New to self-hosting

Submitted ⁨⁨2⁩ ⁨days⁩ ago⁩ by ⁨Nighed@feddit.uk⁩ to ⁨selfhosted@lemmy.world⁩

Hi, I’m looking for some recommendations, mostly looking for pointers of where to go and look at/research stuff as I have no idea what is good and what is just well advertised.

Intro: I have finally entered the world of (almost) Gigabit internet, which is opening up options with what I can host.

I currently have: -Pi hole on an actual RP (will probably remain there because its easy)

Inbound Wireguard VPN on my old router (will stop working when my old ISP stops service) -Foundry VTT that I run up on my gaming machine when needed

I will probably also be upgrading my gaming PC in the next few months, so my current rig will probably be put behind the PC to use as a server and for couch gaming.

Info/recommendations I would like:

VPN software (I want to VPN INTO my network) My goto would be wireguard, is that still a good option?
Private cloud/File server: I both want to be able to occasionally (but permamently) host files publicly, but still have the main store be available on the local network only. Is that going to be two pieces of software, or just one?
Is a local video streaming app actually useful for a rare watcher of movies etc, or can they be streamed directly from the file server? its something that I see a lot of people talk about, but don’t really understand why…
Is Docker the way to go for everything? or just install on the machine directly?
~Piracy~ VM - Enabling the virtualisation stuff for Docker mostly breaks virtualbox (at least on windows) any recommendations for how to nicely run a VM alongside docker (if that’s the recommendation)?
Should/Could I be hosting anything else? Foundry will probably be on there. I don’t feel like I have a use for smart home stuff, so home assistant wouldn’t be much use etc.

source

Comments

Sort:hotnew top

dan@upvote.au ⁨2⁩ ⁨days⁩ ago

Should/Could I be hosting anything else?

If you deal with a lot of paperwork, paperless-ngx and paperless-ai are very good.

Maybe something for recipe management - Mealie or Tandoor?

Audiobookshelf for audiobooks and podcasts.

Healthchecks and Uptime Kuma for monitoring and alerting when things go down.

source
- lucid@lemmy.dbzer0.com ⁨2⁩ ⁨days⁩ ago
  What scanner do you have? My biggest hurdle in making real use of paperless revolves around the annoyance of using a flatbed that’s not within arms each of my desk lol
  
  source
  - dan@upvote.au ⁨2⁩ ⁨days⁩ ago
    ScanSnap iX1600. I bought mine from B&H: bhphotovideo.com/…/fujitsu_pa03770_b635_scansnap_…. It’s the one that usually gets recommended for paperless.
    
    It’s a really compact unit - smaller than I thought it’d be! You can put up to 50 sheets in the feeder and it scans them all, on both sides (no need to manually flip the pages). Can scan 40 pages per minute.
    
    There’s just a few minor issues with it, but otherwise it’s perfect:
    
    It was a bit expensive, at $400 in the USA.
    
    You need a Windows or MacOS system to do the initial setup. Setting it up is done through a desktop app rather than through the touchscreen on the device.
    
    It doesn’t support scanning to “the cloud” (Google Drive, etc) without signing up to their cloud service. However, it does support scanning to a SMB share, which is all I needed. I have my paperless-ngx “consume” directory shared via Samba. The default scanning profiles require it to be plugged into a computer running their software, but you can delete all of them and just have a network scan (SMB) one, which works with no computer attached.
    
    source
    -> View More Comments
k4j8@lemmy.world ⁨1⁩ ⁨day⁩ ago
Docker + Caddy (for reverse proxy) fits most use cases IMO. I really like this person’s approach: github.com/DoTheEvo/selfhosted-apps-docker. They use Docker networks to avoid unnecessary port mapping - it’s a very clean method.

source
just_another_person@lemmy.world ⁨2⁩ ⁨days⁩ ago
I’d figure out what exactly you’re wanting to do instead of just asking people what you should be doing. You’re going to get a lot of noise and subjective opinions just generally asking.

There isn’t anything you SHOULD be doing at all, just figure out what would be useful to you.

Just from the things you mentioned you were using, I’d suggest getting an OpenWRT router of some sort so you setup your VPN again. I recommend GL.inet Flint2 for those that ask, but looks like the Flint3 is coming out soon.

