A simple question to this community, what are you self-hosting? It’s probably fun to hear from each-other what services we are running.
Please mention at least the service (e.g. e-mail) and the software (e.g. postfix). Extra bonus points for also mentioning the OS and/or hardware (e.g. Linux Distribution, raspberry pi, etc) you are running on.
I host:
Fedi servers
- lemmy.world
- mastodon.world
- calckey.world
- pool.social
- musicworld.social
- akkoma.nl
- ruud.social
- fotofed.nl
- fediland.nl
- blog.mastodon.world
- play-my.video
Software I use
- Nginx Proxy Manager
- Portainer
- Kimai
- Xwiki (3 of them)
- Cryptpad
- Grafana
- Hedgedoc
- Matrix/Synapse
- Thelounge
- Vaultwarden
- Gitea
- Nextcloud
- Paperless-ngx
- Zabbix
- Zammad
Probably forgot some…
My long and mostly complete list:
- Audiobookshelf (GH)
- Using for audiobooks. Ebooks, comics, and podcast support in early stages.
- Authelia (GH)
- Using for two-factor authentication in front of all of my services. Critical infrastructure.
- Bazarr (GH)
- Using for automated subtitle management. Have not needed to rely on it much.
- Code-Server (GH)
- Using for a plethora of things. I could write an entire post on this alone.
- Courier
- Using (occasionally) for package-tracking from various carriers.
- EmulatorJS
- Using for retro-emulation.
- Gitea (GH) x2
- Using as a git repo server, package repository, and for CI/CD automation. Is critical infrastructure in my lab. Could also write an entire post on this one.
- Headscale with Headscale-UI. Tailscale clients on various VMs LXCs, etc.
- Using to securely network with my remote servers.
- Homepage
- Using as a “single-pane-of-glass” to get an overview of service health with links to the various services.
- Invidious
- Using in-place of YouTube.
- IT-Tools (GH)
- Using for the myriad of various useful tools it offers.
- Jellyfin (GH)
- My media player of choice. Using for movies and television, but supports music, ebooks, and photos in addition.
- Kopia Server (GH)
- Using for data backups to my Minio instance on local NAS and Wasabi. Simple, fast, and reliable.
- Librespeed (GH)
- Using for the occasional speedtest to my remote servers.
- Matrix stack using Conduit back end and Element-Web front end
- Federated Discord essentially. Using as a private instance for friends and family.
- Minio
- Using primarily as a gateway to storing backups, also serves git-lfs for Gitea.
- N8N (GH)
- Using for home-automation, backing up my Reddit saved posts to a database, deal-alerts, and part of a CI/CD pipeline.
- NTFY (GH)
- Using for infrastructure notifications mostly. Very simple and versatile alerting solution.
- NZBGet
- Using for getting “usenet articles”.
- Paperless-NGX
- Using for document archival. Important receipts, documentation, letters, etc. live here.
- Portainer (GH) with multiple agents on VM’s LXCs and VPSs
- High level management of my various docker containers.
- Prowlarr
- Using to provide torznab API to websites that dont natively have it. Integrates with Radarr and Sonarr
- Radarr (GH)
- Using for movie management.
- Radicale
- Using for contacts and calendar server.
- Raneto (GH)
- Using as a knowledge base. Lab documentation, lists, recipes, lots of things live here. Using with with code-server and Gitea.
- Readarr (GH)
- Using for book management
- Recyclarr (GH)
- Using for Radar and Sonarr to sync search terms for their automations. Very useful, hard to summarize.
- Requestrr
- Using (very rarely) as a requests bot for Radarr and Sonarr.
- SFTP-Go
- Using mostly in-place of Nextcloud. Used to back up phones mostly.
- Shaarli (GH)
- Using as a read-it-later service. Went through lots of these, and Shaarli has been good enough.
- Singlefile-Archive
- A hacky way of presenting pages saved with the singlefile browser extension. Not exactly happy with the solution, but for my ocasional use it does work.
