Selfhosting Sunday - What's up?

[irmadlad@lemmy.world]

The computer I'm using currently, I set the BIOS in 2012. WHen I built it, I stuffed every last piece of cutting edge tech of the time into it. Dual CPU, SLI, started with 64gb ram then later on maxed the board out at 128gb. It's still a workhorse tho. It's one of the three I use all the time for music production, selfhosting etc.

[Guest]

My radarr instances won't download anything. It will search and find compatible torrents, but then it just spins and spins, nothing ever moves to the queue. If I refresh its like nothing happened at all.

I recently reorganized the root files to separate HD/UHD content so that I can run 2 instances for Overseerr requests, then this issue started. I had to reset the root folders and now there's also a root folder error about collections that I can't resolve either... got me thinking about doing a full reinstall.

[botzo@lemmy.world]

Scrubbing a little demo project I made featuring a web app behind oauth2-proxy leveraging keycloak as local idp with social login. It also uses a devcontainer config for development. The demo app uses the Litestar framework (fka starlite, in Python) because I was interested, but it's hardly the focus. Still gotta put caddy in front of it all for easy SSL. Oh, and clean up all the default secrets I've strewn about with appropriate secret management.

All of it is via rootless podman and declarative configuration.

Think I might have to create my own Litestar RBAC plugin that leverages the oauth headers provided by the proxy.

It has been a minute since I worked daily in this space, so it has been good to dust off the cobwebs.

[sugar_in_your_tea@sh.itjust.works]

I've been testing out immutable distros, in this case openSUSE Aeon (laptop) and openSUSE MicroOS (server).

I set up Forgejo and runners are working, all in podman. I'm about to take the plunge and convert everything on my NAS to podman, which is in preparation for installing MicroOS on it (upgrade from Leap).

I also installed MicroOS on a VPS, which was a pain because my VPS provider doesn't have images for it, and I'd have to go through support to get it added. Instead, I found a workaround, which is pretty amazing that it works:

1. Install Alpine Linux (in my case I needed to provision something else first and mount an ISO to install Alpine, which was annoying)
2. Download MicroOS image on VPS (not ISO, qcow image)
3. Write image to the disk, overwriting the current OS (qemu-img command IIRC)
4. Reboot (first boot takes longer since it's expanding the disk and whatnot)

The nice thing is that cloud-init works, so my keys set up in step 1 still work with the new OS. It's not the most convenient way to set things up, but it's about the same amount of time as asking them for an ISO.

Anyway, now it's the relatively time consuming task of moving everything from my other VPS over, but I'll do it properly this time with podman containers. I had an ulterior motive here as well, I'm moving from x86 to ARM, which reduces cost somewhat and it can also function as a test bed of sorts for ARM versions of things I'm working on.

So far I'm liking it, especially since it forces me to use containers for everything. We'll see in a month or two how I like maintaining it. It's supposed to be super low effort, since updates are installed in the background and applied on reboot.

[habitualcynic@lemmy.world]

Firing up my NAS and Arrs. My Aoostar WTR Pro and all the components arrived, it’s all setup, and I swapped out the fan for a larger one to get more airflow into the nvme drive area since I live in a hot climate.

Spending the day configuring a vpn, sab, and qbit. Already learning a lot!

[mobile@leminal.space]

I really need to figure out how to get Jellyfin to use SSL certs and assigning a domain to the instance.

[blugill@fedia.io]

Ann reason you choose authenik? There are a nmber of options and I'm not sure why to choose one over the other.

[yaroto98@lemmy.org]

The root folder error for collections. I think I know this one. You need to go into every movie and update the filepath to the use the new root folder. Radarr isn't smart enough to do that automatically for you. Though you'd think they'd have $rootfolder as a var, but no.

[harsh3466@lemmy.ml]

Do you have a revese proxy setup?

[blueether@no.lastname.nz]

Email...
My wife really wants to further de-google, this means moving custom domains off gsute.

Do I move to proton/tuta or go back to self hosting email again like I did for years until about 2010?

If I self host, do I do it at home or on the server that runs my lemmy instance?

[sexualpolytope@lemmy.sdf.org]

Caddy is the way.

[zer0squar3d@lemmy.dbzer0.com]

What NIC are you looking at and what OS have you chosen?

[incogcyberspaceuser@lemmy.world]

I'd appreciate some feedback on what I'm looking to do.
I'm wanting to follow the FUTO guide, but I don't want to build a router, to save on some money for now.
So I'm planning on buying a Mikrotik MT RB750Gr3 and putting OpenWrt on it, then using my current TP-Link Archer C6 as a wireless access point. (will buy a dedicated AP in the future).
One thing I wonder is, if there is a Mikrotik model that would be better?

[dan@upvote.au]

I self-host my email and use a VPS for it. I don't trust my home server to be reliable enough, and the VPS providers have nicer equipment (modern AMD EPYC CPUs, enterprise SSDs, etc). I use a separate VPS just for my emails - it's the one thing I want to ensure is secure, so I didn't want any other random software (that could potentially have security issues) running on it..

I also use an outbound SMTP relay to avoid having to deal with IP reputation. SMTP2Go has a free plan for sending <1000 emails per month.

[catloaf@lemm.ee]

What's in the radarr log? You have your downloader configured, enabled, and tested I assume?

[dan@upvote.au]

I'm not the person you're replying to, but Authentik:

• Has a UI for configuring it, including adding users.
• Supports LDAP if you need it. Authelia needs a separate LDAP server.
• Supports practically every two factor auth protocol you'd need: OIDC (OpenID Connect), OAuth2, SCIM, SAML, RADIUS, LDAP, and proxying for apps that don't support any of them (which is getting rarer).
• Supports permissions and permission groups, i.e. only allow certain users to access particular apps.
• Can be used as the source of truth for Google Workspace and Microsoft Entra. Maybe not as relevant for home use.

I haven't tried Keycloak but I hear it's pretty good, albeit a heavier app to deploy.

I have tried Authelia, and it's much less powerful than Authentik. Authelia requires you to manually modify config files rather than using a web UI. It also only supports OIDC (which is in beta) and proxying.

[Guest]

I have my instance running in my k3s cluster. I have its node affinity to only run on my miniforums i9. That way, I can use cert manager to manage the certs.

[iopq@lemmy.world]

When in doubt, put it behind nginx

[kate@lemmy.uhhoh.com]

I did no research whatsoever and picked the one I'd seen the name of more often. I figured if it didn't work for me I'd try something else, same as when plex wasn't working for me so I switched to jellyfin. I have no idea how it compares to the other options but it feels pretty solid so far

[scrooge101@lemmy.ml]

Would you mind sharing the code?