Thanks for the tip !! I will certainly give it a look, It’s kinda annoying for my family members to always connect via wireguard.

For me it’s fine though, I even route my traffic to ProtonVPN but my family is always nagging how they need to “do something” to get access to the hosted services or that it “doesn’t work”.

Except that everything is under your control and not managed by a third party, not much I think.

If this setup works for you and you’re happy with it, just keep it going.

If you have time to spare, want to learn new things, tinkerer arround with network security, certificates, DNS, reverse proxy and, and, and… You can give it a try in a virtual machine and docker containers. But keep in mind that’s not an easy way and involves a lot of personal time before you get a GOOD working self-hosted / exposed services.

I wouldn’t recommend to open any port on your router except for a secured tunnel like wireguard and connect to your services through that tunnel. Opening port 443/80 on your router is bound to some heavy automated scanning and brute force by bots. If you don’t have the necessary knowledge/tool/hardware, this is just going to put you at risk of ddos and remote attacks.

That’s way something like cloudflare is populare, they most of the time take care of that nuisance and also why something like wireguard is popular among the selfhosting community.

That’s also how my Linux download folder looks from time to time XD But since I’m on Arch bases distro I try to be more organized and clean-up that Download folder mess !!!

I’ve subscribed to YT Premium today.

If you’re on Android there’s InnerTune. It’s basically YouTube music but for free ! Just to bad you can’t directly access downloaded files to export them elsewhere. (Yeah that’s practically piracy and illegal)

I like navidrome + Tempo as self-hosted solution. Works well without any issues. However, I read about horror stories people losing all their media or fucking up their media library ?

Also, that’s a huge song library (20.000?)… Not sure this can be easily handled over to a self-hosted solution? But first you need to organize your songs

Trying to add a direct path to files doesn’t work.

Dunno what’s wrong here, but I do add a files direct path to /etc/ssl into a docker container and works as expected.

I think It’s related to miniflux and have my self-signed certificate in its truststore to communicate with wallabag (inter-docker communication).

I can’t give you a snipped of my compose but will gladly edited my comment when home.

Nobody ever talking about lychee ?

Yes okay it’s not GPL or written in a fancy new language (PHP is still alive xD). But it’s simple, elegant, no UX bloat, no ML or IA stuff… Just a plain simple self-hosted photo manager.

One thing I really liked about it, you can import you external photo’s with .xmp files, just one checkbox away.

The tag feature is simple but working as expected. Nothing fancy but it does best what’s it’s supposed to do !!

Call me old boomer but I really like the simplicity of lychee. It’s a bit like how reading an article from miniflux or wallabag… Simple html files without bloating your eyes or your brain…

Just my 2c, nothing to see here !

The AI was cool! The way they would flank was pretty good for the time!

So truee ! Yeah I remember that was something really unique to FEAR ! Never had seen a similar AI in other games :/

F.E.A.R (the first one only) was absolutely scary and psychologically nerve wrecking…

The multiplayer was amazing though, the nail gun was something else !

I have a self-hosted Baikal server with self-signed CA on Android 14 and it works.

However, I didn’t had to add the certificate to Davx⁵ itself. Adding a rootCA into your device and your reverse proxy handling the request should work as expected over https.

Those kind of things are difficult to troubleshoot, this could be:

• Bad rootCA certificate, missing the necessary options ?
• Wrong certificate handled by your reverse proxy ?
• Radicale doesn’t recognize your certificate extension ?
• Wrong networking configuration ?
• Bug ?
• …

We need more infos about your setup:

• Do you use a reverse proxy ?
• Had you already any success with this certificate within an other application ?
• Any logs from your Android, Davx⁵?

Yeaaah I already played a bit arround with step-ca ! Right now a make a mini-CA with openssl.

When I get more comfortable with how everything works together I will surely give step-ca another try.

Can’t argue against that.

However, I prefer local domain names accessible via Wireguard with self-signed certs. I like to understand how everything works under the hood !

Also, I’m broke AF and buying a domain name (even cheap ones) are out of my budget :(.

Except for the learning process and if you want your self-signed local domains in your lan !

https://jellyfin.homelab.domain is easier to access than IP addresses.

While I’m not able to give it a try right now (just woke up, need to get ready for work…) I just wanna thank you for sharing your work and contributing to the community !!

It looks neat and simple :) !!!

IMO The Fedi Origami looks waaay better than the 3 cat but holes. Even the first iteration looks somehow better, even though less “professional”?

Yep, Debian for sure ! 3 years ago I settled for debian on an old spare laptop, It’s still cruisen with more than 21 containers !! Sure I had a few fresh installs because skill issues, lack of proper configuration, user mistakes… But it’s probably the easiest to maintain and learn as a beginner !

No idea what’s your level and how close you’re with computers and how much time you have to spare, but don’t be afraid to make mistakes and try a few things out.

If you are like me just a plain old geek who knew his way arround computers and used Hamachi back in the days, thinking you were a HAKKER… Get ready to get your ass kicked !

While self-hosting and de-googling is fun, it also has alot of negative things:

• Time consuming
• Involves ALOT of Searxing/Reading
• Debuggin (kinda…)
• Learning the basics of at least 1 scripting language (consider bash your ally)
• It’s an infinite rabbit hole that will suck you in and sometimes get to your nerves…

One of the best advice I could give you along the way is, If you’re stuck on a bug or something isn’t working as expected in your setup and It seems you couldn’t find any answer or similar issues on the web, you absolutly have to take a break, not a 5min cigarette break… A few hours bicycle/sleep break !!!

The next day you will for sure find a solution !!

Good luck, have fun and don’t forget to take time for yourself and people arround you !

Raspberry PIs run ARN

Sooo RPis are now processing proteins ? XD sorry I’m bit drunk… Thank for the short insight, was too lazy to click !!

Ohhh didn’t knew that ! Thanks for the info! Although it makes sense :).

Will edit my comment !

PS: Yeah, when my internet went down I was like “huh what the fuck?” XD

You can always try out their free Tier.

While you get limited bandwidth it’s really okayish for normal use. Do not try to connect over a peer2peer connection, it’s disabled in the free tier and your connection goes "Wooosh! *

I’m very Happy with their free tier, I even route my mobile’s traffic through the same VPN connection with wireguard and some iptables.

*Edit

I like linkding alot for it’s simplicity, but can’t the hell of me make a good/clean instance… It gets messy very quickly if you save some interesting links which are not directly connected to something or if you have 2 different subjects in the same instance.

Something like group tagging would make alot of sense :/

Traefik gang here 👊 !

But only because it works so easily with docker !! I remember a time where I though that you need a diploma and read/learn/understand a 10000 page dictionary to make nginx work properly.

Also hated the syntax of nginx… It can look so ugly and gibberish :/.

But I do believe Nginx is superior and more mature in many more aspects than Treafik. Still, Traefik is a breeze and is in IMO way easier to configure with docker than Nginx.