- Sonarr (GH)
- Using as TV series manager
- Speedtest-Tracker (GH)
- Using to get periodic speedtests. Plan to automate results to blast my ISP if my service speed gets too low.
- Traefik (GH) on each seperate host
- Using as a web proxy in front of my various services. Critical infrastructure.
- Transmission (GH)
- Using to get “Linux ISOs”
- Uptime Kuma (GH)
- Using to monitor site and services status along with a few others. Integrated with NTFY for alerts.
- Vaultwarden
- Using as my password manager. Have been using for years, cannot recommend enough.
- A handful of static websites served with NGINX
- The old standby, its been reliable as a webserver.
These services are the result of years of development and administrating my lab and while there is still some cruft, it’s mostly services that I think have real utility.
As far as hardware:
-
Running pfsense on a toughbook laptop as a router-firewall.
-
A SuperMicro 24 bay disk-shelf with Proxmox and ZFS for NAS duties and a couple services.
-
Lenovo Tiny boxes with a Proxmox cluster for the majority of my local services.
-
Dell managed switch
-
A few Raspberry-pi’s with Raspbian for various things.
-
Linksys AP for wifi
Edit: Spelling is hard.
- Audiobookshelf (GH)
Oh my jesus, does this thread really have 400+ comments
Edit: respectfully as an atheist
Ubuntu server(Xeon CPU E5-2650 v4 with 86 GB Ram) running k3s(My home server):
- App-daemon(Used with home assitant for more complicated automation)
- Bazarr
- Browserless(Currently used for rendering js pages for huginn)
- Dpaste
- Filerun
- Homeassistant
- Homer(My dashboard)
- Huginn
- Jellyfin
- Kaizoku(For downloading manga)
- Nzbget
- Nzbhydra
- Ombi
- Paperless
- Photoprism
- Pihole
- Plex
- Prowlarr
- Radarr
- Scrutiny(For checking my drives)
- Sonarr
- Qbittorrent with vpn
- Wiki.js
- Christmas-Community(Wishlist)
- ZwaveJS(For homeassistant)
2 Ubuntu servers running k3s(VPS used for my infrastructure services)
- Keycloak
- Offical docker registry
- Bitwarden
- Gitea
- Headscale
- Healthchecks(For checking backups)
- Uptime-kuma - Hashicorp vault
Infrastructure services runing on all servers:
- ArgoCD(For deploying everything on k3s)
- Longhorn(For storage)
- Vault-secrets-operator(For getting secrets from vault into k3s)
- Traefik(My reverse proxy)
Lastly I’m hosting Lemmy on a leftover VPS, that I hadn’t used in a while. Might move to a bigger server though.
I was not familiar with App-daemon. Can you share what type of automations you are achieving that are not possible with home assistant alone? Thx
I don’t think App-daemon can do automations, that homeassistant alone can’t. I just think it is simpler to manage more complicated automations in App-daemon, since I can script the automations in python.
I don’t think that App-daemon can automations, that homeassistant alone can’t. I just think it is easier and simpler to create more complicated automations in App-daemon, since I can script everything in Python.
I don’t think that App-daemon can automations, that homeassistant alone can’t. I just think it is easier and simpler to create more complicated automations in App-daemon, since I can script everything in Python.
As an offensive security worker… I can’t help but read people listing out their attack surface 😂
My RISV-V server (I have removed all binary blobs and have no closed source code ofc) is airgapped inside a Faraday cage.
For security reasons I never turn it on.
I like how you think.
All my deploys are written in binary on a stack of index cards that we then burn, put in a zip lock bag, encase in concrete, surround in a welded closed steel box, and throw in the Mariana Trench. The documentation sucks though.
I’m not sure the list is really that big of a deal for a home gamer. They’re probably more in danger from their choice of home audio appliances and that microwave that has been sitting on their network for 10 years which no longer gets updates. Or that 2019 Plex server they have put forwarded straight outside.
