Trying to figure out how to get my qBittorrent docker container to route all traffic through my VPS through wireguard. The catch is that the webui needs to be accessible through LAN.
I’m 3 time zones away from my server and it hasn’t crashed yet after being gone for 3 days. I’m very proud of it.
The absolute bliss
Same with me when I was in Brazil, it was chugging along just fine back in New England
I feel you. I did not expect mine to crash but I am in Japan and streamed a movie from my server on the West coast of North America.
That's such a nice feeling
I've gotten a CalDAV server, audiobookshelf, and selfhosted obsidian live sync running on my laptop while I wait for movers to bring my shit to my house. Then gotta migrate it all across to my mini PC afterwards. Doing a modular NixOS setup to replace/complement what I used to have running on proxmox.
Once everything is on a dedicated machine I'm going to make a nice little homepage for it, inspired by a previous thread here.
Tried to setup custom domains using Nginx Proxy Manager and Let's Encrypt DNS-01 challenges so I wouldn't have to open any ports and it worked!... except not really?
Proxy Manager shows everything was successful but the domains don't go anywhere. It seems to be because the TP-Link router from my ISP does DNS Rebinding protection... with no option to turn it off apparently... why......
So now I don't know where to go. I'm not really fancying hosting DNS myself but if I can't fix this any other way then I guess I'll do it. Or maybe I should ditch the ISP TP-Link and get something I could flash OpenWRT on?
Is the ISP supplied box also your wifi?
If not, IMHO I'd use the ISP equipment as a pass-through modem (if possible on that model?) and have a separate OpenWRT / pfSense firewall do all the heavy lifting for DHCP, DNS, ad blocking, etc
Depends if you'd then need another WAP, of course
It is also my Wifi, yeah. I didn't even consider that'd complicate things further. It does have a "pass-through" option though.
My NAS and our desktops are all on WiFi, so I'm planning to run some cable or install moca or something. Our uplink is currently only 100mbit (max for this ISP, I refuse to switch) but our city plans to roll out gigabit everywhere in the next couple years, so I want something forward compatible (powerline will probably be too limiting). SO has been complaining about latency, and I think the WiFi card is to blame, so I'm trying this before upgrading the WiFi card.
Our house has the following:
- phone lines everywhere (could maybe use the existing cables to fish through cat6?)
- cable jacks e everywhere (have an unused satellite dish)
- lots of power plugs
- two floors (rambler + basemen) with pretty much no shared walls (everything will need to jog a bit)
I'm going to try running some cable tomorrow (holiday in the US, just want a test run from bedroom internet source -> basement water heater room), but if that doesn't work, I'll need a backup plan.
Anyone have experience with any of the above? Tips?
This may sound dumb or be helpful so I'll toss it in just in case:
Depending on when they're built, a lot of houses' RJ-11 phone jacks are actually using CAT-5E. If you're lucky, they're individual runs and not daisy-chained!
The way they set up the runs here is weird though, they're cat-5E but we have no fancy junction box. It all runs to some hatch on the side of the house presumably for telecom/satellite TV installers. So you might have secret ethernet cable behind your landline jacks, even if there's no tidy junction box! :)
It was cool finding out there's already capable infrastructure in the walls, but you gotta replace the wall jacks with RJ-45 using a tone tool to label which one goes where, and then the next trick is figuring out an affordable switch that can handle a garage that could get to 100ºF + in summer...
But anyway, worth checking before you start getting too deeply sunk into other solutions. :)
It was built in the late 80s so I doubt it's cat5. But I also know the basement was finished later, so maybe I'll get lucky at least with those.
I just need to figure out where it's all going to see if I can reuse it.
Another interesting thing is the previous owner ran speaker wire to the master bed, living room, and basement room exactly where I want to go, so maybe can reuse those runs.
Set up paperless-ngx and cannot get my scanner to send a scan to a FTP server. It supposedly supports sending to FTP but doesn't have much documentation for it. I've tried FTPS, SFTP, and unsecured FTP. Both secure types just cause it to error out. But with unsecured the scanner just freezes then reboots. Really annoying me. I'm about to give up and just scan to s USB thumb drive then copy the scans to the server.
I had to have my scanner scan to a windows VM that saves it to a network drive for paperless to injest. Its not my favorite solution but at least I don't have to manually move the files around
The scanner also supports sending to email. I will try that before setting up a windows VM. I was just tubing i would use USB for the initial import of my file cabinet.