For the other stuff you mention…it’s all very subjective, and you’re going to get a lot of noisy opinions. Fact of the matter if you just do what you feel comfortable with. Maybe come back when you have a specific issue you want technical opinions or help with to make more informed decisions.

source
- Nighed@feddit.uk ⁨2⁩ ⁨days⁩ ago
  what benefit does a new router give over just putting the VPN software on the RP for example?
  
  source
  - just_another_person@lemmy.world ⁨2⁩ ⁨days⁩ ago
    You said you have a router from your old ISP that is going away when that ends, or did I misunderatand that part?
    
    An RPi can function as a router…sort of. It will not be a very good one though. Putting your network services on a device like the Flint I mentioned gives it all kinds of benefits over an RPi:
    
    many Ethernet ports
    
    ability to reassign hardware ports
    
    hardware acceleration for network traffic
    
    WiFi 6 (for that particular model, W7 for the newer)
    
    I can go and on with that one. RPi just doesn’t have the power to give the same kind of performance, especially since you mentioned having gigabit internet.
    
    source
    -> View More Comments
neatobuilds@lemmy.today ⁨2⁩ ⁨days⁩ ago
My coworker recommended me unraid, so I tried it and similarly I was upgrading to a new gaming rig so my old gaming rig became my server. It was a mini itx i7 and I started with two 2tb hard drives then just went from there. Learning all the arrs by following the ‘trash guides’ then expanding out. A lot of trial and error and slowly upgrading drives over time.

Now I’m close to 100tb of data and have several family members using my plex server as their only streaming service plus a ton of personal stuff like rss and audio books etc

source
- Nighed@feddit.uk ⁨2⁩ ⁨days⁩ ago
  I only know of it from LTT videos I think, not exactly the best endorsement!
  
  That’s a lot of data (relatively)! Are you paying for the unraid license yearly, or just sitting on an old version?
  
  source
  - lucid@lemmy.dbzer0.com ⁨2⁩ ⁨days⁩ ago
    I also started off with a converted gaming PC. I went with unraid because there was a simple path to upgrading my drives. I started off with 1 and 2 TB drives and eventually upgraded over the years to 12+ TB drives.
    
    From my brief research back then growing a pool in freenas was a headache where upgrading in unraid was easy.
    
    source
  - neatobuilds@lemmy.today ⁨2⁩ ⁨days⁩ ago
    Yeah I have the lifetime license from before they switched to a yearly subscription, for me as I was pretty new to the whole thing it just made it super simple to get up and running, now I’m setting up dockers in compose so still learning but being able to just go to the community app store and use the templates to get things up and running right away was super nice, and the ability to upgrade drives as you go as well
    
    source
Shimitar@downonthestreet.eu ⁨2⁩ ⁨days⁩ ago
I have documented my journey here: wiki.gardiol.org

On short, rent a vps and setup wireguard, then start self hosting everithing you can put yours hands on!!

source
- Nighed@feddit.uk ⁨2⁩ ⁨days⁩ ago
  That’s some nice documentation - way overkill for what I need though.
  
  Out of interest - Why is the VPS required, and why the mention of a non residential IP address? Could that not all be hosted locally if your ISP has given you a static IP address?
  
  source
  - Shimitar@downonthestreet.eu ⁨1⁩ ⁨day⁩ ago
    The VPS is required specially if you, like me, are behind CG-NAT with no way to escape from it. Using a VPS (or any other kind of server with a public IP). Using a VPS is the cheapest option…
    
    residential IPs can be blocked for ports like 80, 443, 22 and the email ports in general (25, etc), using a non-residential IP could give a better experience. Moreover, even if not behind CG-NAT, having a public static and not-changing IP is a good advantage.
    
    Everything is hosted locally! the VPS is only a tunnel between internet and the home server.
    
    source
  - ocean@lemmy.selfhostcat.com ⁨2⁩ ⁨days⁩ ago
    Advantage of a VPS over home server is uptime.
    
    source
    -> View More Comments
  - ocean@lemmy.selfhostcat.com ⁨2⁩ ⁨days⁩ ago
    You can host it at home. Most IPs are not static but for some reason mine hasn’t changed in half a year. If it changes often you can use duckdns.
    
    source
    -> View More Comments
WolfLink@sh.itjust.works ⁨2⁩ ⁨days⁩ ago
Wire guard is pretty easy to set up. Also Docker is great.

source
dan@upvote.au ⁨2⁩ ⁨days⁩ ago
I used to use Wireguard, but Tailscale is a lot easier and has a lot of useful features. Tailscale is built on top of Wireguard but automates all the configuration - all you need to do is install it and log in on all devices. It handles NAT traversal using techniques like UDP hole punching, so you don’t need to configure port forwarding and it works behind firewalls.