It’s actually one of my beefs with containers, You can’t keep track of The versions for everything and you’re at the mercy of the maintainers to keep individual packages updated.
Nah, it’s all safe, it’s in containers
</s>
A lot of them are likely behind wireguard. At least, I hope a lot of them are.
You’d hope, but I have a few friends who simply port-expose their media servers.
I guess it could be worse if they had ssh exposed.
I’ll have to disagree with you there. SSH is super well maintained and understood, and massively useful for the risk you do run. Who knows what’s going on with all the random projects people are hosting. I’d rather have SSH exposed than almost anything else.
What would you do to provide access to some less tech savvy friends. I’m thinking of dropping a SBC with wireguard and a proxy onto a friend’s network, that way everything is under my control, and I can lock down the wireguard connection however I want, but I haven’t gone down that route yet.
I was thinking more along the lines of simply thowing up a port to SSH into. No Fail2Ban and no keys, just a password.
I would just containerize and reverse proxy, but I understand the hesitation, wireguard would be preferable.
Part of my Reddit exodus plan was to get serious about my RSS setup.
I’ve settled on:
- FreshRSS as my feed manager (supported by Reeder app in iOS and MacOS)
- FiveFilters Full Text extractor
- rss-proxy site scraper
I may experiment with some replacements for rss-proxy, as I’ve run into a couple sites it doesn’t scrape well, but FreshRSS and FiveFilters have been smashing successes.
Oh jeez… there’s quite the list. I have a Ceph cluster of 3 nodes with 15x HDD’s and 3 SSD’s… on that cluster I run some VM’s that in turn run a Docker swarm. All Ubuntu 22.04, all commodity hardware. Currently I’m running;
- Portainer to help manage this beast
- NGINX which proxies all my web facing services on multiple websites.
- Wordpress for my personal site which sync my Instagram pictures to it as well
- MariaDB Galera cluster
- Nextcloud for file sharing but also provides lots of plugin services like a password manager, email client and so on
- Photoprism for my photos… I use the Nextcloud client to automatically upload new pics from my phone to Nextcloud then Photoprism is attached to that same library
- OnlyOffice as a plugin to Nextcloud to allow O365-like functionality
- ElasticSearch plugged into Nextcloud for full-text searching
- OpenProject for project management in my own businesses
- Jellyfin and Plex both attached to the same media library
- E-Mail using Docker-Mailserver… so Postfix with a bunch of ancillary tools for 3 domains
- Droppy as a quick-and-dirty file repo for when I need to get files to people easily
- FreePBX (Asterisk) with 4 extensions around the house
- MeshCentral for managing my family’s PC’s and also doing remote tech support for family, friends and customers as necessary
- FOGProject for imaging PC’s and VM’s as necessary
- ReactiveResume
- Docker Registry set up as a caching proxy
- YoutubeDL-Material
- Karaoke Eternal for those nights when you just get drunk enough to karaoke
Then there’s a whole host of ancillary services; BackupPC, Unifi controller container, piHole on a couple of Raspberry Pi’s, ts-dnsserver for internal DNS management… probably a dozen other containers and tools I’m forgetting.
Oh yeah, and a Synology NAS as a backup target :)
I respect the enterprise-level IT operation you run for your family lol
Updoot for MeshCentral. I can’t believe how excellent and capable this free software is.
Fellow self-hoster, you mention Droppy – I can only find an archived repo (https://github.com/silverwind/droppy). Do you have any other source?
No, that’s what I’m using. Thankfully it works fine and I don’t worry too much about security because I just leave it turned off until I need it. The “/droppy” url directs to it but if it’s off then it just throws an error back.
Thanks a bunch!
Script kiddies these days got really fast. Configured a new subdomain, started droppy, within a couple seconds, all types of requests were visible in the log.
