provider zu speichern. Also erstelle ich folgende Datei /etc/lego/.env.ovh und trage dort die im Lego Wiki für OVH aufgeführten Parameter ein, bei mir sind das Application Key, Application Secret, Consumer Key und der Endpoint: https://go-acme.github.io/lego/dns/ovh/index.html

Nun kann man sein erstes Zertifikat erstellen:

lego run --email johndoe@example.com --path /etc/lego -a --dns ovh -d test.example.ovh --env-file /etc/lego/.env.ovh

Lego legt diese dann in /etc/lego/certificates ab.

Da ich jedoch nicht ewig lange Befehle in Cronjobs etc packen möchte bietet sich die Arbeit mit der Lego Config Datei an, sie macht die automatisierung des Vorgangs viel leichter. Dort fasst man Accounts, Challanges und die verwalteten Domains zusammen. Diese lego.yaml erstelle ich in /etc/lego. Meine sieht ungefähr so aus:

storage: /etc/lego/
accounts:
  johndoe@example.com:
    email: johndoe@example.com
    acceptsTermsOfService: true
challenges:
  desec:
    dns:
      provider: desec
      envFile: /etc/lego/.env.desec
      resolvers:
        - 1.1.1.1:53
  ovh:
    dns:
      provider: ovh
      envFile: /etc/lego/.env.ovh
      resolvers:
        - 1.1.1.1:53
  webroot:
    http:
     webroot: /var/www/lego # Muss im webserver konfiguriert sein
certificates:
  test.example.desec: #Kann irgendein Name sein, wird als Dateiname genutzt
    challenge: desec
    domains:
      - test.example.desec
  test.example.ovh:
    challenge: ovh
    domains:
      - test.example.ovh
      - www.test.example.ovh
  test.example.webroot:
     challenge: webroot
     domains:
      -   test.example.webroot

Das ist nur ein Beispiel wie es für mich funktioniert, schaut auf jeden Fall ins Wiki und denkt dran: das ist yaml also nur Leerzeichen, keine Tabs etc.

Wenn man diese Config Datei hat dann reicht ein einfacher aufruf mit dieser als Parameter aus um die Zertifikate zu beziehen oder zu erneuern.:

lego --config /etc/lego/lego.yaml 

Jetzt müssen wir noch sehen das dieser Befehl regelmäßig ausgefürht wird, das kann man über einer Cronjob machen oder über einen Systemd Timer. Dafür werden folgende Dateien angelegt /etc/systemd/system/lego-renew.timer und /etc/systemd/system/lego-renew.service:

[Unit]
Description=Lego Certificate Renewal Timer

[Timer]
OnCalendar=*-*-* 03:00:00
RandomizedDelaySec=1h
Persistent=true

[Install]
WantedBy=timers.target

und

[Unit]
Description=Lego Certificate Renewal

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/lego --config /etc/lego/lego.yaml
ExecStartPost=systemctl reload nginx

Nun können wir den systemd daemon neu laden und den timer starten und aktivieren:

systemctl daemon-reload
systemctl enable lego-renew.timer
systemctl start lego-renew.timer

Und das war es auch schon. Lego sollte sich nun darum kümmern eure Zertifikate immer auf einem aktuellen Stand zu halten. Jetzt muss man natürlich noch sehen das man seinen nginx etc. auf die neuen Zertifikate konfiguriert. Ja das war bei mir Handarbeit, es gibt nen Grund warum ich mich so lange gedrückt habe.

Ich hoffe der Beitrag hilft irgendwem und ist zumindest halbwegs interessant. Falls nicht, dann weiss ich in sechs Monaten zumindest immer noch was ich hier getan habe.

Weekly #25 publié.

Au menu : File Browser s’arrête, vaultwarden 1.37.1 stabilise la compatibilité Bitwarden, HestiaCP 1.9.8 corrige plusieurs failles, GitHub teste les stacked PRs, SilverBullet 2.10 ajoute le multi-space.

https://cryptolab.re/posts/2026/weekly-25/

#SelfHosting #OpenSource #Homelab #Security

Woohoo! I did a new thing!

I now have my own domain name: badnetmask.dev, registered with Porkbun. Soon I will be using it for all sorts of crazy things. Stay tuned!

In the mean time, you can check out this neat page with all my links. It has been deployed using a Little Link container, as an Azure Web App, automated using Terraform. Eventually I will blog about this adventure.

Welcome to my new "homepage"!

#HomeLab #SelfHosting #SelfHosted #Terraform #Porkbun
https://badnetmask.dev/

I upgraded a thing!

I've been running my personal "links" page on top of Azure Application Services, which is basically a "Docker Compose on steroids".

This now has been upgraded to a VM running a custom-built Fedora bootc image (still in Azure). Fully manageable via GitOps with build pipelines and auto updates. Part of the pipeline is in my private Forgejo, and part is in public GitHub.

At some point I intend to post a template so you can replicate, along with a blog post on how to do it. This was also a chance to upscale my Forgejo runners, so I'll blog about that as well.

#HomeLab #SelfHosted #SelfHosting #bootc @homelab

https://badnetmask.dev/

Eigenen Synapse Server für das Matrix Protokoll betreiben inklusive Element Call

Mal wieder ein Beitrag der vor allem mir als Gedankenstütze dienen soll. Und zwar geht es diesmal um Synapse, dem Referenzserver für das Matrix Protokoll.

Wer hier gelandet ist wird sicher schon wissen was Synapse bzw. das Matrix Protokoll ist. Über diesen Server kann man vor allem chatten aber auch Video- und Audioanrufe abwickeln und noch vieles mehr. Das Matrix Protokoll ist extrem mächtig. Das ist nicht immer ein Vorteil, denn es zu implementieren ist somit auch extrem schwer. Das führt auch dazu das es bisher eigentlich kaum eine ernst zunehmende Alternative zu Synapse oder den Element Clients gibt wenn man den vollen Funktionsumfang nutzen möchte.

Aber warum mach ich mir die Arbeit. Naja im Alltag nutze ich überwiegend Signal, was meiner Meinung nach ein super Dienst ist, auch wenn hier manche Leute jetzt wieder Schnappatmung kriegen. Aber dieser Dienst ist halt zentralisiert, an eine Mobilfunknummer gebunden, liegt im Machtbereich von Donald Trump und falls die Chatkontrolle kommt dann hat man auch schon angedroht sich aus dem europäischen Markt zurück zu ziehen.

Mein eigener Synapse Server ist also mein Plan B in Sachen Kommunikation, ausserdem ist so eine Chatplattform auch ganz praktisch in Bezug auf Smarthome Benachrichtigungen, Datenschutz und Co. Des Weiteren ist Matrix als dezentrales System gedacht, von daher ist es geradezu traurig bis gefährlich wie viele User dieses Ökosystems Ihr Zuhause auf der Hauptinstanz matrix.org haben.

Leider ist das Setup eines Synapse Servers inkl. dem Backend für Element Call nicht trivial, deswegen habe ich das hier mal zusammengefasst. Aber nein das hier ist jetzt keine Anleitung wo ich jedes Fitzelchen kommentiere etc. Teilweise muss man auch das eigene Hirn noch einschalten. Ausserdem ist das ganze an mein spezifisches Setup (Docker mit nativ installiertem nginx als reverse Proxy) angepasst. So oder so ist es ggf. eine Inspiration für euer eigenes Setup. Auch ich musste mir die Infos an etlichen Stellen zusammensuchen. Ich werde hier die einzelnen Config Dateien in den Beitrag einbetten so das Ihr nachschauen könnt was Ihr ändern müsst.

Eigentlich wollte ich Sie auf Codeberg laden aber der Dienst kämpft wohl gerade mit Problemen.

Am Ende solltet Ihr einen Synapse Server inkl. Element Web und Element Call am laufen haben.

Vorraussetzungen:

1. ein aus dem Internet erreichbarer Linux Server mit Docker, Docker compose und nginx. Falls Ihr eine Firewall einsetzt denkt daran diese entsprechend einzurichten und die notwendigen Ports freizugeben
2. Zwei Domains, ich nutze im Beispiel matrix.example.eu und matrixrtc.example.eu, diese müsste Ihr natürlich überall wo Sie vorkommen ersetzen
3. TLS Zertifikate für die beiden Domains

Ordnerstruktur:

Legt euch zuerst eine passende Ordnerstruktur an. Bei mir liegen die einzelnen Containerdefinitionen und Ihre Config Dateien in eigenen Ordnern unter /opt. Für meinen Matrix Server sieht das dann so aus:

opt
└── matrix
    ├── elementweb
    ├── livekit
    ├── postgres
    ├── synapse
    └── docker-compose.yaml

Die docker-compose.yaml müsst ihr jetzt noch nicht erstellen.

Homeserver.yaml generieren:

Haben wir die Ordnerstruktur angelegt lassen wir uns von Synapse eine homeserver.yaml inkl. Key,s Secrets etc erstellen. Das macht Ihr mit folgendem Befehl, die homeserver.yaml findet Ihr danach im Ordner Synapse. Falls Ihr eine andere Ordnerstruktur habt müsst ihr das natürlich anpassen.

docker run -it --rm \
  -v /opt/matrix/synapse:/data \
  -e SYNAPSE_SERVER_NAME=matrix.example.eu \
  -e SYNAPSE_REPORT_STATS=no \
  matrixdotorg/synapse:latest generate

Homeserver.yaml bearbeiten:

Jetzt schaut Ihr euch die homeserver.yaml an und führt die Änderungen durch die Ihr ein meinem Beispiel seht. Bitte nicht einfach Copy und Paste machen, dann sind eure Keys und Secrets weg. Schaut euch alle Zeilen an, wenn Ihr euch bei etwas nicht sicher seit dann schaut in die Synapse Doku. Wie gesagt, selber denken ist wichtig. Setzt auf jeden Fall ein sicheres Passwort für die Postgres Datenbank, Ihr werdet es auch in der Docker Compose Datei brauchen.

