After 1.5 years of learning selfhosting, this is where I'm at

Submitted ⁨⁨9⁩ ⁨months⁩ ago⁩ by ⁨7Sea_Sailor@lemmy.dbzer0.com⁩ to ⁨selfhosted@lemmy.world⁩

https://lemmy.dbzer0.com/pictrs/image/eb3a2d5e-c499-4655-9e95-ab4cef3fee93.png

@selfhosted@lemmy.world

Mid 2022, a friend of mine helped me set up a selfhosted Vaultwarden instance. Since then, my “infrastructure” has not stopped growing, and I’ve been learning each and every day about how services work, how they communicate and how I can move data from one place to another. It’s truly incredible, and my favorite hobby by a long shot.

Here’s a map of what I’ve built so far. Right now, I’m mostly done, but surely time will bring more ideas. I’ve also left out a bunch of “technically revelant” connections like DNS resolution through the AdGuard instance, firewalls and CrowdSec on the main VPS.

Looking at the setups that others have posted, I don’t think this is super incredible - but if you have input or questions about the setup, I’ll do my best to explain it all. None of my peers really understand what it takes to construct something like this, so I am in need of people who understand my excitement and proudness :)

source

Comments

Sort:hotnew top

empireOfLove2@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
me after 15 years of intermittent self hosting:

i have the one random office PC that runs minecraft

…yeah that’s it

source
- RiderExMachina@lemmy.ml ⁨9⁩ ⁨months⁩ ago
  With the enshittification of streaming platforms, a Kodi or Jellyfin server would be a great starting point. In my case, I have both, and the Kodi machine gets the files from the Jellyfin machine through NFS.
  
  Or Home Assistant to help keep IOT devices to be more IoS. Or a Nextcloud server to try to degoogle at least a little bit.
  
  Maybe a personal Friendica instance for your LAN so uour family can get their Facebook addiction withojt giving their data to Meta?
  
  source
  - Specal@lemmy.world ⁨9⁩ ⁨months⁩ ago
    Additionally, using jottacloud with 2 VPS’s (one of them being built on epyc like from OVH cloud) can get you a really good download server and streaming server for about £30 a month, which is the same as having netflix and Disney plus, except now you can have anything you want.
    
    I have a contabo 4core 8gb ram VPS that handles downloading content.
    
    A OVH 4core 8gb VPS that handles emby (I keep trying to go back to jellyfin but it’s just slightly slower than emby at transcoding and I need to squeeze as much performance out of my VPS as possible so… Maybe one day jelly)
    
    And I have a really good streaming experience with subtitles that don’t put big black boxes on the screen making 1/8th of the screen non viewable.
    
    source
  - acockworkorange@mander.xyz ⁨9⁩ ⁨months⁩ ago
    IoS? Internet of stuff?
    
    source
    -> View More Comments
- Turun@feddit.de ⁨9⁩ ⁨months⁩ ago
  Nice
  
  Only host what you need.
  
  source
IlIllIIIllIlIlIIlI@lemmy.world ⁨9⁩ ⁨months⁩ ago
This seems like work but from/for home.

source
- jelloeater85@lemmy.world ⁨9⁩ ⁨months⁩ ago
  You should see some of the literal data centers folks have in their houses. It’s nuts.
  
  source
ReallyActuallyFrankenstein@lemmynsfw.com ⁨9⁩ ⁨months⁩ ago
I’ve saved this. I set up unraid and docker, have the home media server going, but I’m absolutely overwhelmed trying to understand reverse proxy, Caddy, NGINX and the security framework. I guess that’s my next goal.

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  Hey! I’m also running my homelab on unraid! :D
  
  The reverse proxy basically allows you to open only one port on your machine for generic web traffic, instead of opening (and exposing) a port for each app individually. You then address each app by a certain hostname / Domain path, so either something like movies.myhomelab.com or myhomelab.com/movies.
  
  The issue is that you’ll have to point your domain directly at your home IP. Which then means that whenever you share a link to an app on your homelab, you also indirectly leak your home location (to the degree that IP location allows). Which I simply do not feel comfortable with. The easy solution is running the traffic through Cloudflare (this can be set up in 15 minutes), but they impose traffic restrictions on free plans, so it’s out of the question for media or cloud apps.
  
  That’s what my proxy VPS is for. Basically cloudflare tunnels rebuilt. An encrypted, direct tunnel between my homelab and a remote server in a datacenter, meaning I expose no port at home, and visitors connect to that datacenter IP instead of my home one. There is also no one in between my two servers, so I don’t give up any privacy. Comes with near zero bandwith loss in both directions too! And it requires near zero computational power, so it’s all running on a machine costing me 3,50 a month.
  
  source
  - ReallyActuallyFrankenstein@lemmynsfw.com ⁨9⁩ ⁨months⁩ ago
    I appreciate this thoughtful reply. I read it a few times, I think I understand the goal. Basically you’re systematically closing off points that leak private information or constitute a security weakness. The IP address and the ports.
    
