this post was submitted on 13 Mar 2026
1330 points (99.0% liked)

Selfhosted

56958 readers
1244 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 
top 50 comments
sorted by: hot top controversial new old
[–] HugeNerd@lemmy.ca 4 points 9 hours ago

Yes that does seem to describe modern computing, indeed, consumer electronics in general.

It's no longer about solving actual problems, it IS the problem.

[–] Hupf@feddit.org 6 points 13 hours ago

No upstream bugs to fix?

Off topic, warning: this comment section is making me want to learn things

It's been 2 days off reddit and my brain has opinions other than "aaaargh" or "meh".

Proceed with caution

[–] MonkeMischief@lemmy.today 20 points 20 hours ago (1 children)

Don't worry, you're one Docker pull away from having to look up how to manually migrate Postgres databases within running containers!

(Looks at my PaperlessNGX container still down. Still irritated.)

[–] M4d_Ghoul@lemmy.ml 2 points 9 hours ago

I feel your pain. Had to fix my immich, NC and Joplin postgresdb. Turned out, DB via NFS is a risky life. ;D

[–] damnthefilibuster@lemmy.world 19 points 20 hours ago

Backups. You're forgetting them.

[–] Bakkoda@lemmy.world 20 points 21 hours ago (1 children)

I should do some breaking network changes... While tunneled in.

[–] sunbeam60@feddit.uk 9 points 11 hours ago

“Yes, while connected to my wireguard server through port 123 here from my Chinese office, I should probably try to upgrade the wireguard server. That’s a great idea!”

Ask me how I know.

[–] Abbysimons@lemmy.world 29 points 1 day ago (1 children)

The rare moment when everything actually works. 😄

[–] kamen@lemmy.world 9 points 23 hours ago (2 children)
[–] Puddinghelmet@lemmy.world 2 points 12 hours ago

Wreck it Ralph!!

load more comments (1 replies)
[–] nonentity@sh.itjust.works 105 points 1 day ago (1 children)

If it’s stable, it’s not a lab.

That’s infrastructure.

load more comments (1 replies)
[–] PHLAK@lemmy.world 42 points 1 day ago (3 children)

Time to start documenting it!

[–] irmadlad@lemmy.world 23 points 1 day ago (1 children)

At 71, I have to document. I started a long time ago. I worked for a mec. contractor long ago, and the rule was: 'If you didn't write it down, it didn't happen.' That just carried over to everything I do.

[–] Vile_port_aloo@lemmy.world 9 points 1 day ago (1 children)

Do you write down what you write down on the internet?

load more comments (1 replies)
load more comments (2 replies)
[–] squirrel@piefed.zip 223 points 1 day ago (3 children)

Let's tinker around and accidentally break something.

[–] wersooth@lemmy.ml 75 points 1 day ago (4 children)

and debug it until you have to reinstall your entire stack from scarch

[–] SpikesOtherDog@ani.social 41 points 1 day ago

GET OUT OF MY HOUSE!

load more comments (3 replies)
[–] FreshLight@sh.itjust.works 4 points 21 hours ago

My ~~man~~ person!

load more comments (1 replies)
[–] truthfultemporarily@feddit.org 157 points 1 day ago (8 children)

Have you tried introducing unnecessary complexity?

[–] Sabata11792@ani.social 50 points 1 day ago (1 children)

If you know how your setup works, then that's a great time for another project that breaks everything.

[–] cenzorrll@piefed.ca 35 points 1 day ago (1 children)

Saturday morning: "Incus and podman seem interesting. I bet I could swap everything over while the family is out this afternoon"

Sunday evening: "Dad, when will the lights work again?"

[–] Sabata11792@ani.social 20 points 1 day ago (2 children)

“Dad, when will the lights work again?

As soon as selinux decides I have permission.

load more comments (2 replies)
load more comments (7 replies)
[–] paequ2@lemmy.today 20 points 1 day ago (6 children)

Actually, one thing I want to do is switch from services being on a subdomain to services being on a path.

immich.myserver.com -> myserver.com/immich
jellyfin.myserver.com -> myserver.com/jellyfin

I'm getting tired of having to update DNS records every time I want to add a new service.