# Configuration file for Synapse.
#
# This is a YAML file: see [1] for a quick introduction. Note in particular
# that *indentation is important*: all the elements of a list or dictionary
# should have the same indentation.
#
# [1] https://docs.ansible.com/ansible/latest/reference_appendices/YAMLSyntax.html
#
# For more information on how to configure Synapse, including a complete accounting of
# each option, go to docs/usage/configuration/config_documentation.md or
# https://element-hq.github.io/synapse/latest/usage/configuration/config_documentation.html
server_name: "matrix.example.eu"
pid_file: /data/homeserver.pid
listeners:
  - port: 8008
    resources:
    - compress: false
      names:
      - client
      - federation
    tls: false
    type: http
    x_forwarded: true
database:
  name: psycopg2
  args:
    user: synapse
    password: mySuperSecretPassword
    database: synapse
    host: db
    port: 5432
    cp_min: 5
    cp_max: 10
log_config: "/data/matrix.example.eu.log.config"
media_store_path: /data/media_store
max_upload_size: 50M
enable_registration: false
enable_registration_without_verification: false
registration_shared_secret: "AutoGenerated"
# Retention policy
retention:
  enabled: true
  default_policy:
    min_lifetime: 1d
    max_lifetime: 365d
url_preview_enabled: true
url_preview_ip_range_blacklist:
  - '127.0.0.0/8'
  - '10.0.0.0/8'
  - '172.16.0.0/12'
  - '192.168.0.0/16'
report_stats: false
macaroon_secret_key: "AutoGenerated"
form_secret: "AutoGenerated"
signing_key_path: "/data/matrix.example.eu.signing.key"
trusted_key_servers:
  - server_name: "matrix.org"
experimental_features:
  # MSC3266: Room summary API. Used for knocking over federation
  msc3266_enabled: true
  # MSC4222: needed for syncv2 state_after. This allows clients to
  # correctly track the state of the room.
  msc4222_enabled: true
  # MSC4140: Delayed events are required for proper call participation signalling. If disabled it is very likely that you end up with stuck calls in Matrix rooms
  msc4140_enabled: true

# The maximum allowed duration by which sent events can be delayed, as
# per MSC4140.
max_event_delay_duration: 24h

rc_message:
  # This needs to match at least e2ee key sharing frequency plus a bit of headroom
  # Note key sharing events are bursty
  per_second: 0.5
  burst_count: 30
  # This needs to match at least the heart-beat frequency plus a bit of headroom
  # Currently the heart-beat is every 5 seconds which translates into a rate of 0.2s
rc_delayed_event_mgmt:
  per_second: 1
  burst_count: 20

Docker Compose bearbeiten:

Als nächstes nehmen wir uns die Docker Compose Datei vor. Auch darin ist eigentlich alles kommentiert was Ihr ändern müsst. Das wichtigeste ist das Datenbank Passwort sowie Key und Secret für Livekit. Wir Ihr diese generiert steht auch in den Kommentaren der Datei.

services:
  synapse:
    image: matrixdotorg/synapse:latest
    container_name: synapse
    restart: unless-stopped
    volumes:
      - ./synapse:/data
    ports:
      - "127.0.0.1:8008:8008"   # Bind to loopback
    depends_on:
      - db

  db:
    image: postgres:16-alpine
    container_name: synapse-db
    restart: unless-stopped
    environment:
      POSTGRES_USER: synapse
      POSTGRES_PASSWORD: CHANGEME #also in synapse/homeserver.yaml
      POSTGRES_DB: synapse
      POSTGRES_INITDB_ARGS: "--encoding=UTF-8 --lc-collate=C --lc-ctype=C"
    volumes:
      - ./postgres:/var/lib/postgresql/data
    ports:
      - "127.0.0.1:5432:5432"

  auth-service:
    image: ghcr.io/element-hq/lk-jwt-service:latest
    container_name: element-call-jwt
    hostname: auth-server
    environment:
      - LIVEKIT_JWT_PORT=8080
      - LIVEKIT_URL=https://matrixrtc.example.eu/livekit/sfu #CHANGEME
      - LIVEKIT_KEY=CHANGEME # use tr -dc 'a-zA-Z0-9' </dev/urandom | head -c 64 to generate key / also change in livekit/config.yaml
      - LIVEKIT_SECRET=CHANGEME # use tr -dc 'a-zA-Z0-9' </dev/urandom | head -c 64 to generate key / also change in livekit/config.yaml
      - LIVEKIT_FULL_ACCESS_HOMESERVERS=matrix.example.eu
    restart: unless-stopped
    ports:
      - 127.0.0.1:8070:8080 #Change 8070 to whichever port you want JWT to be available on locally

  livekit:
    image: livekit/livekit-server:latest
    container_name: element-call-livekit
    command: --config /etc/livekit.yaml
    ports:
      - 127.0.0.1:7880:7880/tcp
      - 7881:7881/tcp
      - 50100-50200:50100-50200/udp
    restart: unless-stopped
    volumes:
      - ./livekit/config.yaml:/etc/livekit.yaml:ro

  element-web:
    image: vectorim/element-web:latest
    restart: unless-stopped
    ports:
      - "127.0.0.1:8009:80"
    healthcheck:
      test: ["CMD-SHELL", "wget -q -O /dev/null http://localhost:80/version || exit 1"]
      start_period: "5s"
      interval: "15s"
      timeout: "5s"
    volumes:
      - ./element-web/config.json:/app/config.json
    depends_on:
      - synapse

Livekit konfiguration:

Nun ist die config.yaml im Unterordner livekit dran. Hier müsst Ihr eigentlich nur die externe IP eures Server sowie Key und Secret anpassen die Ihr gerade generiert habt. Übrigens wie ich letztens noch gelesen habe (https://sspaeth.de/2026/04/matrix-voip-and-livekit/) werdet ihr in den allermeisten Fällen keinen Turn Server brauchen. Also weder den in Livekit noch sowas wie CoTurn.

port: 7880
bind_addresses:
  - "0.0.0.0"
rtc:
  tcp_port: 7881
  port_range_start: 50100
  port_range_end: 50200
  use_external_ip: true
  node_ip: Externe IP eures Servers
room:
  auto_create: false
logging:
  level: info
turn:
  enabled: false
  domain: localhost
  cert_file: ""
  key_file: ""
  tls_port: 5349
  udp_port: 443
  external_tls: true
keys:
  LIVEKIT_KEY: LIVEKIT_SECRET # Values from your docker compose, mind the space!

Element Web konfiguration:

Die letzte Config Datei, diesmal aber im json Format, die Ihr anpassen müsst ist die für Element Web, falls Ihr das verwenden wollt. Auch hier müsst Ihr vorallem die URL’s anpassen etc.

{
    "default_server_config": {
        "m.homeserver": {
            "base_url": "https://matrix.example.eu",
            "server_name": "matrix.example.eu"
        },
        "m.identity_server": {
            "base_url": "https://vector.im"
        }
    },
    "disable_custom_urls": false,
    "disable_guests": false,
    "disable_login_language_selector": false,
    "disable_3pid_login": false,
    "force_verification": false,
    "brand": "Element",
    "default_widget_container_height": 280,
    "default_country_code": "DE",
    "show_labs_settings": false,
    "features": {
        "feature_video_rooms": true,
        "feature_group_calls": true,
        "feature_element_call_video_rooms": true,
        "feature_oidc_native_flow": true
    },
    "default_federate": true,
    "default_theme": "light",
    "room_directory": {
        "servers": ["https://matrix.example.eu"]
    },
    "setting_defaults": {
        "breadcrumbs": true
    },
    "element_call": {
        "url": "https://matrixrtc.example.eu"
    },
    "map_style_url": "https://api.maptiler.com/maps/streets/style.json?key=fU3vlMsMn4Jb6dnEIFsx"
}

Nginx konfigurieren:

Damit euer Synapse Server von aussen erreichbar ist, föderieren kann etc. müsst Ihr natürlich auch noch einen passenden reverse Proxy, in meinem Fall einen nginx einrichten. Dazu könnt Ihr folgende Config nehmen, natürlich müsst ihr die ganzen Domains sowie die Pfade zu den TLS Zertifikaten anspassen.

# HTTPS redirect
server {
    listen 80;
    listen [::]:80;
    server_name matrix.example.eu;

    location / {
        return 301 https://$host$request_uri;
    }
}

# Client API
server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name matrix.example.eu;

    ssl_certificate     /etc/letsencrypt/live/matrix.example.eu/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/matrix.example.eu/privkey.pem;
    ssl_protocols       TLSv1.2 TLSv1.3;
    ssl_ciphers         HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;


    client_max_body_size 50M;

    # Well-known for Client Configuration
    location /.well-known/matrix/client {
        return 200 '{"m.homeserver": {"base_url": "https://matrix.example.eu"}, "m.identity_server": {"base_url": "https://vector.im"}, "org.matrix.msc4143.rtc_foci": [{"type": "livekit", "livekit_service_url": "https://matrixrtc.example.eu/livekit/jwt"}]}';
        default_type application/json;
        add_header Access-Control-Allow-Origin *;
        add_header Access-Control-Allow-Methods 'GET, OPTIONS';
    }

    # Well-known for federation
    location /.well-known/matrix/server {
        return 200 '{"m.server":"matrix.example.eu:8448"}';
        default_type application/json;
    }

    location / {
        proxy_pass http://localhost:8009;
        proxy_set_header X-Forwarded-For $remote_addr;
    }

    # Forward to dockerized Synapse
    location ~* ^(\/_matrix|\/_synapse\/client) {
        proxy_pass         http://localhost:8008;
        proxy_set_header   X-Forwarded-For $remote_addr;
        proxy_set_header   X-Forwarded-Proto $scheme;
        proxy_set_header   Host $host;
        proxy_http_version 1.1;

        proxy_read_timeout    600;
        proxy_connect_timeout 600;
        proxy_send_timeout    600;
    }
}

# Federation Port 8448
server {
    listen 8448 ssl http2;
    listen [::]:8448 ssl http2;
    server_name matrix.example.eu;

    ssl_certificate     /etc/letsencrypt/live/matrix.example.eu/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/matrix.example.eu/privkey.pem;
    ssl_protocols       TLSv1.2 TLSv1.3;
    ssl_ciphers         HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;

    client_max_body_size 50M;


    location / {
        proxy_pass         http://localhost:8008;
        proxy_set_header   X-Forwarded-For $remote_addr;
        proxy_set_header   X-Forwarded-Proto $scheme;
        proxy_set_header   Host $host;
        proxy_http_version 1.1;
    }
}
# HTTPS redirect
server {
    listen 80;
    listen [::]:80;
    server_name matrixrtc.example.eu;

    location / {
        return 301 https://$host$request_uri;
    }
}

# HTTPS Client API
server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name matrixrtc.example.eu;

    ssl_certificate     /etc/letsencrypt/live/matrixrtc.example.eu/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/matrixrtc.example.eu/privkey.pem;
    ssl_protocols       TLSv1.2 TLSv1.3;
    ssl_ciphers         HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;

location ^~ /livekit/jwt/ {
      proxy_set_header Host $host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;

      # MatrixRTC Authorization Service running at port 8080
      proxy_pass http://localhost:8070/;
    }

    location ^~ /livekit/sfu/ {
      proxy_set_header Host $host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;

      proxy_send_timeout 120;
      proxy_read_timeout 120;
      proxy_buffering off;

      proxy_set_header Accept-Encoding gzip;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";


      # LiveKit SFU websocket connection running at port 7880
      proxy_pass http://localhost:7880/;
    }
}

Jetzt noch die Config mittels symlink eurem nginx bekant machen und diesen reloaden.

Synapse Server starten:

Danach konnt Ihr wieder in den Ordner /opt/matrix wechseln und den Synapse Server starten:

docker compose up

Ich habe hier das detachen erst einmal weg gelassen, so könnt Ihr die Ausgaben beobachten und wisst auch wann die Datenbankinitialisierung vorbei ist.

Benutzer anlegen:

Nun müsst Ihr natürlich noch User anlegen, da wir die Registrierung deaktiviert haben, machen wir das über die Kommandozeile. Den ersten User machen wir auch gleich zum Admin, bei den anderen Usern tauscht ihr das –admin gegen ein –no-admin.

docker exec -it synapse register_new_matrix_user \
  http://localhost:8008 \
  -c /data/homeserver.yaml \
  -u meinErsterUser \
  -p SuperSicheresPasswort \
  --admin

Nun sollte euer eigener Synapse Server laufen und auch mit anderen Server föderieren können. Falls Ihr konstruktive Anmerkungen habt, eine Fehler in der Config seht etc. dann schreibt einfach einen Kommentar. Wie gesagt das ganze aufzusetzen ist extrem komplex und den einen ultimativen Guide gibt es nicht (und der hier ist es sicher auch nicht).

Aber ich hoffe ich kann auf die Weise den einen oder anderen dazu bewegen sich auch so ein System aufzusetzen und damit dazu beizutragen das Matrix Ökosystem ein bisschen resilienter zu machen.

What's the point of having a home lab designed to solve problems but you end up having more problems than the ones that it should solve?

Decision made to uninstall one of the three storage servers at my in-laws. No matter how much electricity it costs, even if it costs a kebab a year, if it seems useless, they will always challenge the cost.

I'm pretty sure that the second storage server at my dad's will retire too for the same reason anytime soon.

#homelab #selfhosting

Liebes Fediverse.

Meine bisherige Instanz bei Anoxinon liegt leider im Koma. Daher einmal #neuhier

Ich interessiere mich für #kunst, #musik und #freiesoftware.

Ich mache lehrreiche Videos zu #linux und #selfhosting die ihr auf #peertube findet: https://tube.sp-codes.de/c/tuxwiz/videos

Meine Leidenschaft sind #linuxmobile Handys mit #postmarketos und ich nutze dort einen Tiling Windowmanaget namens #sway mit #sxmo.

Wer hier nur noch #bahnhof versteht, dem empfehle ich meine #podcast Folge bei #gnulinux_ch : https://gnulinux.ch/ciw089-podcast

Ich würde mich über #austausch mit euch sehr freuen und bin auf euch gespannt. Gerne auch #retoot für mehr Reichweite.

#follow #followerpower

I came into possession of some old solar panels so I made a solar-powered web server with a raspberry pi. It's been sitting in my garden for two months running continuously on sun/battery power.

Perhaps the continuous uptime is not surprising given the extreme weather in London this summer.

It's been running the nginx start page for most of that time, but I finally made a little zine site and hooked it up to the web.

Channeling Gilbert White, Bruno Latour, lowtechmagazine, whathaveyou. Not much content there as yet.

A Concrete Garden: https://uplode.org

#solar #selfhosted #selfhosting #energy #permacomputing #sustainability #computing #lowtech

I want to run #forgejo (public instance) but at the same time worry about its security. These AI times already show the massive number of vulnerabilities discovered. Especially with more people doing #selfhosting and that a software repository may be a hot target, I would like to see what can be done with system hardening. For example a hardening profile: https://linux-audit.com/systemd/hardening-profiles/

Let's make #selfhosted instances more secure! Want to learn, share, and do this together?

https://signal.group/#CjQKIIagtwKpq4DcVo_dehkIPpPK6it6KyYFY0onhB32xbK8EhCElOtUV5YosZ3IL_Lc2iid

Self-hosting people!

Do you have suggestions for directories of self-hostable free open source software?

So far I've got the Awesome list at https://awesome-selfhosted.net but wondered if there are any others you would recommend?

#SelfHosting #FOSS #AskFedi

Do you have recommendations for good reliable domain name providers? (Bonus points if they are user-friendly for non-technical people)

Post in the replies if you do 🙂

#DomainNames #SelfHosting #AskFedi

#XMPP Community

XMPP at #FOSSY 2026 from 6th to 9th August 2026, #University of British Columbia, #Vancouver, #Canada. Seven presentations take place on Sat & Sun!

https://xmpp.org/2026/07/xmpp-at-fossy-2026/

#jabber #chat #interoperability #selfhosting #rtc #opensource #decentralization #federation #messaging #ubc

Alt...

The XMPP Community Banner with the XMPP Logo and a triangle with three encircled colored person icons next to it.

J’ai ajouté une page Apps sur Cryptolab : un annuaire perso de projets open source à tester, auto-héberger ou garder sous le coude.

Pas un classement, pas une recommandation de prod. Juste un outil de tri pour éviter de repartir de zéro à chaque veille.

https://cryptolab.re/posts/2026/annuaire-apps-open-source/

#OpenSource #SelfHosting #Homelab

Runnig your own server incl. TLS stuff is always quite funny. You only want to try a new service and you need a certificate for it. In the progress of obtaining this you realize the still unsolved certbot problem where is does not delete old acme challenges from OVH. Okay there ist no update for that using certbot on Debian 12. Okay i could switch to the docker version of certbot, but that does not include the desec.io DNS Provider provider plugin, which i need for the new domain.
I could now make my own docker container for that, and keep that updated.
Or i make that switch to the Lego acme client which includes numerous DNS Providers and cleans up acme challenges in OVH just fine.
Btw still have no certificates for the new domain 🫠️
#desec #ovh #letsencrypt #certbot #lego #selfhosting
@homelab

After the epic failure of nextcloud, I continued my jellyfin setup.

The metadata system based on directory/file names doesn't work for me because I can't rename files (for those who know why), so I had to trick the system by using symlinks.

Some shows have bad database entries like 1923 returning a totally different show by default. I had to use the weird [imdb-ttNNNNNNN] title, including the IMDB id, to tell jellyfin where to find the show. I ended up using the id everywhere so I'm sure every show is the right one.

Now my library looks great!

#jellyfin #selfhosting

Mobilizon is a Fediverse-compatible free open source events platform, developed as a libre alternative to Facebook Events. You can find out more at:

🌱 https://mobilizon.org

You can follow the official account at:

🌱 @mobilizon

If you're a techy person there are manual installation instructions for self-hosting at:

🌱 https://docs.mobilizon.org/3.%20System%20administration/install

#SelfHosting #CommunityHosting #Fediverse #ActivityPub #FacebookEvents

Thinking about a new domain+project...

Anyone have the TL;DR; on self hosted fediverse software?

Mastodon vs Snac vs Pleroma vs ?

I'm looking for something that is super low maintenance and lightweight / easy on resources but as full featured as practical within those constraints.

Something easy to tune re: post lengths and media types would be cool too. A "text first" platform is desired.

I've run Mastodon in the past and it's like fishing with nukes for this use case.

What's out there?

#Fediverse #Mastodon #snac #web #selfHosting #SelfHosted

If you are #selfhosting / #homelabbing: you have my utmost respect. Do not trust other parties to have your back - because they don't.

However, few words to the wise: if you operate a minimalist setup - eg everything running in VMs on a single host: please do consider the consequences of downtime.

You probably don't want to run your critical services on one machine without a fallback. If those services include your smarthome foundation, DNS and firewalling: you don't want to troubleshoot in the dark because everything is down and you can't even turn on the light anymore.

You aren't the first nor won't he the last to learn this lesson when disaster strikes though

In 2024, I went to LA to give a talk about how I made my own cloud storage to backup my pictures, documents, but also the ones of my family. I have chosen Seafile but it didn't work as expected. It filled the disk of my dad. At that time, I was suggested to try Nextcloud.

Today's the day, after 2 years. I've set up the latest docker image, spawned a PostgreSQL database, created some users, directories and uploaded files. Everything went well.

Then I started to install the mobile app to sync pictures from my phone and the desktop app to sync my documents. And things got spicy. The mobile app has uploaded 1200 files in... a day, with hundreds of errors I had to dismiss. The desktop app has uploaded 6 files in an afternoon, out of 1700, then stopped with failure. Why can't we have the performance of rsync with the user fiendly interface of nextcloud?

#nextcloud #selfhosting #homelab

Weekly #24 publié.

Au menu : changements de gouvernance chez Jellyfin, position de Codeberg sur les projets générés par LLM, API SmartThings payante, Vikunja 2.4.0, vaultwarden 1.37.0, Pangolin, Nextcloud et degoog.

https://cryptolab.re/posts/2026/weekly-24/

#SelfHosting #OpenSource #Jellyfin #Homelab #Security

#solar #offgridsolar #balconysolar #balkonsolar #diysolar #selfhosting #solarhosting

Alt...

https://deltalima.org/blog/custom.php?site=system-stats ☀️ Solar system 2W ☀️ Solar 7W 🔌 Load 100% 🔋 Battery [www-data@minix-n4100.dmz.nukular.netz:~]# ./system-stats --solar Refreshed: 26.7.2026, 19:08:33 Solar 1 ------------------------------ PV power : 1.6 W PV current : 0.1 A PV voltage : 14.61 V Battery voltage : 13.35 V Load power : 5.07 W Solar 2 ------------------------------ PV power : 0 W PV current : 0 A PV voltage : 0 V Battery voltage : 13.36 V Load power : 2.13 W ============================= PV power all: 1.6 W Load power all: 7.2 W Battery charge: 100 % =============================

I was ill last week and discovered something uncomfortable: a huge Jellyfin library isn't entertainment, it's homework. Every time I opened it, it asked "what do you want?" and I just scrolled.

So I built a TV station instead.

ErsatzTV turns a media library into real linear channels with schedules and logos. It ships for Linux, Windows and macOS. My server runs FreeBSD.

Turns out the entire porting effort was one conditional. The code asked "is this Linux?" when it meant "is VAAPI available?" VAAPI is userspace, FreeBSD has it, and .NET has had OSPlatform.FreeBSD for years.

One || later: Intel hardware transcoding in a Bastille jail that can see exactly one GPU and one read-only dataset.

I now have a sci-fi channel. I don't know what's on tonight. That's the point.

https://blog.hofstede.it/building-my-own-tv-station-ersatztv-in-a-freebsd-jail-with-intel-hardware-transcoding/

#FreeBSD #ErsatzTV #Jellyfin #SelfHosting #Jails #dotnet

I am pretty amazed, how fast and power efficient even those older Intel N4100 Mini PCs are.
My old Wyse 3040 unfortunatelly died recently, so I had to migrate everything to the more power hungry N4100 system.
But turns out, when you disable the TurboBoost, it's average power consumption is around 1,5 - 2,5W running with Debian and a Podman container with my Website, and some custom scripts for fetching stats by bluetooth and usb for the BMS and Solar Charger. Neat!
#selfhosting #solar #diy

@homelab Does anyone of you fine people have experience with a self-hosted k3s cluster and nodes on different networks? I'm wondering whether it's a good idea to consolidate all the services I run at home with the stuff I have on a VPS this way.