What’s it like hosting your own mail? Been considering it for a while but Gmail features/spam filter/deliverability has been tough to beat.
Well, consider I’ve run my own mailserver on one of those domains since 2001 so I’ve had plenty of time to “grow” with it. I have no issues with GMail and the like but as I said my domain has been around a long time and so I may well be grandfathered in a lot.
Having said all that, even with my newest domain (less than a year old) I don’t have any issues so long as I make sure to comply with all the caveats around ensuring my MX records are good, making sure my DMARC, SPF, DKIM and even PTR and reverse DNS records are all in place (the latter is one a LOT of people forget when self-hosting but reverse lookups are a big deal with mail). The amount of mail that my mail server spam-buckets from domains with only forward lookups and no reverse is astounding. But having said that it’s a GREAT way to block spam.
Finally, mail on residential IP blocks or even a lot of cloud provider blocks are just plain not good for mail hosting. One of my MX hosts is on a Linode which gets blacklisted periodically in one of the less reputable blacklists, but it usually doesn’t affect mail flow all that much. I do subscribe to services to monitor for blacklist listings and delistings for my IP’s as well mostly to keep track but it’s handy to know if there might be something wrong with your mailserver.
Mail hosting isn’t for the faint of heart… but once it works it pretty much just works. My primary personal domain I haven’t changed anything in a couple of years… and I’ve had no need to change much with the mail server itself. It comes out of the box with some nice secure settings and it’s kinda nice to have two decades of mail I can refer back to on an IMAP server :)
AMD EPYC 7B12 / 256GB RAM / Supermicro H12SSL-i / 4x2TB Samsung 980 Pro in ZFS RAIDZ-10
Total overkill for what is currently running on it. But who knows what the future brings.
Current:
Docker-based
- Portainer
- SabNZBD
- Radarr
- Sonarr
- Prowlarr
- Gotify
- Jellyfin
- Bitwarden
- Paperless NGX
- Watchtower
As a VM in Proxmox VE
- KASM workspaces because it’s really cool
- Random Windows 11 VM attached to KASM for some remote work
- Random Windows Server 2022 to play around with
As an LXC in Proxmox VE
- Ubuntu-based SSH jump-host
- Ubuntu-based Unifi-controller
- Ubuntu-based crowdsec concentrator
On 3 Rpis and a NAS around my home:
-
Nextcloud - Google replacement
-
Actual Budget - YNAB type server that’s super simple and meets my needs
-
Apache web server - portal to my projects
-
PiHole - DNS pass/allow list
-
PiVPN - Allows me to connect to my home VPN when abroad
-
2009Scape - A little RuneScape Private Server I turn on and off on my desktop when I’d like to afk at work
-
Docker - A couple docker instances - one on my test pi I use to roll out onto my “prod” servers
-
Backup server - 14TB backup with an offsite copy :D
-
Joplin - Note-taking app - barely a server connected through Nextcloud
-
Plex - Everyone knows about Plex - I’m thinking of switching to JellyFin
-
rtorrent - kinda old-school compared to the *arr programs but I enjoy manually downloading all my media :)
Hope I’m not forgetting any!
Does Actual offer a self-hosting option? I’d like to escape my Excel sheet of doom, but haven’t found anything I can run in a container.
It does indeed! https://github.com/actualbudget/actual-server
Building from docker-compose is super straightforward. Generating the keys is the hardest bit of the ordeal but I have it locked into just my local network since it saves your most recent sync on your device.
-
I have a small and humble set up. Pihole on my old Pi3, OpenMediaVault, Kavita, Qbittorrent on my Pi 4 and my other Pi 4 is running fucked up Lemmy and Mastodon instances because I’m new to this stuff.
I’m considering throwing a pi4 at Lemmy. How’s it going for you? Can you tell me about specific struggles you’ve had?
A few LAN Minecraft instances for my wife and I, a personal Git server, Plex, SMB file share, and a few Docker containers on a MINISFORUM UM690 Mini PC. Been very happy with that little machine!
