Selfhosting Sunday - What's up?

[sugar_in_your_tea@sh.itjust.works]

I've been testing out immutable distros, in this case openSUSE Aeon (laptop) and openSUSE MicroOS (server).

I set up Forgejo and runners are working, all in podman. I'm about to take the plunge and convert everything on my NAS to podman, which is in preparation for installing MicroOS on it (upgrade from Leap).

I also installed MicroOS on a VPS, which was a pain because my VPS provider doesn't have images for it, and I'd have to go through support to get it added. Instead, I found a workaround, which is pretty amazing that it works:

1. Install Alpine Linux (in my case I needed to provision something else first and mount an ISO to install Alpine, which was annoying)
2. Download MicroOS image on VPS (not ISO, qcow image)
3. Write image to the disk, overwriting the current OS (qemu-img command IIRC)
4. Reboot (first boot takes longer since it's expanding the disk and whatnot)

The nice thing is that cloud-init works, so my keys set up in step 1 still work with the new OS. It's not the most convenient way to set things up, but it's about the same amount of time as asking them for an ISO.

Anyway, now it's the relatively time consuming task of moving everything from my other VPS over, but I'll do it properly this time with podman containers. I had an ulterior motive here as well, I'm moving from x86 to ARM, which reduces cost somewhat and it can also function as a test bed of sorts for ARM versions of things I'm working on.

So far I'm liking it, especially since it forces me to use containers for everything. We'll see in a month or two how I like maintaining it. It's supposed to be super low effort, since updates are installed in the background and applied on reboot.

[habitualcynic@lemmy.world]

Firing up my NAS and Arrs. My Aoostar WTR Pro and all the components arrived, it’s all setup, and I swapped out the fan for a larger one to get more airflow into the nvme drive area since I live in a hot climate.

Spending the day configuring a vpn, sab, and qbit. Already learning a lot!

[mobile@leminal.space]

I really need to figure out how to get Jellyfin to use SSL certs and assigning a domain to the instance.

[blugill@fedia.io]

Ann reason you choose authenik? There are a nmber of options and I'm not sure why to choose one over the other.

[yaroto98@lemmy.org]

The root folder error for collections. I think I know this one. You need to go into every movie and update the filepath to the use the new root folder. Radarr isn't smart enough to do that automatically for you. Though you'd think they'd have $rootfolder as a var, but no.

[harsh3466@lemmy.ml]

Do you have a revese proxy setup?

[blueether@no.lastname.nz]

Email...
My wife really wants to further de-google, this means moving custom domains off gsute.

Do I move to proton/tuta or go back to self hosting email again like I did for years until about 2010?

If I self host, do I do it at home or on the server that runs my lemmy instance?

[sexualpolytope@lemmy.sdf.org]

Caddy is the way.

[zer0squar3d@lemmy.dbzer0.com]

What NIC are you looking at and what OS have you chosen?

[incogcyberspaceuser@lemmy.world]

I'd appreciate some feedback on what I'm looking to do.
I'm wanting to follow the FUTO guide, but I don't want to build a router, to save on some money for now.
So I'm planning on buying a Mikrotik MT RB750Gr3 and putting OpenWrt on it, then using my current TP-Link Archer C6 as a wireless access point. (will buy a dedicated AP in the future).
One thing I wonder is, if there is a Mikrotik model that would be better?

[dan@upvote.au]

I self-host my email and use a VPS for it. I don't trust my home server to be reliable enough, and the VPS providers have nicer equipment (modern AMD EPYC CPUs, enterprise SSDs, etc). I use a separate VPS just for my emails - it's the one thing I want to ensure is secure, so I didn't want any other random software (that could potentially have security issues) running on it..

I also use an outbound SMTP relay to avoid having to deal with IP reputation. SMTP2Go has a free plan for sending <1000 emails per month.

[catloaf@lemm.ee]

What's in the radarr log? You have your downloader configured, enabled, and tested I assume?

[dan@upvote.au]

I'm not the person you're replying to, but Authentik:

• Has a UI for configuring it, including adding users.
• Supports LDAP if you need it. Authelia needs a separate LDAP server.
• Supports practically every two factor auth protocol you'd need: OIDC (OpenID Connect), OAuth2, SCIM, SAML, RADIUS, LDAP, and proxying for apps that don't support any of them (which is getting rarer).
• Supports permissions and permission groups, i.e. only allow certain users to access particular apps.
• Can be used as the source of truth for Google Workspace and Microsoft Entra. Maybe not as relevant for home use.

I haven't tried Keycloak but I hear it's pretty good, albeit a heavier app to deploy.

I have tried Authelia, and it's much less powerful than Authentik. Authelia requires you to manually modify config files rather than using a web UI. It also only supports OIDC (which is in beta) and proxying.

[Guest]

I have my instance running in my k3s cluster. I have its node affinity to only run on my miniforums i9. That way, I can use cert manager to manage the certs.

[iopq@lemmy.world]

When in doubt, put it behind nginx

[kate@lemmy.uhhoh.com]

I did no research whatsoever and picked the one I'd seen the name of more often. I figured if it didn't work for me I'd try something else, same as when plex wasn't working for me so I switched to jellyfin. I have no idea how it compares to the other options but it feels pretty solid so far

[scrooge101@lemmy.ml]

Would you mind sharing the code?

[smiletolerantly@awful.systems]

Hey, we're also thinking about setting up authentik. Could you answer the following, where I haven't found answers to yet: does introducing SSO impede logging into Jellyfin on a TV / phone app at all?

[darkmetatron@feddit.org]

A new homepage for the business of my wife.

I plan to use Hugo for it, I just wish the documentation would be better.

For the homepage I need a few additional "non-blog" pages and from the documentation I am not sure how to do that the best way.

[australiansimon@lemmy.world]

Building a simple workflow with AI agent for our community watch group. Also building an open source automation platform, currently working through GUI templates for it.