Still haven't properly set up my backups ... Have my Nextcloud on a zfs (single disk sadly) and want to send it to a server at my parents place (also zfs) but both are behind NAT. While I've successfully set up wireguard between the two, but the connection won't stay up so there's still a ways to go till I got a happy off-site Backup.
Maybe Tailscale could be super useful for this!
I kinda shied away from tailscale because "I wanted to do it on my own" but I've just set up tailscale (while on a train no less) and it was really simple ... Guess I'll run with it for now :D now I'll just have to set up the send/receive scripts but that's just some BASHing my head against a wall ;)
Thanks for the suggestion!
If you want to have more control about it and become independent of the SaaS offering, you can even selfhost headscale, a FOSS tailscale control server. I run it myself with zero issues.
Yeah I saw that. It's definitely intriguing. For now I'm good with the free tailscale but might look into it. What's your experience with headscale? It's mostly a broker right so probably not to Ressource excessive? I have a small public VPS for getting to my selfhosted infrastructure so I might just add in headscale there
Headscale is pretty light on resources, especially since it doesn't come with a webui (there is third-party ones like headplane you can use though). RAM usage is like 70mb for me currently.
Looking for a self-hosted period tracking app with companion android app. Have done literally zero investigation at this point but it's on my todo.
period tracking app surveillance... how did we as society come to accept this?
That's definitely one of those things I found bizarre and awful yet...entirely unsurprising. I can see how selling that data probably sounds like such a lucrative edge to marketing companies.
how did we as society come to accept this?
By not establishing ethical ~~lines~~ high-voltage containment fences on the advertising industry quickly enough, and letting them convince us "this is just how business works", when their entire existence is about finding the scummiest ways to hack free will for profit.
I have yet again broke a Nextcloud server By trying to upgrade it (from 27 to 30) . Even after hours of debug i’ll have to remake it from scratch ….again
And that is why I no longer run Nextcloud
I try to install docker (only docker) on the extern hdd.... I have some tutorials, but I do not get
I have setup a immich docker container and am slowly moving users and images from google photos.
Replacing Google Photos is still on my to-do list. How do you like Immich so far? Did you compare it to any alternatives?
Interested in this too - immich gets so much viral hype I'm a little suspicious of it
Why is it so hard to send large files?
Obviously I can just dump it on my server and people can download it from a browser but how are they gonna send me anything? I'm not gonna put an upload on my site, that's a security nightmare waiting to happen. HTTP uploads have always been wonky, for me, anyway.
Torrents are very finnicky with 2-peer swarms.
instant.io (torrents...) has never worked right.
I can't ask everyone to install a dedicated piece of software just to very occasionally send me large files
Sending is someone else's problem. They have all sorts of different understandings and tools and I can't deal with them all. So the only alternative is to set them up with an account in (e.g.) Nexcloud or just accept whatever Google service they use to send you a large file.
Sending other people files is easy in Nextcloud, just create a shared link and unshare when done. Set a password on the file itself.
Maybe something like Copyparty would be what you're looking for?
I think that openssh or any ssh or ftp app should facilitate this.
On a related note, it would be nice if there was a shared storage option for self hosting. It wouldn't be the same as self hosting, but more like distributed hosting where everyone pools storage they have available and we could have an encrypted sharing option.
I sometimes create them a Nextcloud account and send them the credentials
Could you set a 'password' on the uploads? So the server will only accept and start the upload if the password is present. The password is a passphrase to make it easy to type in.
My big problem is remote stuff. None of my users have aftermarket routers to easily manipulate their DNS. One has an android modem thing which is hot garbage. I'm using a combination of making their pi be their DHCP and one user is running on avahi.
Chrome, the people's browser of choice, really, really hates http so I'm putting them on my garbage ######.xyz domain. I had plans to one day deal with Https, just not this day. Locally I just use the domain for vaultwarden so the domain didn't matter. But if people are going to be using it then I'll have to get a more memorable one.
System updates have been a faff. I'm 'ssh'ing over tailscale. When tailscale updates it kicks me out, naturally. Which interrupts the session, naturally. Which stops the update, naturally. Also, it fucks up dkpg beyond what --configure -a can repair. I'll learn to update in background one day, or include tailscale in the unattended-upgrades. Honestly, I should put everything into unattended-upgrades.
Locally works as intended though, so that's nice. Everything also works for my fiancee and I remotely all as intended, which is also nice. My big project is coalescing what I've got into something rational. I'm on the make it good part of the "make it work > make it good" cycle.
Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!