What do you want to run in a VM that can’t run in Docker? If you’re using a VPN for torrents or whatever, you can easily use Gluetun and configure the Docker containers so that only done of them use Gluetun’s VPN connection, while the other containers directly connect to the internet.

source
- Nighed@feddit.uk ⁨2⁩ ⁨days⁩ ago
  
  What do you want to run in a VM that can’t run in Docker?
  
  a VM with torrent client and a killswitched VPN was the easiest way to get a secure setup. also meant if it ever got virused I could just roll it back. I need to look more into what docker can actually do by the looks of it.
  
  You are the second person to suggest unraid - is it ok to sit on the perpetual license (for a few years at a time), or are the updates really required? It supports GPU passthrough right, so I can have a ‘normal’ linux desktop for gaming while running the other stuff in the background?
  
  TY for the response!
  
  source
  - dan@upvote.au ⁨2⁩ ⁨days⁩ ago
    
    a VM with torrent client and a killswitched VPN
    
    You can use Docker for the same setup using the –network container:vpn flag to docker run or network_mode: “container:vpn” option in docker-compose.yml where vpn is the name of the container to route through. This makes one Docker container use the network of another (the VPN one), so both containers will share the same internal IP address, and you’ll have to map any ports on the VPN container rather than the torrent/whatever one. This is just as safe as a killswitched VPN.
    
    also meant if it ever got virused I could just roll it back
    
    Consider using a file system that has snapshots, like ZFS. Then you can get this same behaviour for your whole system rather than just a VM :)
    
    is it ok to sit on the perpetual license (for a few years at a time), or are the updates really required?
    
    I’m not sure, as the new licensing model is pretty new. I purchased Unraid in 2023, and back then, all licenses included lifetime updates. They switched to a subscription mode to make the business more viable long-term and afford to hire more developers, which I definitely understand.
    
    It supports GPU passthrough right
    
    It does. You can pass through any PCIe devices, so for example if you have multiple network cards, you can pass one directly to a VM (it’s a bit more efficient compared to using a virtual Ethernet adapter)
    
    source
    -> View More Comments
Xanza@lemm.ee ⁨2⁩ ⁨days⁩ ago
Here ya go: selfh.st/apps/

Will cover about 90% of your bases there. You can even look up proprietary software and it will show you self-hostable alternatives.

My goto would be wireguard, is that still a good option?

Yes.

Private cloud/File server

selfh.st/apps/?tag=File+Sharing

Is a local video streaming app actually useful for a rare watcher of movies etc, or can they be streamed directly from the file server?

You can do it any number of ways. I have it setup a pretty cool way, I think. I leave my PC on all the time. I also have a home NAS with all my media files on it. I host Jellyfin server on my PC and in the Jellyfin settings link to the network location of the files (\\nas\media\tv, etc). Works great, especially for transcoding because I run the server on my Windows PC, it gets access to my GPU for transcoding. Really great setup I like to think. Only drawback being you have to leave your PC on all the time, which doesn’t bother me.

Is Docker the way to go for everything? or just install on the machine directly?

There are alternatives to docker, like LXC but they’re not as widely used as Docker. So unfortunately…

Another option for you could be Hyper-V if you don’t mind using your PC to run containers. I like it better than running docker containers.

source
- Nighed@feddit.uk ⁨2⁩ ⁨days⁩ ago
  
  Here ya go: selfh.st/apps/
  
  oooh, TY! Now to guess which ones will still be maintained in 5 years 😆
  
  I guess I must as well have a play with some stuff like jellyfin to see if its useful. The ‘server’ in this case would have a 6 year old GPU in it, so should hopefully have enough grunt.
  
  Thanks for the info!
  
  source
  - Xanza@lemm.ee ⁨2⁩ ⁨days⁩ ago
    
    Now to guess which ones will still be maintained in 5 years 😆
    
    If you figure it out, lemme know. lol
    
    source
0x0@programming.dev ⁨1⁩ ⁨day⁩ ago
VPN: Headscale is an open source, self-hosted implementation of the Tailscale control server, which itself uses WireGuard under the hood.

For the file share, i’d say separate into two groups/VMs probably.
Whatever you might want to self-host publicly (are you sure?) keep it isolated. Its own VLAN, IP/host/subnet, container, VM heck its own hardware if possible. Or use a VPS and only self-host your private stuff in your LAN.

For what you should host: that’s up to you. I’ve heard jellyfin’s used a lot for media stuff.

source