Selfhosting Sunday - What's up?
-
What's up, what's down and what are you not sure about?
Let us know what you set up lately, what kind of problems you currently think about or are running into, what new device you added to your homelab or what interesting service or article you found.
Finally got around to trying what @[email protected] recommended me to troubleshoot my scanner sending to FTP. And I got it working! Thanks chaospatterns!
-
Found out that docker volumes are important after restarting my server
Am I mistaken that docker creates temporary volumes with a nondescript name and you can potentially dig up the volumes that were being used in
/var/lib/docker/volumes? -
What's up, what's down and what are you not sure about?
Let us know what you set up lately, what kind of problems you currently think about or are running into, what new device you added to your homelab or what interesting service or article you found.
I fixed DNS
(My DNS queries were blocked by my ISP's modem, I flashed OpenWRT on an old WiFi Repeater, and set up a DoH proxy)
-
It kind of amazes me that, in this day and age, email has turned out to be the lynchpin of security. Email as a 2FA endpoint. Email password reset systems. If email is compromised, everything else falls. They used to tell us not to put anything in email that you wouldn't put on a postcard...how did this happen?
That and email protocols are outdated and aren't too secure. For example:
- Neither SMTP nor IMAP have no way to use two factor authentication.
- Spam blocking is so hard because SMTP was not designed with it in mind.
- SMTP has no way to do end-to-end encryption which is why you need to layer things like GPG on top.
IMAP has a modern replacement in JMAP, but it's not widespread. SMTP is practically impossible to replace since it's how email servers communicate with each other.
The "solution" has been for companies to make their own proprietary protocols and apps, for example the Gmail and Outlook apps combined with a Gmail or Microsoft 365 account respectively.
-
I’m trying to figure out a basic CRM for my local sports club. I use docker to self host a voting platform called RALLLY that we use a lot and enjoy. If people can recommend a CRM I’d give it a go today. I tried a platform called twenty yesterday but couldn’t get it off the ground
Consider reviewing odoo, I last looked at them when they were known as openERP, I know one guy that runs it and is happy. It might be a bit much if you just want a CRM...
-
I'm considering Keycloak myself because it's trusted by security professionals (I think it's a RedHat project), whereas Authentik is basically a passion project.
I hear keycloak has quarkus builds as well these days which should be much slimmer than how it used to be built.
-
I hear keycloak has quarkus builds as well these days which should be much slimmer than how it used to be built.
I hadn't heard of it, and looking into quarkus just reminded me of how complicated the whole Java ecosystem is. Gross.
Hosting Go, Rust, etc stuff is dead simple, but with Java, there's all this complexity...
-
What's up, what's down and what are you not sure about?
Let us know what you set up lately, what kind of problems you currently think about or are running into, what new device you added to your homelab or what interesting service or article you found.
I've just set up Wireguard, so I can access my home network from everywhere, but the old laptop that I wanted to use as a server has just quit. So now I have to find a different machine
-
What's up, what's down and what are you not sure about?
Let us know what you set up lately, what kind of problems you currently think about or are running into, what new device you added to your homelab or what interesting service or article you found.
-
What's up, what's down and what are you not sure about?
Let us know what you set up lately, what kind of problems you currently think about or are running into, what new device you added to your homelab or what interesting service or article you found.
-
Finally switched from plex to jellyfin, seems to be ok so far. Needed to make some small scripts for metadata management but it's running smoothly. Finally decided I'm hosting enough software with user accounts that I've made an authentik instance for SSO with each (ofc jellyfin first)
The only feature I want that jellyfin doesn't have (or I haven't found it) is shuffle. Throwing on how it's made or mythbusters on shuffle is great background stuff.
-
As we received new network hardware from our ISP, and inevitably are getting a new IP address again with that, I'm looking into setting up a DDNS. I've wanted to check out DuckDNS. They run their (free) service on AWS CE2 instances, though, and as I am currently also trying to end my reliance on Google and Amazon, I've got some more digging to do. If anyone has a good, European (or heck, federated?) solution, hmu!
I've been using DuckDNS on a multiple platforms for a couple of years and it works great. Never had a problem.
-
I set up my own Lemmy server, mastodon, and matrix. Finally making the move off centralized social media and communication platforms
Nice! Hosting your own Fedi stuff feels great.
-
I had to reboot my Proxmox server after applying powertop --auto-tune. All was fine with every advised tweak but touching the Lan interfaces was not a great idea
Did autotune touch the interfaces?
-
I'm using the rb5009 but im using RouterOS not openwrt. Any reason why you'd want to do that?
I personally think if you're buying a purpose built hardware and then putting your own software on it, you should move to a mini computer with OpnSense.
In my experience mini computers don't handle power failures nearly as well as purpose-built hardware.
After several power failures the SSD on my Raspberry Pi became so corrupted it wouldn't boot, and I was 250 miles away at the time and lost access to my home network for weeks. Overlay file systems work but are a PITA to maintain. By contrast my routers have never had a problem even with repeated power failures, so instead of relying on the Pi I've moved my DNS and Wireguard servers to my router.
Besides adding a UPS, how do you deal with power failures? Are you somewhere where they're not much of a problem?
-
Did autotune touch the interfaces?
-
What's up, what's down and what are you not sure about?
Let us know what you set up lately, what kind of problems you currently think about or are running into, what new device you added to your homelab or what interesting service or article you found.
Got my jetKVM in the mail yesterday. Really sleek build and software. Liking it a lot so far.
Migrated my network to a router running openwrt this past week as well. Having issues with avahi-daemon crash looping, so I haven't been able to get mdns working in between networks
-
My ISP blocks all outgoing ports. Maybe I'm not trying hard enough but anything I try port forwarding ends up getting blocked.
Minecraft and port 80 are the 2 I've tried and they've been unresponsive
Pretty sure those two ports are blocked by a lot of IPs because they're so popular
-
I set up my own Lemmy server, mastodon, and matrix. Finally making the move off centralized social media and communication platforms
-
In my experience mini computers don't handle power failures nearly as well as purpose-built hardware.
After several power failures the SSD on my Raspberry Pi became so corrupted it wouldn't boot, and I was 250 miles away at the time and lost access to my home network for weeks. Overlay file systems work but are a PITA to maintain. By contrast my routers have never had a problem even with repeated power failures, so instead of relying on the Pi I've moved my DNS and Wireguard servers to my router.
Besides adding a UPS, how do you deal with power failures? Are you somewhere where they're not much of a problem?
All of my remote routers are running RouterOS without anything on top of it. RouterOS is powerful enough for anything I throw on it. But I am using much beefier routers, I have 2 x 5009 and a HAP AX3 which have plenty of flash and ram ro run the additional packages I need.
As for normal computers, I have it on a UPS and I backup core files to off-site areas. Additionally, I buy SSDs that have a little bit of powerloss protection.
I've never had issues with mini PCs but I've had issues with PIs. I've since switched to high endurance SD cards for my Pis and they've been rock solid. One's actually semi exposed to the elements for about a year now without a hiccup.
With RouterOS you can still use DoH with either a self hosted list or a selected ad list. If you want to selfhost a DNS server I'd just host a Adguard Home instance on a VPS for all of your devices.
I also have 2 VPN system for my remote management on 2 separate systems. I learned that the hard way when one of my clients is 8 timezones away.
