25
Hosting multiple types of fediverse instances on the same server? (lemm.ee)
submitted 1 week ago by 3dmvr@lemm.ee to c/selfhosted@lemmy.world
11 comments fedilink hide all child comments

Can I rent an 8 core 16gb vps and then put friendica, mbin, mastodon, and lemmy on it? Can I somehow use the same site to login to all of them or would it be like m.site, l.site, etc.

I use a hypervisor? enhance.com rnow to control my wordpress sites, can I still monitor/backup the servers with enhance while manually setting up fediverse instances? I could setup roles like nginx, mariadb, through it and when I do that it lets me easily setup, backup, and migrate websites to different servers I lose this functionality if I dont set up those roles through the panel. So I was wondering if I can set up those roles and then just setup the websites manually through ssh following the guides. Do they all use nginx other than friendica?

Interested in friendica, mbin, lemmy, mastodon, and peertube (going to rent another server and more storage eventually if I do that

top 11 comments
sorted by: hot top controversial new old
[-] tofuwabohu@slrpnk.net 12 points 1 week ago

You need different Subdomains as you suggested in your first paragraph. And add a reverse proxy like nginx or caddy to the machine which then proxies the different subdomains to the respective services (e.g. lemmy.your.site to localhost:2222, mbin.your.site to localhost:3333).

Theoretically, you could put a landing page behind some SSO/iam like authentik, and then link to the subdomains from the landing page, but eventually users will need be on the subdomain to use a specific site.

[-] sxan@midwest.social 4 points 1 week ago

Caveat: this is not my area of expertise. However, I agree SSO is going to be the hardest part of this.

OP, you can use lldap to centralize authentication, so that each user had only one account and one password for all sites. It's trickier to get each of these platforms to work together with SSO. For that, you'll need something like Authentik (OSS SSO solution, like Okta) which you then back by lldap - Authentik handles the SSO and authorization part, and uses lldap for the authentication part. I suggest doing it in stages: install your servers, get them using lldap to log in, and then when it's all working insert Authentik into the mix. Doing something like this and learning all the technology at once is boiling the ocean.

I'm recommending lldap over OpenLDAP because I've used both extensively, and OpenLDAP is a nightmare whereas lldap isn't. lldap is trivial to install, and comes with a nice, simple user/group admin web interface, a sane default schema configuration, and is stupid easy to back up. Just getting OpenLDAP configured with the right schemas can take forever. If you'd said you already had a lot of experience with LDAP in general, then sure: OpenLDAP is capable and powerful. But it's harder.

My one caveat about lldap is that I'm not sure that it's possible to set up master/slave replication - or any sort of replication - which is probably not going to be an issue for your all-in-one set-up, but would limit scaling and failover if you ever get there.

I do rant a little about OpenLDAP because LDAP was in supposed to be lightweight OLAP, and yet is some of the most frustrating software I've ever had to deal with.

Again, I'm not a devops, or any sort of ops, guy, so my perspective is colored by the an attitude that ops is a necessary evil, and not something I love, so easier==better.

[-] curled@lemm.ee 1 points 1 week ago

Alternatively, you can add an LDAP outpost/provider to Authentik. Now you don't need to manage any LDAP server at all, and use the Authentik directory to manage users and groups. wiki link

[-] jlh@lemmy.jlh.name 7 points 1 week ago* (last edited 1 week ago)

I would recommend installing k3s and cnpg on the VPS. These will make it easier to run the various containers and databases you will need to run lemmy, etc. This is the standard way that big companies run servers in 2025, and it's 100% portable to any server/hosting company just through copying and pasting the yaml files (like docker compose).

https://docs.k3s.io/quick-start

https://cloudnative-pg.io/documentation/1.25/quickstart/

Make sure you save backups of your VPS, and use object storage to backup your databases.

I have example kubernetes configuration for lemmy on my Git. It doesn't use any volumes/local-storage, all user data is saved into either the database or object storage, to make it cheap and easy to backup.

I'm a professional DevOps engineer, so I work with hosting every day. Let me know if you have any questions or want advice.

[-] tofuwabohu@slrpnk.net 3 points 1 week ago

Don't you think recommending k8s to someone who just wants to run some services, which partly don't even have k8s support/helmcharts on the same machine is a bit too much? Compared to docker compose or whatever op is using, it's way more complex if you're not already familiar with kubernetes resources.

I don't know much about k3s in particular admittedly, but I wouldn't recommend k8s for this unless op just wants to use it as a lab.

[-] krnl386@lemmy.ca 3 points 1 week ago

Not to sound dismissive, but this post is such a perfectly phrased AI prompt. 😂

[-] 3dmvr@lemm.ee 1 points 1 week ago

I prob got used to talking to it, have to reword what I say 50 times for it to work

[-] mesamunefire@lemmy.world 2 points 1 week ago* (last edited 1 week ago)

I have a similar setup with around 5 federated services (Lemmy/bookwyrm/mastodon(GoToSocial)/pixelfed/Peertube/etc... and it works well. The slowest component is the internet connection by far. Yunohost makes it easy but a couple of the more niche services are on docker. All self hosted on an old PC and a pi.

Just a note, these are all less than 5 users and my setup is not designed for anything more than the family. Also of all the services, Mastodon base install was by far the most resource intensive of all of them. It's definitely made for more than 100+ users and quite quickly used up all my hard drive. Their caching system needs some work if I'm honest. After self hosting for about half a year, I went with GoToSocial, which saved me 100s of gigabytes. It's no faster or slower but the same clients work with it. It's basically designed for less than 10 users which is nice. No issues after about a year.

[-] MangoPenguin@lemmy.blahaj.zone 1 points 1 week ago

I'd say the easiest is installing them using Docker, with a reverse proxy in front. That way you're not mixing multiple services into the same database and stuff like that.

[-] 3dmvr@lemm.ee 0 points 1 week ago

Also Mbin vs Piefed?

[-] 3dmvr@lemm.ee 0 points 1 week ago

Answer the question, if you can downvote you can move your fingers a few more times and say why

this post was submitted on 28 Jan 2025
25 points (100.0% liked)

Selfhosted

41924 readers
386 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz