$650 for 5 x 14tb hdds with tax and shipped. Wish I bought more then...

Now going for $355 each before tax.

It just occurred to me that I'm now one year into this crazy selfhosting journey.

I started off with Docker for Windows, then moved everything over to Proxmox after a couple of months.

At the beginning I had no clue what I was doing (and still don't in many ways), but I really feel familiar enough with Linux at this point that it feels like I could tackle any problem and host any app if I wanted to. I'll admit, however, that most of the heavy lifting is done by AI. I could never have gotten this far this fast without the use of AI.

There's a lot of apps I've tried but then discarded later on, but these ones are the ones that remain. I'm really happy about all of them :)

I'm curious to see what the next year brings.

Everyone loves a clean, unified server rack, but my standby node (lvgale) is an absolute physical abomination. It is a Frankenstein collection of mismatched parts and bolted-together VRAM that has no business running efficiently.

The Hardware Setup (lvgale)

• CPU: Intel Core i7-6700K.
• GPUs:
  • AMD RX 580 8GB VRAM (PCIe x16)
  • AMD RX 570 8GB VRAM (PCIe x1)
  • NVIDIA GTX 1660 Super 6GB VRAM (PCIe x2)
  • NVIDIA GTX 1070 8GB VRAM (PCIe x1)
• The Bottleneck: Activations must travel across severely constrained x1 and x2 lanes between entirely different AMD and NVIDIA architectures.

The Software Engine

• The cluster is orchestrated by Slipstream, a custom Nuitka-compiled Python orchestration engine.
• Here, it utilizes a mixed-vendor Vulkan backend with Flash Attention enabled to maintain stability across the fragmented topology.

Concurrent Inference Performance

In all cases seamlessly handling OCR and complex vision parsing.

• Qwen3.8:27b-vision: 3.82 t/s.
• Qwen3.5:9b-vision: 4.75 t/s.
• Qwen3.5:2b-vision: 12.47 t/s.

While the 2B model runs slightly faster on a modern laptop iGPU due to unified memory, keeping a 27B model stable across this mixed-architecture, low-bandwidth topology without crashing the Vulkan driver is a massive win. For deeper technical architecture details, the engine is documented at Slipstream-LLM.com.

Hello Hello everyone!

In the new release I've added some pretty interesting stuff, as an example now you can control your Homeassistant directly in your dashboard

Another thing, you can now use Dynacat on windows easier than before! I've added an installer that handles everything for you, updating is also easy all you have to do is dynacat update and yes there is a button to just give me the fucking installer (checkout the Github readme).

Here's the list of less important, but also worth noting changes:

- auto-redirect-oidc auth option to skip the login page and go straight to the OIDC provider

- reddit widget still works without authentication

- cross-page search now supports auth permissions

- you can now set backgrounds easier! both per page and global.

For those who don't know already: What is Dynacat?

Dynacat is a selfhosted dashboard that allows you to connect every service into one page. It has OICD builtin, Per-user access control, It looks awesome and is really fast. It has dynamic updates that allow you to see changes without refreshing your browser page.

We also have diffrent widgets built in such as Speedtest, Todo, Calendar with arr releases and many others!

Learn more here:

- https://dynacat.artur.zone

- https://github.com/Panonim/dynacat/releases/tag/3.0.2

I have my homelab defined in multiple docker compose files that are stored in git, and when I push a new commit a pipeline deploys the changes.

Are there any tools that can generate a PR when a new version is released with a summary of breaking changes?

Currently I use whats up docker, while fine for keeping track it results in a bit of manual labour.

We see a surge of exposed vulnerabilities and zero-days emerging out of the blue. Some less severe and some very severe (e.g. php2shell, the python thing (i forgor)). The (small) devs are also being flooded with random pull requests, information, vulnerabilities, which are often garbage made by people that rely only on AI instead of their brain. Which delays patches more and the whole supply chain of software is fucked.

So I was wondering if having a reverse proxy through an SSL exposing services still secure enough for remote access or should I switch to a direct VPN tunnel like wireguard.

My current setup is the following:
- Nginx Proxy Manager handling SSL certs (man i love this container)
- Exposing 443 and 80 on my router to the Proxy Manager (i have a dynamic ipv4 address directly to the world)
- Cloudflare DNS-zone "tunnel" with dynamic A record updater (to hide my ip more or less)
- SSL through Let's Encrypt

I am an electrical engineer and the whole self hosted thing was a hobby at first, but now... I want this whole thing to "just work". I do not have time to work on my setup every day for 3 hours, or to live in fear that my station gets compromised and then I have to build everything all over again. The stuff I'm hosting is basically Nextcloud-AIO, Immich, Jellyfin and Navidrome. I am usually the only user of the server. Maybe give credentials of jellyfin to friends. I keep updating the system every month, but looking at the development of the shit show with AI, this is definetly not enough.

My threat model is pretty low, but I want to save myself from the script kiddies and regular scans that happen all the time. This kind of security by obscurity works less as every day passes.

Does anybody have a similar experience?

EDIT 1: I could live with a only vpn accessible server instead of the reverse proxy solution. It'd be a little inconvenience but for the sake of security i would take it.

EDIT 2: Thank you very much for your replies. I want to clarify that the reverse proxy is not seen set up for security. I only relied on the authentication of the service itself, which is infact (as I see now) is hella insecure. I guess going for mTLS or SSO to even access the website (since most of my traffic is HTTPS anyways) is a good start.

EDIT 3: After doing some more thinking, banging my head with lots of services and securing the reverse proxy with layers and layers, I came to a conclusion to set up a VPN e.g. via wireguard or tailscale directly and call it a day.

Kinnect v1.1.0

Full rewritten with a more modern UI - includes dark mode!

Why this exists

This project exists to fill a gap. There are plenty of genealogical apps out there—even self-hosted ones like webtrees. Those tools tend to be aimed at serious genealogical research. Most people I know would find in adequate to simply have a family tree they can navigate and a straightforward way to stay in touch.

I have come to dislike large social platforms: more ads than conversation, and mechanics like likes and dislikes that feel needlessly toxic. Kinnect is built for family members who want to share photos and videos, view a family tree, and talk to each other—on infrastructure you control.

Features:

• Interactive family tree
• GEDCOM import (optional)
• Home feed
• Profiles and life events
• Photos, Videos, Documents
• Chat (chat rooms + direct messaging)
• Maps to see where everyone is, where events took place or where photos were taken.

Does anyone have any nifty solution for iPhone backups? I know the only official way would be to have iTunes installed and maybe copy the backup file from this to my NAS. Is there a self hosted server out there somewhere?

Hey everyone,

Right now my homelab runs on a single Proxmox node (inside a mini PC with 64GB of RAM and 12 vCPUs) hosting an OPNsense VM, other VMs, and a single unprivileged LXC container running Docker. Inside that Docker LXC, I host a lot of different services:

• Media / photos: Jellyfin, Immich, Audiobookshelf, arr stack (routed through Gluetun)

• Daily drivers / self-hosted tools: Vaultwarden, Home Assistant, Gitea, Obsidian sync, FreshRSS, SearXNG

• Infra / ops: Nginx Proxy Manager, Prometheus/Grafana, Uptime Kuma, Backrest, Watchtower

It works fine, but I'm considering spinning up a Talos Linux VM and migrating these services over to it as a single-node cluster. I have some reasons to consider this:

1. Learning: I extensively used Kubernetes a few years ago at work, but I've never touched Talos and want to get hands-on experience with it.
2. Future expansion: Right now it's all on one box, but if I pick up a couple of mini PCs down the line, I want an easy way to just join them as nodes instead of having to re-architect everything from scratch.

For those running Talos in their homelab:

• Is Talos a solid fit here, or does it add too much friction for stateful self-hosted apps compared to something like k3s or keeping Docker?

• How is storage management with Talos in practice (local PVs / NFS shares)?

• Any gotchas with hardware passthrough (like iGPU for Jellyfin transcoding) inside a Talos VM on Proxmox?

Would appreciate any insights or gotchas from people who've done this. Thanks!

Hi all,

This is the biggest update so far. I've focused on making writing safer, connecting notes better and improving search.

Writing safely

• Auto save
• Note versions with browse and restore
• Spellcheck

Connected notes

• Internal links now open the note directly, shift-click opens it in a side panel
• Collapsible headings, remembered per note
• Redesigned table of contents, the bars expand into headings on hover

Search

• Search result preview
• Search result sorting
• Highlights in the preview
• Search query is kept when you reopen search, so you can continue where you left off

Editor

• Simple table editor
• Image previews in the editor
• Checklists can be ticked without switching to edit mode
• Tab and Shift+Tab to indent and outdent list items
• Copy button for code blocks

Organization

• Tag colors
• Bulk archive and delete
• Import now supports title, tags and created/updated dates from frontmatter

API tokens

I've replaced MCP tokens with API tokens. You can now limit each token to specific tags with read or write access, so for example your AI assistant can only see your work notes and nothing else.

Security fix

I've fixed a stored XSS issue in note titles and search results (CVE-2026-97868).

Links

• Project page
• Demo
• Docs
• GitHub

Quick refresher on the features

• Distraction free notes app
• It's built using Go and uses SQLite database for storage
• It's fast and uses less memory (~20MB) and CPU resour
• Supports standard Markdown with tables, code, etc
• It's built using as few dependencies as possible, so
• Has search with BM25 ranking
• Designed thoughtfully with minimal color palette

Let me know what you think!

Hi r/selfhosted,

(Public since July 2026; the git history was squashed in October when I cleaned up the repo, so it shows only one commit.)

It started as a learning project: I wanted to figure out how to build a mobile app, so I made a little player for my own music. Then I wanted it in the car. Then I wanted to listen together with someone else. Then I needed my own server to make that work, then a web player, then a radio station built from my own library… and somewhere along the way it got completely out of hand. 😅

I'm from the Netherlands and built all of this in the evenings and weekends, mostly for myself. It's now at a point where I think other people could enjoy it too, so here it is: JLTamp, a music server for the files you already own, with its own apps.

Try it without installing: https://demo.jltamp.nl (user demo, password demo). It runs the public Docker image with a small library of CC-licensed music and resets every night.

What I ended up building (mostly because I wanted it myself)

• Scans MP3, FLAC, ALAC, WAV, AAC, OGG and Opus; multiple libraries; your music is mounted read-only, so it never touches your files
• Apps for Android and iOS/iPadOS, plus Android Auto and CarPlay, Chromecast and a built-in web player
• Listen Together: synced sessions with reactions and passing the host role around
• A 24/7 radio mixed from your own library, with a weekly schedule
• Karaoke (vocals off, synced lyrics) and a party mode where guests request songs from their phone's browser, no account needed
• Multi-user with invites, smart playlists and listening stats
• A Subsonic/OpenSubsonic API, so Symfonium, Feishin, DSub and others work too, if you'd rather not use my apps
• The apps speak seven languages, including Frisian
• An optional, separate self-hosted AI engine for prompt-based playlists (off by default, nothing leaves your network)

How to run it

One container, SQLite, amd64 and arm64 (Raspberry Pi, Apple silicon, NAS):

docker run -d --name jltamp -p 32400:32400 \
  -v /path/to/music:/music:ro -v jltamp-data:/data \
  ghcr.io/jltelectronics/jltamp-server:latest

Open the web UI, create the admin account, add a library. There's also a Compose file, an Unraid template and a CasaOS app (store submission pending).

Links

• GitHub (MIT): https://github.com/JLTelectronics/JLTamp-server
• Google Play: https://play.google.com/store/apps/details?id=com.jltamp.app
• App Store: https://apps.apple.com/app/id6807401608

Honest notes

• Who's behind it: just me, in my spare time. I use it every day, so the basics are solid, but it's still a hobby project that grew up fast. Expect rough edges, and please tell me about them on GitHub.
• AI disclosure: a large part of the code, mainly the backend, was written with AI coding assistants. I decide what gets built, review the changes, and use and test everything on my own setup.
• What it is not: it's music only. No video, no audiobooks, and it doesn't provide any music; it plays the files you already own.
• Plex users: the default port is 32400, the same as Plex. Map a different host port if you run both.
• No lock-in: no external account or cloud service needed. Your data lives in one SQLite file, and the Subsonic API means you can use other clients if you don't like mine.

This is the first time I'm showing JLTamp to people outside my own circle, so I'm honestly a bit nervous. Any feedback is welcome: what you like, what's missing, and what feels off. If you try the demo or spin it up yourself, I'd love to hear how it goes. Thanks for taking the time to read this! 🎶

I have a locally hosted git instance that all of my compose files live in. All of my Komodo stacks pull from the repos in my git instance, and each repo is configured with a webhook to trigger builds on a push.