#homelab #selfhosting

Periodic reminder for people interested in #HomeLab and #SelfHosting

There is a @homelab bot that replaces the old gup.pe homelab bot.

Mention it in your homelab or self hosting posts and it will boost them. Follow it to see all the homelab posts it boosts that may not normally get federated to your instance.

For those who don’t know, these bots exist because when you look for a a hashtag, your server only checks the posts that have been federated to it.

In order for a message to be federated to your server, the author (or one of the people boosting it) have to be followed by someone on your server. If no one touching the message is being followed, it’ll never get federated to your server and you won’t see it.

Hashtags are great for finding messages, but only messages that were federated to your server. They don’t help message propagation.

#permacomputing #SelfHosting #moo #LambdaMOO #snac

Alt...

Two IKEA kitchen cabinets bolted together. Metal grates divide the cabinet, and on the grates are things like a network switch , a laptop, a small desktop server and a UPS.

"A year ago I published an article about GoToSocial, a fediverse microblogging software (think of it as an alternative to Mastodon or Sharkey) that I had been using and loving. That is still very much the case, a year and a half after I first started using it:

I have a special soft spot for GoToSocial because it is the very first app I ever installed with YunoHost: the first stepping stone in my great self-hosting adventures. Therefore, no self-hosting guide for newbies would be complete without a tutorial about how to install and set-up the brilliant GoToSocial.

I initially thought I would cover everything in one post, but there is so much to discuss that I will break up the tutorial in different chapters, so that the information does not get too overwhelming. This first installment will discuss:
1) picking a domain name to use
2) associating the domain name to your YunoHost installation
3) installing GoToSocial
4) doing some essential tweaks to boost security"

https://blog.elenarossini.com/a-newbies-guide-to-self-hosting-gotosocial-part-1-installation-and-set-up/

#SocialMedia #GoToSocial #Fediverse #Decentralization #SelfHosting

Good morning Fedi friends,

I have been feeling a rising anxiety over the state of the open web and the fediverse - after seeing efforts by politicians all over the world (in Europe too!) to introduce age verification laws for social media.

My way of coping?

Teaching people how to self-host their own Fediverse profile (using the superb #GoToSocial) via #YunoHost.

Chapter 1 in this series is available here:

🔗 : https://blog.elenarossini.com/a-newbies-guide-to-self-hosting-gotosocial-part-1-installation-and-set-up/

#resist #blog #ActivityPub #selfhosting

📣​ New post 📝​

"A newbie's guide to self-hosting: GoToSocial part 1 (installation and set-up)"

🔗​: https://blog.elenarossini.com/a-newbies-guide-to-self-hosting-gotosocial-part-1-installation-and-set-up/

Basically a visual guide showing how to install #GoToSocial via #YunoHost and set it up with some basic security.

⏱️​ From start to finish, it should take about 25-30 minutes.

It's my act of resistance against tech bros... I love the idea of teaching people how to self-host their own social media instance, connected to the fediverse ✌️​❤️​ ​

Thank you @yunohost  and @gotosocial for empowering us all!

#SelfHosting #Fediverse #newbie #MySoCalledSudoLife #blog #resist

What would be your fanless + headless mini PC of choice for a FreeBSD server?
1x 1Gbps Eth port, 32GB RAM minimum, 6 CPU cores minimum, 1x NVMe + 1x 2.5 SATA

#fanless #selfhosting #freebsd

"Twasn't me..."

"Well... it was teh case's fault!!!11!!!"

🤡

If you ever wanted a good reason to keep around your failed hard drives, scavenging screwed up logic boards is a good reason. Ha!

#Linux #RunBSD #SelfHosting #SelfHosted #Hardware #HDD

Alt...

Image of a HDD with the logic board removed and showing broken and bent interface pins.

@lumi @mrmasterkeyboard consider #XMPP+#OMEMO then?
- decentralized ( #SelfHosting )
- real #E2EE (with #SelfCustody!)
- Established for long time.
- Works well over @torproject / #Tor.

For #VoiceChat & #Videocalling, there's #Mumble & #JitsiMeet…

For #GroupChats, there's #IRC, …

More and more are realizing that it was a really bad idea to entrust all data to Big Tech. Given that, what do you do now?

For many it just means moving to a different hosting service, that is not Big Tech. For others it means hosting yourself. Likely there will be a bit of a combination for many. In any case, this means the need to build up competence in the organization, which IMHO is a good thing.

In my old company, Opera, and in my new one @Vivaldi, we always run things that way. Our servers have always been our servers. We may choose to use some external services, but mostly we use our own.

Our Vivaldi servers are in Iceland. At Opera, we built significant server farms across the world, including in Iceland, not least for the Opera Mini service. The server farms we built at Opera handled hundreds of millions of users on a monthly basis. The Opera Mini service had billions of daily page views going through it.

When some are saying that there is not enough competence to move away from Big Tech, that is really nonsense. It can take time to do so, as with any migration and it may require different thinking, but it is mostly a question of will.

#Technology #BigTech #SelfHosting #Vivaldi #Browser #EU #Europa

Weekly #23 publié : IA dans la revue du kernel Linux, OIDC homelab avec Pocket ID/Tinyauth, NocoDB et open core, Dawarich, Immich 3.0.3 F-Droid, SUB/WAVE.

https://cryptolab.re/posts/2026/weekly-23/

#SelfHosting #Linux #OIDC #OpenSource

New on the blog: my Home Assistant setup on FreeBSD.

Home Assistant OS runs in a bhyve VM, but bhyve has no USB passthrough, so Zigbee2MQTT and Mosquitto live in a VNET jail with the ConBee II.

Homematic comes in via a CCU3, and three IKEA Matter-over-Thread devices use my Nanoleaf Shapes controller as their border router.

Three radio ecosystems, 474 entities, one dashboard.

https://blog.hofstede.it/my-home-assistant-setup-bhyve-freebsd-jails-zigbee-homematic-and-matter-over-thread/

#FreeBSD #HomeAssistant #bhyve #Zigbee #Matter #Thread #SelfHosting

I saw a terrible message from DigitalOcean yesterday. I was helping a co-worker learn to do SASL authentication with Postfix, using Dovecot to do the heavy lifting, (second co-worker this week! Breaking people free from Google!) and we got to the point where we were ready to have him send out a test email - a reply to an email I'd just sent him that exercised all the moving parts of his inbound path.

But when he tried to send, he couldn't talk to my email server. I checked to make sure he wasn't being firewalled, but he didn't show up in my abuse listing. But then on poking around, it became clear he couldn't talk to ANY port 25 ANYWHERE. And I thought, "Oh, right, they've got that blocked. Le'ts find an article talking about how to unblock it." Not too uncommon. So I looked for their docs on unblocking 25.

Turns out, there's no automated way - not even a support ticket type for the purpose. You have to open a general request.

But man, they REALLY don't want you opening a general request! This is a masterpiece of Fear, Uncertainty, and Doubt:

https://www.digitalocean.com/community/tutorials/why-you-may-not-want-to-run-your-own-mail-server

Without meaning to, they've eloquently captured the essence of everything we're seeing with the destructive corporatization and centralization of online services. They say:

"In many ways, mail server stacks represent a collision between the tools and values of the early internet — self-hosting open source software using well-defined standards and interoperable protocols — and the reality of the modern internet — a few centralized, trusted authorities."

This, not to put too fine a point on it, is BAD FOR US.

We need *more* selfhosting. I was a customer of theirs for a few years, but I stopped after they had some catastrophe that prevented me from accessing my server console for more than a week. Their support was underwater and I didn't get any movement until I decided to publically name and shame them with details of the incident.

This kind of attitude should make anyone hesitant to sign up for services with DigitalOcean.

#selfhosting #digitalocean

It would be interesting to see how people who are nomadic (van life type folks) do homelab/selfhosting. That has to put a fascinating wrinkle in it. Power and connectivity solutions especially, running a Pi off solar vs. dealing with Starlink power draw, that kind of thing.

#SelfHosting #Homelab #VanLife #OpenSource

Working on a brand new post for my series "a newbie's guide to self-hosting with #YunoHost" - showing people how to set up their own #GoToSocial microblogging instance.

Sorry it's been taking a while: I started over when I realized most people use subdomains... and I'm doing a thorough step-by-step explainer that any newbie could follow - I hope 😅

The whole series is available here:

🔗 : https://blog.elenarossini.com/a-newbies-guide-to-self-hosting-with-yunohost/

#SelfHosting #MySoCalledSudoLife #blog

Alt...

a screenshot of GoToSocial's installation page on YunoHost that reads: "GoToSocial Current version: 0.22.0~ynh1 Potential alternative to: Akkoma, Bluesky, Calckey, Mastodon, Misskey, Pleroma, Threads, X GoToSocial is a fast ActivityPub social network server, written in Golang. With GoToSocial, you can keep in touch with your friends, post, read, and share images and articles. All without being tracked or advertised to! The official documentation is at docs.gotosocial.org. Admins are strongly encouraged to read the documentation of this package after installing it. It is available in the webadmin under Applications > gotosocial (at the bottom) or here on the package's repository! Please note that this package uses the "i'm so tired" software license 1.0, please read it and accept it before proceeding with installation."

Ich habe #OpenAI #Codex in #ChatGPT heute folgende Admin-Aufgabe gegeben:

Herausfinden, warum eine #SSH-Verbindung zu Server „Orion“ über #autossh und einen lokalen, per #Homebrew installierten #Tor-SOCKS-Proxy nicht funktioniert, während der Zugang über #Tailscale klappt.

„Orion“ als Tailscale Exit Node konfigurieren.

Die Exit-Routen anschliessend auf dem #YunoHost-Server „Andromeda“ über die Konsole der #Headscale-App freigeben.

Codex hat selbstständig die SSH-Konfiguration, Host-Aliase, Portbelegung, Tor-Dienst, Hidden Service und Timeouts überprüft. Gefunden wurden ein fehlender SSH-Alias, ein für Tor zu kurzer Verbindungs-Timeout und ein bereits belegter lokaler Port durch eine andere autossh-Verbindung.

Danach hat Codex die SSH-Konfiguration korrigiert, die Onion-Verbindung erfolgreich getestet, auf „Orion“ die IPv4- und IPv6-Exit-Routen via Tailscale annonciert und sie auf „Andromeda“ direkt in der YunoHost-App-Konsole von Headscale freigegeben. Bestehende Subnet-Routen blieben erhalten.

Dauer: ungefähr 5 Minuten, inklusive Diagnose, Änderungen und abschliessender Verifikation.

Schon beeindruckend, wie weit agentisches Arbeiten mit OpenAI, Codex und ChatGPT inzwischen geht: nicht nur Kommandos vorschlagen, sondern eine mehrstufige Infrastrukturaufgabe nachvollziehbar untersuchen und ausführen.