Currently all LAN only, still in the experimental stage finding out what’s useful/preferable to me and what I want to keep:
KEEPING
Pi-Hole - ad/malware/tracker blocking
Portainer - Easy Docker
Syncthing - Sync folders between devices
Planka - Kanban board
I.T. Tools - Handy I.T. Tools
Bookstack - Personal documentation
Mealie - Recipe manager/meal planner
Jellyfin + usual accompaniments - Media Management
Navidrome - Music library
Changedetection - Stock monitoring
Gotify - For push notifications from other apps
Filebrowser
That Word Game ;)UNDECIDED (may swap for alternatives or just remove)
Organizr - Homepage
Jump - Homepage
Homepage - Yup, another homepage!
Linkding - Bookmarks
Shiori - Pocket replacement
Etebase - CalDAV & CardDAV
Whoogle - Google without the crap
Photoprism - Photo management
Libreddit (not being used now!)
QBittorrent - for Linux ISOs
Uptime-Kuma (for when I do open a few services to family)
Ryot (beta) “Roll Your Own Tracker” - Media TrackerPLANNING TO ADD
Reverse-proxying (likely NPM) + Security (Fail2Ban, Autheilia?)
Audiobooks
Comic book management
Translation service
Document manager
Home Assistant on its own Pi4 when I can get hold of oneMy lemmy instance :)
I used to self-host email with email and postfix, but I gave up with the amount of spam coming my way and moved to Proton
Got 2 24/7 runners in my home:
- Ubuntu 22.04 LTS Server on a tiny Dell Optiplex 7000 server (Intel 12700T), strapped under my desk, hosting everything in docker:
- Plex
- *arrs, on top of a Gluetun container for privacy
- QBittorrent, to download big files, like … eh … linux distributions
- NginX Proxy Manager
- PhotoPrism (I subscribe, it’s awesome, cannot recommend it enough)
- Portainer, as a management interface
- Wireguard VPN server, to enable me to get into my LAN and prevent having to expose anything to the public internet.
- Watchtower, for keeping things up to date.
- A Synology 718+ with 10 TB in a a dual SHR RAID.
- PhotoPrism storage
- Plex media storage
In addition, I’m hosting a couple of Wireguard VPS in the US and a Nordic country to give me access to regional content (I pay for a few regional services through friends living there - i.e. they pay monthly and I pay them yearly for an account on a region-locked service) - not sure if that counts as “self-hosting” :)
- Plex and Jellyfin for movies and TV shows. I want to switch from Plex to Jellyfin but it is not quite there yet. It‘s very little effort to keep Jellyfin running in parallel though. I am keeping it around to regularly compare the two and re-evaluate.
- Tube Archivist for archiving and watching YouTube videos.
- Miniflux for reading feeds.
- Nextcloud, mainly for calendars and contacts; occasionally for sharing files with others.
- Syncthing for syncing files.
- Financier for budgeting.
- Paperless-ngx for managing documents.
- Qbittorrent for downloading and sharing Linux ISOs.
- Prowlarr for searching Linux ISOs.
- Copyparty for sharing Linux ISOs with friends.
- Shaarli for saving bookmarks.
- Jekyll for statically generating my personal blog.
- Caddy as HTTP server / reverse proxy for all of the above. Automatically provisions certificates from Let‘s Encrypt.
- PostgreSQL as database for Nextcloud and Miniflux.
- Simple Nixos Mailserver for emails with Postfix, Dovecot and rspamd.
- Dehydrated for getting certificates from Let‘s Encrypt for the mail server.
- Btrbk and Restic for backups.
Most of this stuff runs on my server at home (ASRock J4105-ITX, 8 GB RAM , 250 GB SSD, 18 TB HDD). The mail server and the blog run on a cheap VPS (1 vCPU, 2 GB RAM, 20 GB SSD). Both servers run NixOS.