I have custom DNS routes set up in my internal network; I'm fudging the URLs here, git has git.home and komodo has komodo.home. I can fully access and use both services at their respective URLs. I can also confirm that Komodo can read Git; it is able to pull files just fine.

But the webhooks, which previously were working fine, have stopped working. Whenever git tries to use one of the webhooks to trigger a new build, it gets the following error:

Delivery: Post "https://komodo.home/listener/github/stack/6adbb97a51bdfd0051a9640d/deploy": dial tcp 10.0.3.14:443: denied by egress policy: komodo.home (10.0.3.14) needs an explicit IP allow entry (non-public address)

This isn't a network issue; like I said this was previously working. I suspect Komodo updated and added a new requirement for services calling its webhooks but I can't find any trace of that, and searching for this problem hasn't yielded any useful results.

I'm rather hoping someone here uses Komodo and knows how to fix this.

TLDR a refurbished 12TB Seagate IronWolf NAS drive has started dying, went from 0 to 1528 re-alloceted sectors in 2 months and rising exponentially. i bought it off amazon and bought the extended 4 year warranty.

What should i expect from amazon? refund or replacement?

Should i wait for the drive to die completely before i file a claim?

Any experience would be welcome.

i have vps right now, but in indonesian region, the price is too high for 6vcpu and 12gb ram, for 3 month is $280 , yes it sound cheap in USD, but in IDR is about 4.9 million

i tried contabo, but i got so much trouble like sometime their server got down, the bandwith speed is almost 1mb/s

I want to create a native LXC for Authelia via the community script, but one thing caught my eye: "During installation, you will have to input your domain (ex. domain.com). Authelia will use auth.domain.com"

What if I don't own a public domain? Can I not use this? I just use Caddy to direct reserved IPs to http://*.home (e.g., http://Jellyfin.home) with no SSL cert. If I strictly need an SSL cert (e.g., for Vaultwarden to connect to Bitwarden frontends), I use Tailscale Serve instead.

Is there a way to still use it? Should I consider alternatives like Rauthy, Hanko, or Casdoor? Hanko's use of passkeys does intrigue me...

Hi there.

I have some background in desktop C# programming and basic skills at databases from my former industry jobs, but I'm a total newbie at web technologies.

I want to digitalize my dairy farm / cheese production day to day operation and data. Currently we have a mix of written stuff that we feed in excel spreadsheets, it's time consuming and quite a mess overall. I want a database with our animals, their lineage, food ration, grazing, their health and care actions, milk production, products we make out of milk. 2 to 4 users, the goal is to be able to access and input most things on our smartphones, with more advanced usages done from a PC. I need custom forms / actions for quick day to day specific data visualization and input on mobile. We aren't sitting in front of a screen, we do stuff all day with our hands, if using our smartphones is cumbersome compared to grabbing a pen and the paper notebook and forms we currently use, this isn't worth it.

I'm searching for a free, ideally open-source option that I can host on a cheap VPS (2 vcpu / 4 GB RAM ideally), with minimal maintenance, good reliability, something I can count on long term (10y+).

I don't care about the AI vibecoding features most of the tools are advertising. I am definitely vibecoding some targeted stuff that I can at least broadly understand : SQL queries, javascript formulas, small custom UI widgets...

I've been exploring multiple options, done a few mock up in some of them. Ideally, I would prefer something that include the database and its management, but I think I can handle putting together and using a postgreSQL DB on my own. In fact, I would prefer putting my data in a standard DB like postpreSQL instead of being locked forever to a specific app.

- Grist : First one I tried, too basic.

• Pros : Seems to be something I can trust long term, feels polished, desktop excel-like experience is nice, database management is well though for what I need, python API and formulas are a powerful touch.
• Cons : data lock-in, included UI/UX components are too rigid and pretty terrible on mobile. UI can be extended through html/javascript so ended up vibecoding a lot of stuff for seemingly basic things, which will inevitably turn into a maintenance nightmare. That, and I also feel you quickly end up with python code spread out everywhere. Hardware requirements are quite high (8 GB RAM minimum). Integrated DB isn't really a DB, and read some reports saying not-so-large databases quickly degrade performance.