#Linux #macOS #SelfHosting #Sysadmin #Homelab #AI

There's something oddly satisfying about having a bunch of websites open in the background and knowing they're all being served off of hardware that you own #SelfHosting

I’m thinking about turning my #VPS in a #Proxmox node and adding it to my #homelab cluster. All other nodes are at my home. They will communicate through #WireGaurd. How bad is this idea? Anyone tried this?

#AskFedi #SelfHosted #selfhost #selfhosting #proxmoxve #ProxmoxCluster

Working on a brand new post for my series "a newbie's guide to self-hosting with #YunoHost" - showing people how to set up their own #GoToSocial microblogging instance.

Sorry it's been taking a while: I started over when I realized most people use subdomains... and I'm doing a thorough step-by-step explainer that any newbie could follow - I hope 😅

The whole series is available here:

🔗 : https://blog.elenarossini.com/a-newbies-guide-to-self-hosting-with-yunohost/

#SelfHosting #MySoCalledSudoLife #blog

Alt...

a screenshot of GoToSocial's installation page on YunoHost that reads: "GoToSocial Current version: 0.22.0~ynh1 Potential alternative to: Akkoma, Bluesky, Calckey, Mastodon, Misskey, Pleroma, Threads, X GoToSocial is a fast ActivityPub social network server, written in Golang. With GoToSocial, you can keep in touch with your friends, post, read, and share images and articles. All without being tracked or advertised to! The official documentation is at docs.gotosocial.org. Admins are strongly encouraged to read the documentation of this package after installing it. It is available in the webadmin under Applications > gotosocial (at the bottom) or here on the package's repository! Please note that this package uses the "i'm so tired" software license 1.0, please read it and accept it before proceeding with installation."

Thanks to a few pointers from the #CGHMN IRC chat, I *think* I now have DMARC and SPF set correctly on my domain. Maybe my emails won't all get blackholed now?

(I doubt it, seeing as they're still coming from a residential IP)

#SelfHosting

On #Android? Looking for a backup solution that doesn't rely on a big commercial service or require setting up and securing an entirely new server?

I wrote a little blog post on how I use #Termux and #BorgBackup to back up my phone to a server of mine over plain SSH. It includes some nuggets 😂 like using the SSH `command` directive to prevent the backup user from getting full shell access.

Curious? Head over to:
https://fabionatali.com/posts/backing-up-my-android-phone-with-termux-and-borgbackup/index.html

⚽🎉💻📱

#selfhosting #freesoftware

Have setup a server with #YunoHost and really liking it so far. It gives me the #Selfhosting projects that I want that I can manage now that selfhosting is a little burdensome with my version Parkinson's. I was considering downsizing my selfhosting menu because I was afraid of catastrophic loss due to poor digit control of my hands and using the terminal for even the most simple tasks. May soon migrate my Mastodon instance... I have all this bandwidth due to needing business class internet in my home. Hate to waste it, not to mention I have unlimited storage space because due to selfhosted hardware. @yunohost

I built Kollect because browser tabs are a terrible reading list.

It’s a native Plasma 6 link collector written in C++/Qt/Kirigami: plain TOML files by default, optional self-hosted FastAPI/SQLite storage, KWallet secrets, MiniMax M3 metadata enrichment, and a proper Fedora RPM.

Small, inspectable software that solves one problem well.

https://blog.hofstede.it/kollect-the-native-kde-link-collector-i-built-for-myself/

#KDE #Linux #SelfHosting #Qt #Development

Karrot is a free open source self-hostable platform for organising grassroots community activism. You can find out more at:

🌱 https://codeberg.org/karrot

You can follow the project at:

🌱 @karrot

If you don't want to self-host, there's a public server at:

🌱 https://karrot.world

#SelfHosting #Activism #Grassroots #CommunityHosting #FOSS

New post on the blog: Data sovereignty through a historical lens. Enclosure acts, sharecropping, company towns, and why the Fediverse matters.

It is not a tutorial. I am just thinking out loud about why I'm doing this.

https://terminaltilt.com/posts/data-sovereignty-and-the-enclosure-of-the-internet/

#DataSovereignty #Fediverse #SelfHosting #Privacy #FOSS #TerminalTilt #BlogPost

Somebody with a botnet has gotten it into their head to try to compromise my family IMAP server. There have been over 200 failed logins from IPs all over the internet every day since June 22, with a peak of 774 on June 25 and an average of 379.
#infosec #SelfHosting #botnet (1/4)

📧 Self-hosting email the hard way from your own routable IPv4 block up https://anil.recoil.org/notes/recoil-self-hosting-2026

#email #selfhosting

Weekly #22 publié.

Navidrome 0.63, GitHub Stars API, Pangolin 1.20, Home Assistant Companion, Backblaze Drive Stats et quelques signaux FreshRSS.

https://cryptolab.re/posts/2026/weekly-22/

#SelfHosting #OpenSource #HomeLab

I've cleaned up my Raspberry Pi selfhosting setup a bit. I'm using two, each in an Argon ONE V5 case with a 1TB NVME drive, running Raspberry Pi OS.

'one' is serving Nextcloud All-in-one, Immich and Vaultwarden via a Caddy reverse-proxy. All using Docker containers, Caddy as a custom build with my domain DNS provider added.

'two' is used as remote borg backup destination for 'one', and later a few monitoring tools.

All three sites are using a wildcard certificate for my domain, and I connect via WireGuard (on the router) when away from home.

Path of least resistance:

I've tried Podman, AlmaLinux, and running a manual install of Nextcloud on Ubuntu. This setup follows recommended installations methods, and gives me fewer things to worry about.

#selfhosting #raspberrypi #nextcloud #immich #vaultwarden #caddy #wireguard

Alt...

Photo of whiteboard with green text and drawings. Left: WireGuard, Caddy, Vaultwarden, Nextcloud, Immich and BorgBackup, each with a check mark. Right: a simple illustration showing server 'one' and 'two' and borg backup flow.

New on the blog: Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy.

A deliberately small, database-free wiki: one application jail, central Caddy ingress, PHP-FPM over a Unix socket, and explicit nginx rules protecting DokuWiki’s private data.

The interesting part isn’t getting a page to render. It’s drawing clean security and backup boundaries.

https://blog.hofstede.it/hosting-dokuwiki-on-freebsd-with-bastille-nginx-and-caddy/

#FreeBSD #DokuWiki #BastilleBSD #SelfHosting #Caddy

Two years after I rewrote my website with #NextJS, the honeymoon is over. As I longed for something simpler to handle my #blog, I gave a try to #Astro, and I wrote about my experience and the challenges I faced.

https://axel.leroy.sh/blog/leaving-next-vercel-for-astro-self-hosting?utm_source=fediverse

#WebDev #SelfHosting

CryptPad is a free open source collaborative online office suite with the emphasis on privacy and "zero knowledge" encryption. You can find out more at:

🌱 https://cryptpad.org

You can follow the project at:

🌱 @CryptPad

CryptPad can be self-hosted online, installation instructions are at:

🌱 https://docs.cryptpad.org/en/admin_guide/installation.html

It can also be self-hosted locally, instructions for local hosting are at:

🌱 https://docs.cryptpad.org/en/dev_guide/index.html#dev-guide

#SelfHosting #Privacy #Office #Encryption #ZeroKnowledge #FOSS

Is this the moment where I get annoyed enough with state and quirks of configuration management tools, and switch my #OpenBSD boxes to somewhat more hands-off #NixOS ? 🤔

#SysAdmin #HomeLab #SelfHosting

The amazing folks at @yunohost are running a fundraising campaign to cover their operating costs for 2026.

I personally make a monthly recurring donation to them but wish I could give more 🥲

If you use their services and you can afford it, please consider donating to their project. Every Euro / Dollar / Yen counts:

🔗 : https://yunohost.org/donate.en.html

#NotAllHeroesWearCapes #SelfHosting #empowerment #resist #YunoHost

En raison des fortes chaleurs actuelles, j'ai décidé de basculer mon infrastructure en « mode résilience ».

En tant qu'administrateur unique de Mes Numériques, je privilégie la préservation de mon matériel pour garantir la stabilité de l'ensemble de l'écosystème durant cette période.

Ce que cela implique :

- Services maintenus : L'accès à l'ensemble de vos outils reste totalement opérationnel.

- Usage transparent : J'ai ajusté la gestion des ressources pour limiter la chauffe, ce qui ne devrait pas impacter votre utilisation quotidienne. Vous ne devriez ressentir aucune gêne notable dans votre navigation.

Je surveille la situation de près et reviendrai à une configuration nominale dès que les températures le permettront.

Merci de votre compréhension et de votre soutien. ❤️

#selfhosting #autohebergement #mesnumeriquesfr #souverainetenumerique #privacy #canicule

Editing #html by hand is so weirdly satisfying. You just add new line and could see changes on page in browser. Cause and effect, direct and quick.

#selfhosting

"Homelabs" are where people set up and run their own physical servers at home. It's the most difficult way to self-host services, but also gives you total control over the server.

If you've got a homelab or are interested, you can follow one (or both) of the homelab discussion groups:

🌱 !@homelab (in English)

🌱 !@homelab_de (in German)

After you follow, the group's posts will start showing up in your timeline. You can post to a group by mentioning it in your own posts.

#Homelab #SelfHosting

New post: I look at the most ideologically "pure" or least problematic general tech choices---stuff that isn't owned by bigots, not openly bootlicking for Trump, DRM- and AI-free, based on open standards, and isn't cartoonishly greedy.

https://www.diversetechgeek.com/least-problematic-tech-options/

#tech #opensource #Linux #CreativeCommons #DRM #selfhosting

Germany's Mecklenburg-Vorpommern completed its Microsoft SharePoint migration with a Nextcloud platform, advancing EU digital sovereignty goals 🇩🇪 🇪🇺
Up to 50,000 public workers will gain open source collaboration tools as Europe reduces reliance on proprietary US software and cloud services 🐧

@FOSSForce

🔗 https://fossforce.com/2026/07/another-german-state-swaps-microsoft-for-born-in-the-eu-open-source/

#TechNews #OpenSource #Nextcloud #DigitalSovereignty #Microsoft #Germany #EU #Europe #Deutschland #Linux #FOSS #Privacy #LibreOffice #Technology #SelfHosting #Public

J’ai publié un guide sur Pangolin SSH : accès SSH privé, terminal web, RDP, bastion Newt, OpenSSH standard et provisioning automatisé.

L’idée : sortir SSH/RDP d’Internet sans transformer l’accès admin en VPN plat, avec un modèle réaliste pour une petite infra ou un homelab.

https://cryptolab.re/posts/2026/pangolin-ssh/

#Pangolin #SSH #SelfHosting #Homelab #DevOps #Linux #CyberSecurity #ZeroTrust

Good morning Fedi friends!

On the agenda today: writing a first draft explaining to newbies how to self-host #GoToSocial with the help of #YunoHost.

Now, to do a step-by-step installation guide I need to create a brand new account, so I can document everything.

I'm a little stressed out thinking of which domain name to use and the fact it would be something like my 20th - yes TWENTIETH - ActivityPub account!!! 🫠

The things you do for the love of the fediverse 😅​

#MySoCalledSudoLife #SelfHosting

Are you into 3D printing, self-hosting and the Fediverse?

If so you might want to look into Manyfold, a FOSS Fediverse platform which lets you upload and share 3D print models:

🌱 https://manyfold.app

You can follow the official accounts at:

🌱 @manyfold@3dp.chat (main)
🌱 @manyfold@makertube.net (videos)

You can host your own Manyfold server using the instructions at https://manyfold.app/get-started/installation (be warned though, installation does require a bit of tech skill).

#3DPrinting #SelfHosting #Fediverse #ActivityPub

#XMPP Community

Vier Rezepte zur Nutzung eines offenen #Chat-Protokoll beim ‘Digital Independence Day’ ( #di_day)!

Erstellt von der XMPP Community um Menschen unabhängiges #Messaging zu ermöglichen.

https://di-day.xmpp.link

#whatsapp #signal #didit #did #dut #indiemessaging #SelfHosting

Alt...

Vier Schalen mit dem XMPP Logo und den Chatapp Logos darüber. Conversations, Dino, Monal and Snikket.

New on the blog: patching FreeBSD machines inside DN42 without giving them a clearnet route.

A small dual-homed VM lazily caches pkg.freebsd.org, update.freebsd.org and ftp.freebsd.org with nginx proxy_store, chases CDN redirects server-side, and serves it all over IPv6 into the mesh. pf default-denies both directions, and clients keep verifying signatures against the official FreeBSD keys.

It is also a public DN42 service: point freebsd-update, pkg or bastille at bsdmirror.chofstede.dn42 and go from empty jail host to fully patched without touching the clearnet.

https://blog.hofstede.it/a-caching-freebsd-mirror-for-dn42-nginx-proxy_store-pf-and-a-dual-homed-vm/

#FreeBSD #DN42 #nginx #RunBSD #SelfHosting

Je constate que #YouTube migre lentement mais sûrement vers le codec AV1 (et le VP9), et je pense faire de même sur mon instance #PeerTube pour au moins doubler ma capacité de stockage.

Mais avant le grand saut, j'ai besoin de vos témoignages : est-ce que je peux basculer sur l'AV1 sans léser ceux qui possèdent de vieux téléphones ou des navigateurs non compatibles ?

J'ai mis en ligne quelques vidéos de test (encodées ou en flux brut). J'aimerais que vous les testiez et me confirmiez si la lecture fonctionne chez vous, en précisant votre matériel et votre navigateur. Merci pour votre aide !

https://peertube.mesnumeriques.fr/w/sMeTfbmzHuzNzu1zMaAtFL

https://peertube.mesnumeriques.fr/w/8Uuxc8CHsR41fmBC9kbcRR

Attention la suivante monte jusqu'à 8K

https://peertube.mesnumeriques.fr/w/r8PiN6sbtFm2kZf26xHyFq

#selfhosting #autohebergement #mesnumeriquesfr #video #souverainetenumerique

Weekly #21 publié.

Au programme cette semaine :

- Immich v3, avec édition mobile, workflows et contrôles d'intégrité
- le projet de TLD .self et ses questions pratiques
- Ente qui publie ses métriques business
- WSL containers en preview
- Plex Pass et le rappel utile sur les licences "à vie"
- quelques signaux FreshRSS autour de Godot, opencode et oomwoo

https://cryptolab.re/posts/2026/weekly-21/

#SelfHosting #OpenSource #Immich #FreshRSS #HomeLab #Linux #DevOps

Immich 3.0 est sorti avec pas mal de nouveautés utiles : édition mobile non destructive, workflows, OCR, transcodage HLS en aperçu, rapports d’intégrité.

La mise à jour reste simple pour beaucoup d’instances, mais il faut vérifier quelques points avant migration : API tierces, `pgvecto.rs`, variables dépréciées, OAuth, VectorChord.

https://cryptolab.re/posts/2026/immich-3-0/

#Immich #SelfHosting #OpenSource #Docker #Homelab

Immich 3.0 has been released with a broad set of improvements across mobile, web, backups, automation, and library management.
https://linuxiac.com/immich-3-0-released-with-big-upgrades-for-self-hosted-photo-libraries/

#immich #opensource #selfhosting

Alt...

Immich 3.0 has been released with a broad set of improvements across mobile, web, backups, automation, and library management.

European institutions seem to be all in when it comes to introducing age verification mandates for citizens in member states: https://digital-strategy.ec.europa.eu/en/library/commission-sets-out-common-approach-eu-wide-age-verification-technologies

I now have daily anxiety thinking about the future of the fediverse.

So how do I channel this fear and turn it into something constructive? I'm going back to writing #selfhosting guides for newbies.

It's a great distraction, which gives me a bit of hope. Especially the next guide, which will cover my favorite fediverse software - #GoToSocial (which is powering this instance) - and how to install and configure it. Your own little home on the fediverse! Lightweight and features-packed.

Surely something like this would fall outside the scope of regulation. Right? Right?

#MySoCalledSudoLife #YunoHost #VPS #AgeVerification #privacy #EUBigTech

My #yunohost server just sent me a diagnostic warning that IPv6 is not properly configured. The server did not reboot, and nothing about the DNS/IP setup has changed. The interface has the same IPv6 address as before, and the AAAA records point to it.

Re-running the diagnostic removed the warning.

Anyone know what could have happened?

#selfhosting

Trying out #Vikunja as a todo / project manager. It's super easy for #selfhosting with #nixos, and just has some media files and an sqlite database to store and backup.

It provides some nice visualisations, I especially like the Gantt-style overview of the tasks.

However the webinterface often requires many clicks for basic things. Typical keyboard shortcuts (ESC to close, CTRL+ENTER to save, ...) don't work everywhere. Also Drag'n'dropping tasks weirdly doesn't work everywhere. 🫤

le T430 non seulement boot, mais il y a une debian installée par mes soins (2018?) qui tourne.
backup, puis install propre et ça part en prod.

#homelab #selfhosting

🛡️ Retour d'expérience : chasse aux bots et scrapers derrière Nginx Proxy Manager

Au programme : architecture custom-block.conf + ai-blocklist.conf, un bug silencieux qui neutralisait tout le blocage, et les patterns observés en live (bots IA, scrapers SearXNG, Tencent Cloud, scanners credentials AWS/GCP...).

Note technique complète ici 👇
https://joplin.blablalinux.be/shares/SDdcZYIFiccbk7MSe807PE

#SelfHosting #Nginx #NginxProxyManager #Sécurité #Linux #AdminSys

Weekly #20 en ligne.

Au menu cette semaine :

- AWS et Azure dans le viseur du DMA
- identité en ligne et vérification forcée
- ATProto comme piste d’identité portable

https://cryptolab.re/posts/2026/weekly-20/

#SelfHosting #Cloud #DMA #HomeAssistant #Windows10 #Privacy

Docker Compose : arrêtez de mettre `latest` dans vos stacks durables.

`latest` n’est pas une stratégie de mise à jour. C’est un tag mutable qui peut rendre vos redéploiements imprévisibles, surtout avec des bases de données, reverse proxies ou services exposés.

Tags explicites, digests quand nécessaire, mises à jour visibles dans Git, rollback simple.

https://cryptolab.re/posts/2026/arretez-latest-docker-compose/

#Docker #DockerCompose #DevOps #SelfHosting

doas vs sudo

#doas #sudo #bsd #freebsd #linux #admin #fediadmin #foss #sysadmin #selfhosting #devops #unix #openbsd

Building a immich only box thinking of going debian and btrfs any other ideas or tips?

It's a 8th gen nuc

Tia

#selfhosting #immich #server #debian

I haven't turned on this raspberry pi 4 8gb of ram in like 3 years. I've been feeling like resurrecting it and setting it up again.

What services should I install on it?
What casing or peripherals should I use?

#Hardware #RaspberryPi #PCB #Computing #SelfHosting

Alt...

A dusty raspberry pi

I built my pool controller on #ESP32 so that I could control it with #homeassistant. Worked great. I was so proud. It had been the least reliable bit of #homeautomation in the house. (Because it was the bit that I had the majority role building 😜)

Then a combination power strike/UPS failure took out my #NAS running #TrueNAS. That NEVER happens. So instead of being super convenient, I spend my weekend trying to rebuild the NAS.

I lost one of the pair of NVMe boot drives and at least one of my SAS spinning rust drives is not working. “zpool import -F -n hope” runs for about 30 seconds and then I get a kernel panic and reboot. I am not a happy camper.

#selfhosting #selfhosted

New post: Monitoring our FreeBSD Mastodon instance.

burningboard.net runs as a stack of Bastille jails on FreeBSD, so I watch it from a separate box with Prometheus, Grafana and Loki. The interesting part is the FreeBSD-shaped gaps: no native ZFS metrics, nothing for the Mastodon API or our S3 media bucket. A small textfile collector fills all of it.

This is how I keep an eye on the very instance I'm writing this on:

https://blog.hofstede.it/monitoring-a-freebsd-mastodon-instance-with-prometheus-grafana-and-loki/

#FreeBSD #Mastodon #Prometheus #Grafana #SelfHosting

What many people misunderstand about hosting your own content (like this social media instance) is thinking we somehow NEED a big audience or Big Tech involvement.

I'm perfectly fine if the world faded away and it was just the thousand of us here. It's like the early days of the web when we had small forums, nobody missed Reddit back then. Federation is a big plus, not a requirement.

It's the same with websites or IRC for me. I know people use Discord, but I still stick to IRC even if there are only about a hundred of us left. I know people use AI now and website visitors are dropping, but who cares? I still keep doing it for those who like to read.

I don't need the whole world involved for this to feel worthwhile. It's mine, I own it, and I host it for as long as I breathe. After that, it won't matter to me anymore, but I hope other admins keep things running the way I did.

#SelfHosted #SelfHosting #OpenSource #Fediverse #Mastodon #OpenWeb #SocialWeb

One of my (adult) sons is very technical. Chip off the old block. I'm troubleshooting a problem with my NAS, and he's helping. We identify one of the 2 boot NVME drives as a culprit. When it's in the system, it doesn't boot. Cool.

So he says:

"I'm going to mark this one with a sharpie until we're sure it's bad."

"Ok"

"Oh, this stupid sharpie doesn't work, I'm gonna go get one that works."

"Good. And throw the broken one out."

Son proceeds to throw the NVME drive in the trash.

I figured it out when I asked "hey, where's that NVME drive you marked with a sharpie?"

#selfhosting #selfhosted

Weekly #19 en ligne.