I guess the tricky part will be making sure the services support this kind of routing...

[–] suicidaleggroll@lemmy.world 24 points 1 day ago* (last edited 1 day ago) (1 children)

Why are you having to update your DNS records when you add a new service? Just set up a wildcard A record to send *.myserver.com to the reverse proxy and you never have to touch it again. If your DNS doesn't let you set wildcard A records, then switch to a better DNS.

[–] Scrath@lemmy.dbzer0.com 9 points 1 day ago (3 children)

Not OP but a lot of people probably use pi-hole which doesn't support wildcards for some inane reason

[–] Klajan@lemmy.zip 2 points 11 hours ago

It does support it, you just have to add it to dnsmasq. I have it Setup under misc.dnsmasq_lines like so:

address=/proxy.example.com/192.0.0.100
local=/proxy.example.com/

Then I have my proxied service reachable under service.proxy.example.com

[–] Croquette@sh.itjust.works 5 points 23 hours ago (3 children)

That's my case. I send every new subdomain to my nginx IP on pi-hole and then use nginx as a reverse proxy

load more comments (3 replies)
load more comments (1 replies)
[–] CorvidCawder@sh.itjust.works 17 points 1 day ago

Wildcard CNAME pointing to your reverse proxy who then figures out where to route the request to? That's what I've been doing - this way there's no need to ever update DNS at all :)

I find the path a bit clunky because the apps themselves will oftentimes get confused (especially front-ends). So keeping everything "bare" wrt path, and just on "separate" subdomains is usually my preferred approach.

load more comments (4 replies)
[–] Coleslaw4145@lemmy.world 40 points 1 day ago* (last edited 1 day ago) (24 children)

Now try migrating all your docker containers to podman.

load more comments (24 replies)
[–] DownByLaw@sh.itjust.works 38 points 1 day ago (6 children)

Have you already tried implementing an identity provider like Authentik, so you can add OIDC and ldap for all your services, while you are the only one that’s using them? 🤔

load more comments (6 replies)
[–] Prunebutt@slrpnk.net 77 points 1 day ago (7 children)

When's the last time you checked if your backup solution works?

[–] Ek-Hou-Van-Braai@piefed.social 69 points 1 day ago (1 children)

But if my backups actually work then I miss out on the joy of rebuilding everything from scratch and explaining to my wife why non of the lights in the house work anymore.

load more comments (1 replies)
load more comments (6 replies)
[–] fruitycoder@sh.itjust.works 5 points 22 hours ago

How is the kubernetes (k3s/rke2) migration coming along?

[–] Shayeta@feddit.org 4 points 21 hours ago* (last edited 21 hours ago)

One word: chaos engineering!

[–] jeffep@lemmy.world 13 points 1 day ago (5 children)

Can't believe nobody here mentioned nixOS so far? How about moving all of your configs in a flake and manage all of your systems with it?

load more comments (5 replies)
[–] tal@lemmy.today 45 points 1 day ago* (last edited 1 day ago) (2 children)

logging is probably down

You do, of course have a dedicated rsyslogd server? An isolated system to which logs are sent, so that if someone compromises another one of your systems, they can't wipe traces of that compromise from those systems?

Oh. You don't. Well, that's okay. Not every lab can be complete. That Raspberry Pi over there in the corner isn't actually doing anything, but it's probably happy where it is. You know, being off, not doing anything.

load more comments (2 replies)
[–] tal@lemmy.today 39 points 1 day ago (9 children)

You have remote power management set up for the systems in your homelab, right? A server set up that you can reach to power-cycle other servers, so that if they wedge in some unusable state and you can't be physically there, you can still reboot them? A managed/smart PDU or something like that? Something like one of these guys?

Oh. You don't. Well, that's probably okay. I mean, nothing will probably go wrong and render a device in need of being forcibly rebooted when you're physically away from home.

load more comments (9 replies)
[–] Avicenna@programming.dev 16 points 1 day ago (3 children)

You can always configure your vim further

load more comments (3 replies)
[–] FauxLiving@lemmy.world 23 points 1 day ago

The comments in this thread have collectively created thousands of person-hours worth of work for us all...

load more comments
view more: next ›