- Saltcorn : seems perfect, on paper...

• Pros : include DB management backed by postgreSQL, MIT, all basic UI/UX components I need are there, extensible through custom react components, very lightweight (2GB RAM), UI can be made to work on mobile.
• Cons : Tiny community, one-man project, very sparse documentation, UI builder is clunky, included components aren't very feature rich, everything is a bit rough, data querying beyond basic stuff is awkward (I feel it would end up being easier to just use SQL)

- REI3 : could be it, but...

• Pros : include DB management backed by postgreSQL, MIT, UI components are good, not too much abstraction between the DB/code and their visual editors, powerful backend / frontend scripting, UI editor works well and UI looks good on mobile.
• Cons : no idea about the hardware requirements, documentation is a bit lacking (but the sample projects kinda make up for it), tiny community, seems to be mostly a one-man operation judging from the git commits, no custom UI components and no way to define anything that isn't data driven (for example, you can't make an input field that isn't a DB field).

- Budibase : Didn't tried too deeply, so interested in more opinions. Good with an external postgreSQL DB ?

• Pros : UI/UX customization *seems* good, established tool, seemingly good docs / online resources.
• Cons : data lock-in and integrated DB engine has weird limitations (no self-reference in a table, seriously ?) so using an external postgreSQL DB seems mandatory, hardware reqs a bit high (6 GB RAM min), feeling the tool could disappear behind a paywall overnight.

Amongst other tools, I also looked at a Lowcoder + PostgreSQl option, but I feel this would require a lot more work and technical know-how to get a reliable application.

I also found (but didn't test) NocoDB and Baserow, they seem to be worse versions of Grist that don't address the issues I have with it.

Did you use any of those tools ? Am I mistaken on some points ? What would you use ?Any other option that would be a good fit for my needs ?

I am not sure what to add. It's one of those "Wordpress" kind of solutions that everyone uses and nothing else. Any tips?

My friends and I are looking into storing each other's very important documents and having distributed infrastructure for resiliency. For instance I store my vault which contains an encrypted copy of my passwords vault, medical records, digital birth certificate, etc. This is then zfs replicated via TrueNAS over a site-to-site VPN to a identical machine at my parents house.

I was inspired by a talk to increase preparedness with my closest circle of friend in the event something happens to one of us. Could be as simple as one of our houses catch on fire and losing everything. We could then access our info off of other people's servers. This wouldn't be much data (a few GB at most, all pdf/txt really) but not allowing the person that's hosting to have direct access would be neat. Would I just have to look at turning some old PC's into small TrueNAS servers and setting up all my friends' places? (We are all generally tech savy)

On the other side of this, and I’m not sure where to ask this. I want to look at having shared access to the data in emergencies. Let's say something was to happen and my spouse medically and my parents need access to records or info. They could go to my friends and say we need access to X. If enough of them say yes then they could use Shamir’s Secret Sharing to access my vault and get into it. There is also the side of while I am trusting my friends enough that this would work. In the event someone is no longer in this group or passes we can revoke/delete their vault/access. Maybe having a master account that requires SSS to get into? I would be interested to know if anyone knows of applications using SSS.

This is something I want to look into and see how it would look and find security concerns from outside viewers before implementing.

Looking at the github release notes for the daily builds, I can't see anything about PHP being mentioned but I turned swag off on my server until this can be addressed so I have a vested interest haha. Can't seem to find a centralized place where anyone is discussing either.

https://github.com/linuxserver/docker-swag/releases

I'm building out my homelab and planning a dedicated environment for downloading, testing, and managing free and open-source software.

My main priorities are security, isolation, automation, and protecting the rest of my network from potentially untrusted downloads.

Planned architecture:

Proxmox
  |
  └── Downloads VM (Docker + VPN)
        |
        | Read/Write
        v
      Local SSD
        |
        | Restricted Write
        v
TrueNAS
  ├── Downloads / Staging
  │      |
  │      | Trusted validation process
  │      v
  └── Approved Files
         |
         | Read-only
         v
    Testing Environment

Current plan:

• Proxmox: Dedicated Linux VM for downloading and handling untrusted files.
• Docker Compose: Manage download clients and supporting services.
• qBittorrent: Download Linux ISOs and other freely distributed software via torrents.
• VPN: Isolate download traffic, potentially using WireGuard or Gluetun.
• Local SSD: Handle active downloading and seeding without unnecessary NAS activity.
• TrueNAS: Store completed downloads in a restricted staging dataset.
• Validation: Verify checksums and signatures before promoting files to trusted storage.
• Testing: Use isolated VMs or containers to test downloaded software with read-only access to approved files.
• Networking: Restrict communication between the download VM, testing environment, and the rest of the homelab.