Au programme :
- Synology DSM 7.4 : déduplication HDD, agent IA, recherche sémantique
- AUR d’Arch sous pression avec une vague de paquets malveillants
- Fedora et le risque des agents IA branchés sur des outils critiques
- Immich v3 RC, Linux 7.1, Lore VCS, KDE Plasma 6.7, Oracle free tier réduit

https://cryptolab.re/posts/2026/weekly-19/

#SelfHosting #Linux #CyberSecurity #OpenSource #DevOps #Synology #ArchLinux #Fedora #Immich

J’ai publié la suite de mon setup opencode + Ollama sur RTX 3090.

Cette fois, je remplace SearXNG par Firecrawl pour donner à opencode un accès web plus exploitable : recherche, scrape, markdown propre, MCP, self-hosted Docker, limites et points de sécurité.

Le but n’est pas de “scraper Internet”, mais de fournir au modèle local un contexte plus propre quand il doit lire de la documentation vivante.

https://cryptolab.re/posts/2026/opencode-firecrawl-remplacer-searxng/

#opencode #Firecrawl #Ollama #LLM #SelfHosting #DevOps

Our Mastodon instance "burningboard.net" is now running on the newly released FreeBSD 15.1-RELEASE

Everything looking fine. No unpleasant surprises. Upgrade process went completely smooth!

Our Stack now:

OS: FreeBSD 15.1-RELASE with Bastille
Mastodon: 4.6.0-rc.2
DB: PostgreSQL 18.4 / Valkey 9.0.3
Search: Opensearch 3.5.0

#mastodon #mastoadmin #fediverse #selfhosting #freebsd @tux @Mathias @AlienJay

RE: https://mastodon.bsd.cafe/@subnetspider/116758330967344651

Bastille makes a great self-hosting platform! Look at this absolute list of self-hosted software ⬇️

nsd, unbound, acme, adguard, gitea, haproxy, homebox, mail, netbox, nextcloud, plex, rustdesk, samba, syncthing, tor, unifi, vaultwarden, and more on one box.

#FreeBSD #BastilleBSD #selfhosted #selfhosting

Alexandre boosted

subnetspider » 🌐 2026-06-16
@subnetspider@mastodon.bsd.cafe

FreeBSD 15.1 is here, and my home server is already running it. :D

Alt...

Screenshot of my home server running FreeBSD 15.1-RELEASE and all 22 jails currently running on it.

Dites, vu l'évolution du prix des disques durs, est-ce qu'il vaut mieux en acheter un maintenant en cas de panne de mon auto-hébergement, ou il vaut mieux attendre parce qu'il paraît que les disques durs vieillissent sur étagère de toutes façons ?

De manière général, est-ce que c'est une bonne idée d'en avoir en réserve ?

#autohebergement #selfhosting #disquesdurs #clouds

Alt...

Évolution du prix des disques durs de 8To. Le prix moyen passe de 280€ en 2022 à 200€ mi-2023, puis 250€ en 2024. Il reste plus ou moins stable jusqu'à mi-2025, puis augmente linéairement jusqu'à aujourd'hui, passant de 225€ à 400€ en 9 mois.

After migrating Mastodon to my servers yesterday, today's project was moving https://terminaltilt.com off Dreamhost and onto self-hosted infrastructure. Tested a few static site generators and landed on Hugo. It is fast, simple, and does exactly what I need. Also spun up https://links.terminaltilt.com with Linkstack while I was at it.

Two domains, two services, fully self hosted.

Feeling accomplished. 💪

#SelfHosting #HomeLab #Hugo #Linkstack #FOSS

Alt...

A screenshot of the Terminal Tilt website https://terminaltilt.com It has a dark blue background with a dark blue bar across the top. The bar at the top says the title "Terminal Tilt" in a range of colors from blue to pink on the left. On the right, there are white text links that say Home, Blog, About, and Links. The middle of the screen says "Hi, I'm Bryan (He/Him)" in teal, blue, pink, and coral from left to right. Below in the middle, white text says: "FOSS Advocate • Privacy Enthusiast • Linux Tinkerer" and underthat more white text says: "Open Source, Privacy, and Linux" Under that are two buttons. The left button is ranging in color from teal to purple from left to right and says "Visit YouTube." The right button says is a teal colored outline button with dark blue background and teal text that says "Learn More." At the footer of the page is another darker blue bar that says: "Copyright © 2026 • Powered by nomad-tech(Hugo) • Made by Bryan (He/Him)"

Hetzner is doing another price increase.

this time it seems to only affect new orders, not existing ones .. but the price increase is pretty steep, like 2-3x or more

https://docs.hetzner.com/general/infrastructure-and-availability/price-adjustment/

#Hetzner #cloud #hosting #selfhosting

The fact that #Anthropic had to take down #Fable5 for users outside of the US by order of the US government shows how critical it is today to rely on US services

Imagine they'd do the same with #WhatsApp, you will not be able to talk to your #family and friends anymore

This should be a wake-up call for everyone to rely on your own server infrastructure, running with #OpenSource #software

#autonomy #digitalindependence #europe #european #decentralization #selfhosting #ArcaneChat #android #ai

The fact that #Anthropic had to take down #Fable5 for users outside of the US by order of the US government shows how critical it is today to rely on US services

Imagine they'd do the same with #WhatsApp, you will not be able to talk to your #family and friends anymore

This should be a wake-up call for everyone to rely on your own server infrastructure, running with #OpenSource #software

#autonomy #digitalindependence #europe #european #decentralization #selfhosting #ArcaneChat #android #ai

Are you an #XMPP operator?
Or are you interested in running your own #XMPP server, but have questions and concerns?

There will be a full day XMPP OpMeet online meeting in autumn, where you are free to stay the whole day or jump in and out just for the sessions you are interested in.

Vote on which dates would work for you (vote open until 2026-06-20):
https://nuudel.digitalcourage.de/1IMTCkRid7Vgbmut

More info (heavily WIP):
https://wiki.xmpp.org/web/OpMeet/2026.10

#selfhosting #selfhost #homelab

🛠️ Server-Upgrade erfolgreich abgeschlossen!

Mein Homeserver wurde soeben erfolgreich auf das brandneue #NixOS 26.05 (#Yarara) aktualisiert. 🚀

Technische Details:

🐧 Kernel: Linux 6.18 LTS

⚙️ Nix-Version: 2.31.5

🛡️ Systemd-Resolved: DNSStubListener deaktiviert, um Port 53 für AdGuard Home freizugeben

📦 7/7 Podman Container (AdGuard, OpenCloud, OnlyOffice, Jellyfin, Audiobookshelf, Homepage) & Caddy laufen stabil nach Hot-Reload.

💾 Backup: BorgBackup um 20:00 Uhr erfolgreich durchgelaufen.

Alles läuft reibungslos im grünen Bereich!

#SelfHosting #NixOS #Homelab #linux

Alt...

Eine Webservergebotsbeschreibung auf einem Bildschirm. Es gibt mehrere Dienstdomänen, Porttypen und Updatestatus.

Weekly #18 est en ligne !

Au menu :
- Homebrew 6.0.0 : tap trust, Linux sandbox, brew vulns
- Zcash Orchard : faille de 4 ans découverte par Claude Opus, impossible à savoir si exploitée
- Let's Encrypt : trop seul au monde ?
- Strava API paywall, Euro-Office, phishing OSS

https://cryptolab.re/posts/2026/weekly-18/

#selfhosting #homebrew #zcash #letsencrypt #sécurité #linux #ops

Mes services publics font peau neuve !

J’ai mis à jour ma page de services publics. Désormais, pour chaque service, vous trouverez un bouton #CryptCheck dédié.

En un clic, vous pouvez vérifier en toute transparence la configuration #SSL et la sécurité de chacun de mes outils auto-hébergés.

🔗 Découvrez la liste complète ici : https://blablalinux.be/mes-services-publics/

#SelfHosting #LogicielLibre

@homelab OK, after playing around a tiny bit, it seems that the code for this exists in #KaniDM
- https://github.com/kanidm/kanidm/pull/2968
- https://github.com/kanidm/kanidm/pull/3535/
but what doesn't exist is ability to reach it and set that up for a user. Oh well.

#Privacy #Security #SelfHosting #SSO

Blog update:

https://blog.hofstede.it now loads zero external resources. Fonts and Bootstrap are self-hosted, the requests to Google Fonts and jsdelivr are gone. All visits stays between the visitors browser and my server.

Also new:
- Full-text search (Pagefind: fully static, no search backend, no tracking)
- Series navigation for multi-part articles
- Older/newer article links
- A proper 404 page

Static sites don't need third parties.

#DataSovereignty #SelfHosting #Pelican #FreeBSD #Blog

GitHub - Crosstalk-Solutions/project-nomad: Project N.O.M.A.D, is a self-contained, offline survival computer packed with critical tools, knowledge, and AI to keep you informed and empowered—anytime, anywhere. · GitHub - Project N.O.M.A.D. is a self-contained, offline-first knowledge and education server packed with critical tools, knowledge, and #AI to keep you informed and empowered—anytime, anywhere.
https://github.com/crosstalk-solutions/project-nomad
#selfhosting #debian
via https://magicfab.ca/liens

Just updated my #Nextcloud to 34.0.0 . Everything appears to have just worked out of the box and they've added explicit support for #EuroOffice if you want or are required to use that.

Link: https://nextcloud.com/blog/nextcloud-hub26-spring/

#SelfHosting

Huh, looks like the new ASes, with LLM-bots attacking servers, just dropped

TLDR: there are AS12876 and AS16276 — both located in France (Scaleway SAS and OVH SAS). My Asterisk self-hosted box was attacked from the next IPs: 62.4.15.81 and 51.222.38.229.

Today, after I was checked my e-mail, I found three warnings from Monit about fail2ban exhausting limits in my small server in the kitchen (Intel Atom N2800 1866 MHz and 4 Gb of RAM). First e-mail warns about fail2ban ate 200 MB of RAM, next about 500 MB of RAM and the last e-mail warns me that fail2ban ate 2 GB of RAM

#AInt #LLM #selfhosting #bots

Alt...

Emacs Gnus with e-mail from Monit opened. In the e-mail Monit warns me about fail2ban ate 2.1 GB of RAM when the limit is 200 MB.

Then, I logged into my box and found that fail2ban, Asterisk and PostgreSQL aren't feeling well. The system load and the traffic amounts was unusual — the parameters are completely differs from which I used to see since server installation.

I checked fail2ban logs and found that it is still parses the data from Asterisk log which were happen at near 5 hours ago And there were total mess in the Asterisk security.log (see screenshot) — some dumb (as it programmers ) LLM-bots were constantly trying to connect to my Asterisk server with HTTP protocol, evaluating it as a web-server, I dunno

And the Asterisk logs became enormously big — while newsyslogd wasn't invoked — they eat at near 4 GB . I didn't specify the maximal size of Asterisk logfiles in the /etc/newsyslog.conf, because I wasn't expected a lot of lines in the PBX logs, which is in use only for my relatives.

#Asterisk #selfhosting #AInt #LLM

Alt...

top output in the terminal of NetBSD server, showing three CPU-consuming processses: python3.12, postgres, asterisk.