Questions:

1. Architecture: Is separating downloads, staging, and testing worthwhile, or am I overcomplicating things?
2. Isolation: Would you use separate Proxmox VMs, containers, or a combination?
3. Storage: What's the best way to enforce restricted write access to staging and read-only access for testing?
4. Networking: Would you put the download and testing environments on separate VLANs or rely on host-level firewall rules?
5. VPN: Would you run WireGuard directly in the VM or use something like Gluetun with Docker?
6. Security: What additional precautions would you recommend when testing potentially untrusted software?
7. Automation: How would you automate checksum verification, file transfers, and cleanup?

I'm comfortable with Linux, Docker, Proxmox, and networking. I'm more interested in building a secure, reproducible setup than simply finding the easiest solution.

I'd appreciate feedback from anyone running a similar download and software testing environment, particularly what you'd simplify or change.

I am trying to retrieve data from a restic backup (on main desktop pc). I did a restic restor with the flag [--include "/opt/stacks/owncloud"], copied the data i got to the server owncloud directory and started docker but its empty. owncloud does not see it.

What am I missing? (I also tried running docker on windows with this data, same result).

Between smart home devices, IoT appliances, and local homelabs, our home routers have essentially become the perimeter firewall for sensitive work and personal data.

I wrote a practical hardening sequence ordered from highest immediate impact to maintenance hygiene:

* **Remote Management:** Disabled by default on WAN.

* **Firmware:** Keep updated; retire hardware that vendor dropped support for.

* **WPS & UPnP:** Turned off immediately.

* **Network Segmentation:** Separate VLAN or Guest Wi-Fi SSID for IoT gadgets so they cannot touch the homelab/NAS.

* **Encrypted / Filtered DNS:** Moving away from ISP defaults to Quad9 or NextDNS.

* **Admin Credential Hygiene:** Unique 20+ character master password for the router panel.

To make it easy to follow along while working inside your router admin console, I built an interactive checklist embedded into the guide. It stores your checked items purely in client-side `localStorage` (no account, no cookies, no tracking).

👉 **Check it out here:** https://whiteorg.com/blog/home-network-hardening-guide/#network-audit-title

Would appreciate any feedback on the checklist items or additional edge cases you think should be included!

Hi.

Days ago i saw a post here (i think) about a tool selfhosted that bring a lot of this kind of conversion.

I was looking in the sub but cant find it.

Can you recommend to me this kind of service?

Thanks!

Hey!

I’m kinda new to selfhosting as a hobby, and I’m looking to get some dedicated hardware for all the stuff.

My current “server” is My Gaming PC with:
- Win11
- 16gb RAM
- Ryzen 5 7500F
- 8GB VRAM
- NVIDIA 4060 Ti

I currently run (all in docker*):
- Jellyfin (the app runs native, as is suggested. I want to change this on new hardware)
- Uptime Kuma
- Homepage
- VaultWarden
- NGINX Proxy Manager & Cloudflared Tunnel
- Authentik
- SillyTavern + KoboldCPP
- Haven
- Modmail bot for Discord

I’m hovering around 8gb usage in just Docker, so I know that I need 16gb. I do also plan to get an external HDD at 2tb.

The mini office PC’s are often recommended but they’re a little harder to find in Aus. What do you guys recommend?

I currently have a Synology DS216j NAS and around 8 TB of media (movies and TV shows). I also host my calendars on it.

I'd like to take things to the next level: move all my files from cloud storage (Proton Drive) to a self-hosted solution, migrate my iCloud photos to Immich, automatically back up my family's phones, set up the *arr stack, Jellyfin, and so on.

I'm torn between buying a new NAS (UGREEN DXP4800 Pro) which seems simpler but requires a significant upfront investment, and I'm worried about not securing it properly, and renting a VPS to keep file storage separate from the applications.

What would you recommend ?