Alt...

Excerpt from failban log showing how it processes events from asterisk logs, happened 5 hours ago.

Alt...

Video with as fast scrolling lines -- there is a tail -f security.log for my Asterisk installation. Each three lines is an unsuccessfull attempt to break into my Asterisk from LLM bots.

Alt...

ls -lh in the /var/log/asterisk. Size of asterisk.log: 1.2 Gb, queue.log: 4.4 Kb, security.log: 2.5 Gb.

Some graphs from #Munin with LLM-bots attacking my kitchen server.
Graphs spans to the whole week, so on the left there is a normal state of my server. And on the right — attack is happening.

#NetBSD #LLM #AInt #selfhosting

Alt...

Graph of CPU usage, which going high after LLM bots attack (at near 08 Jan Monday). At near 2 CPU cores were used by LLM bots, trying to abuse my PBX as an Web-server.

Alt...

Graph with main network interface bits per minute — before attack there were almost no data receivin/transmitting, only some cron jobs at night. But after attack there are at near 20 Mb per minute both receiving and transmitting.

Alt...

Graph with PostgreSQL connections. Active connections has green color. Before the attack there are almost no active connections, but after attack there are a lot of them, since Asterisk using PostgreSQL as a main backend.

Alt...

Load average for my server. After attack it increased at near 4 times.

Le guide IPv6 (#OVH / #NPM / #Proxmox / #Docker) fait peau neuve !

Vous connaissez déjà cette page de mon wiki, mais elle vient de s'offrir une réécriture complète !

Pourquoi ? Pour couvrir proprement deux cas de figure bien distincts selon vos besoins. Que vous soyez dans une config ou dans l'autre, tout y est détaillé pas à pas.

👉 À checker et à mettre dans vos favoris ici : https://wiki.blablalinux.be/fr/deploiement-ipv6-ovh-npm-proxmox-docker

Bonne lecture et bon déploiement !

#IPv6 #SelfHosting #SysAdmin #Linux #OpenSource

It's currently just a simplified version of my existing blog, but I'm hosting this website on my Raspberry Pi Zero for testing purposes:

https://fsck.lol

We will see how things go over time, then possible port over the "real" thing 😛

#raspberrypi #nginx #alpinelinux #selfHosting

New post: IPv6 Foundations.

IPv6 isn't "the future of the internet." It's the internet. IPv4 is the relic we keep alive on NAT life support.

A laid-back tour through the basics: how the addresses are built, the two rules for crushing out the zeros, a /64 per subnet so you stop counting hosts, SLAAC, and why blocking ICMPv6 is a self-inflicted wound.

And no, dual-stack isn't a destination. It's a burden.

https://blog.hofstede.it/ipv6-foundations-the-internet-protocol-you-should-already-be-using/

#IPv6 #Networking #SelfHosting

So the federation is working on my #Wanderer instance, and you can actually follow me there from any #ActivityPub instance: @yehor@wanderer.glitchy.social

The issue was actually in my #Mastodon instance: https://mastodon.glitchy.social/@yehor/116713584141417614

#Fediverse #homelab #selfhosted #selfhosting #selfhost

✨ Demain 18h : rendez-vous mail !
Abonnés à la campagne Wiki, attendez-vous à recevoir demain une belle dose de contenu technique pour vos serveurs. Soyez prêts ! 📖
#BlablaLinux #Wiki #Tips #SelfHosting

On t’explique en 20sec PluMail ?

#plumail
#Fediverse #Mastodon
#CHATONS
#LogicielLibre
#AutoHebergement #SelfHosting
#Privacy
#Email
#SouveraineteNumerique #Linux

Die eigene Nextcloud zu betreiben geht einfacher als gedacht. Dank Nextcloud AIO und meinem ausführlichen Video-Tutorial gelingt die Installation auch ohne Vorkenntnisse. Und falls doch Fragen aufkommen sollten, steht unsere Community mit Rat und Tat zur Seite.

https://gnulinux.ch/video-nextcloud-all-in-one-dein-einstieg-ins-selfhosting

#nextcloud #linux #selfhosting

Wait, you guys are paying people to host your private data?

#selfhosting #diday

Weekend project that turned into infra I actually run daily: MastoSum.

The stack: RHEL host, 100% rootless Podman. Web on FastAPI, Celery worker/beat/flower, PostgreSQL 16, Valkey. All on userspace networking (pasta), images built & shipped by a self-hosted Forgejo runner. No root daemon, no privileged anything.

What it does: tracks technical hashtags all day and produces one daily briefing, every point linked to the original post + author. It reads only public hashtag timelines, credits every source, and trains on nothing.

And yes, an LLM writes the prose: a local Ministral model from French lab Mistral AI, running on my own hardware. No cloud, nothing leaving the box. Saying that plainly, not burying it. The whole design goal was to point readers *back* at the authors, not replace reading them.

Example output:
https://mastosum.linuxserver.pro/s/OGuLC5whmCS1ET9jAe9leg

#Linux #Podman #RHEL #SelfHosting #Fediverse #Python

Der di.day bietet nun auch die Möglichkeit sich als Helfer_in einzutragen. Ihr findet mich hier: https://experts.di.day/experts/17

Tragt euch doch auch ein, damit wir möglichst vielen Menschen helfen können ihr digitales Leben etwas freier und sicherer zu gestalten.

#di #diday #dutgemacht #linux #fediverse #selfhosting

There is no Cloud!
Only someone else’s #selfhosting

Log colorisés 😮 Passe au niveau supérieur pour la lecture de tes logs Nginx en terminal !
👉 https://wiki.blablalinux.be/fr/coloriser-logs-nginx-terminal
#DevOps #Linux #Nginx #SelfHosting

UGREEN NAS: ZUGRIFFSPROTOKOLLE VERSTEHEN: SMB, NFS, WEBDAV ETC. – TUTORIAL

https://gadgetchecks.de/ugreen-nas-zugriffsprotokolle-verstehen-smb-nfs-webdav-etc-tutorial/

.
.
.

#ugreennas #nas #ugospro #smb #nfs #webdav #ftp #sftp #ftps #rsync #dlna #netzwerk #homeserver #linux #windows #tutorial #netzwerkspeicher #selfhosting #mediaserver #datensicherung

GNU/Linux Studio

🔥Navidrome & Filebrowser (Together)‼️

Navidrome's dev suggested it; I built it. @navidrome

➡️ Navidrome How-To: https://tech.haacksnetworking.org/2025/10/29/setting-up-navidrome/
▶️Navidrome: https://gnulinux.studio

📂 Filebrowser How-To: https://tech.haacksnetworking.org/2025/12/09/secure-filebrowser-instance/
📁Filebrowser: https://upload.gnulinux.studio

Credentials for Both:
- User: pubglug
- Pass: musicisawesome

🎁 https://liberapay.com/oemb1905/

#debian #navidrome #subsonic #airsonic #music #selfhosted #selfhosting #opensource #gnulinux #linux #freesoftware #floss

Alt...

Filebrowser is a "finished product" screenshot from git notes

Alt...

Navidrome in chromium minimized view with Nord theme and digital vinyl spinning during play of Marley's uprising

Alt...

Navidrome's dev suggests Filebrowser in official FAQ

Alt...

Airsonic Advanced instance pic

We were without power for ~18 hours yesterday, but I’m still determined to eventually switch hosting my personal blog over to my local Raspberry Pi Zero

https://hermes.btxx.org/

#alpinelinux #raspberrypi #selfHosting

Avis de tempête sur le serveur !
Quand le géoblocage IPv6 passe à la vitesse supérieure, ça donne ça : un joli mur d'IP qui n'iront pas plus loin ❌
Sécurité max en place, mes conteneurs respirent ! 🛡️
#SelfHosting #IPv6 #SysAdmin #Securite #Geoblocking #OpenSource

🤨Interested in self-hosted podcasting?

👉Prefer free, libre, and open source (floss) solutions?

Maybe a @castopod instance will work for you ! My write up and installation notes can be found here:

➡️https://tech.haacksnetworking.org/2026/05/29/spinning-up-a-castopod-instance/

If you would like assistance, have questions, or enjoy discussing GNU/Linux, consider joining the PubGLUG for support:

⁉️https://matrix.to/#/#introductions:gnulinux.club

#castopod #podcast #socialmedia #gnulinux #freesoftware #selfhosting #selfhosted #debian #floss #opensource

Alt...

castopod icon / pfp

LocalAI - The free, #OpenAI, #Anthropic alternative. Your All-in-One Complete AI Stack - Run powerful language models, autonomous agents, and document intelligence locally on your hardware.

No cloud, no limits, no compromise.
https://localai.io/
#ai #selfhosting
via https://magicfab.ca/liens

My three nines are about to go away, 😋 Power went out earlier and I've got to leave so I'm not leaving the generator unattended.

#HomeLab #SelfHosting

Alt...

A screenshot of my UptimeRobot page showing several services at over 99.9% uptime for the past month. One of them is at 100%.

Alt...

A screenshot of my apcupsd monitor app showing the server is currently running on battery power and has 33 minutes remaining.

@jakob
Hab's mal geboostet, vllt. hilfts. 😉
#Pixelfed #Linux #FOSS #selfhosting

If you run your own local DNS servers at home, do you: (select all that apply)

Comment with your preferred DNS stack and privacy friendly DNS providers.

#FreeBSD #Linux #selfHosting #DNS

Merci au projet https://transmute.sh pour cet excellent outil.

#SelfHosting #OpenSource #Linux #BlablaLinux #Transmute #FileConversion

Nextcloud is free open source software for making your own personal cloud. This lets you completely control your data instead of relying on dubious corporations like Google or Microsoft.

I've done a non-technical beginner's guide to Nextcloud at:

🌱 https://growyourown.services/beginners-guide-to-nextcloud

You can browse the Nextcloud official website at:

🌱 https://nextcloud.com

You can also follow them here on the Fediverse:

🌱 @nextcloud (general account)
🌱 @nextcloud_main (video account)

#SelfHosting #FOSS #Nextcloud

A security researcher warned Microsoft in December about the exact attack vector that just got used to breach 3,800 of GitHub's internal repositories. They disclosed it in five tweets. Not their blog. Not their status page. Five tweets.

Let that sink in.

Apparently we've hit Act III of the ongoing decline of GitHub.

https://blog.ppb1701.com/phase-3-act-iii-the-building-is-on-fire

#github #microsoft #security #vscode #vscodium #bigtech #userhostile #blog #privacy #opensource #selfhosting #supplychain

Any of my followers interested in running a mail server with #OpenBSD 🐡 and want to help testing?

Working on the setup and documenting it along the way. So curious to learn if someone wants to tag along or test it.

#selfhosting #digitalautonomy #mailserver #email

Reminder to people who are getting into

#selfhosting there's this thing called #freedombox

https://www.freedombox.org/

https://en.wikipedia.org/wiki/FreedomBox