    For the VPS, in order for that to have no bandwidth loss, does that mean it’s only used for domain resolution but clients actually connect directly to your own server? If not and if all data has to pass through a data center, I’d assume that makes service more unreliable?
    
    source
    -> View More Comments
  - dan@upvote.au ⁨9⁩ ⁨months⁩ ago
    
    it’s all running on a machine costing me 3,50 a month.
    
    You could use a cheaper VPS (like a $15/year one) and it should be fine with this use case :)
    
    source
    -> View More Comments
- Specal@lemmy.world ⁨9⁩ ⁨months⁩ ago
  Caddy makes it so you don’t have to understand reverse proxies to use them, the config is literally just "reverse_proxy " and then gives it a let’s encrypt SSL certificate. It’s beautiful for self hosting.
  
  source
dan@upvote.au ⁨9⁩ ⁨months⁩ ago
I’d recommend using Borgbackup over SSH, instead of just using rclone for backups. As far as I know, rclone is like rsync in that you only have one copy of the data. If it gets corrupted at the source, and that gets synced across, your backup will be corrupted too. Borgbackup and Borgmatic are a great way to do backups, and since it’s deduplicated you can usually store months of daily backups without issue. I do daily backups and retain 7 daily backups, 4 weekly backups, and ‘infinite’ monthly backups (until my backup server runs out of space, then I’ll start pruning old monthly backups).

Borgbackup also has an append-only mode, which prevents deleting backups. This protects the backup in case the client system is hacked. Right now, someone that has unauthorized access to your main VPS could in theory delete both the system and the backup (by connecting via rclone and deleting it). Borg’s append-only mode can be enabled per SSH key, so for example you could have one SSH key on the main VPS that is in append-only mode, and a separate key on your home PC that has full access to delete and prune backups. It’s a really nice system overall.

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  You’re right, that’s one of the remaining pain points of the setup. The rclone connections are all established from the homelab, so potential attackers wouldn’t have any traces of the other servers. But I’m not 100% sure if I’ve protected the local backup copy from a full deletion.
  
  The homelab is currently using Kopia to push some of the most important data to OneDrive. From what I’ve read it works very similarly to Borg (deduplicate, chunk based, compression and encryption) so it would probably also be able to do this task? Or maybe I’ll just move all backups to Borg.
  
  Do you happen to have a helpful opinion on Kopia vs Borg?
  
  source
  - dan@upvote.au ⁨9⁩ ⁨months⁩ ago
    I haven’t tried Kopia, so unfortunately I can’t compare the two. A lot of the other backup solutions don’t have an equivalent to Borg’s append-only mode though.
    
    source
    -> View More Comments
thantik@lemmy.world ⁨9⁩ ⁨months⁩ ago
Very nice setup imho. Quite a bit more complicated than mine - mine is basically just the left box without being behind a VPS or anything. I’m also running fail2ban in front of my services, so that if it gets hit with too many 404s because someone is poking around, they get IP banned for 30d

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  I’m still on the fence if I want to expose Jellyfin publicly or not. On the one hand, I never really want to stream movies or shows from abroad, so there’s no real need. And in desperate times I can always connect to Tailscale and watch that way. But on the other, it’s really cool to simply have a web accessible Netflix. Idk.
  
  source
  - thantik@lemmy.world ⁨9⁩ ⁨months⁩ ago
    Honestly, I installed Ombi, so friends can request movies - and gave them all jellyfin logins as well. I’m not running any kind of pay-for service, I’m just giving them access to my library. Additionally, my kids will sometimes spend the night at friends, etc - and their friend won’t have an anime, or a crunchyroll subscription, so they’ll pull it up on jellyfin. It’s easy to remember for them because it’s just jellyfin.mydomain.com
    
    source
    -> View More Comments
ginko@lemmy.world ⁨9⁩ ⁨months⁩ ago
Architecture looks dope

Hope you’ve safeguarded your setup by writing a provisoning script in case anything goes south.

I had to reinstall my server from scratch twice and can’t fathom having to reconfigure everything manually anymore

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  Nope, don’t have that yet. But since all my compose and config files are neatly organized on the file system, by domain and then by service, I tar up that entire docker dir once a week and pull it to the homelab, just in case.
  
  How have you setup your provisioning script? Any special services or just some clever batch scripting?
  
  source
  - ginko@lemmy.world ⁨9⁩ ⁨months⁩ ago
    Old school ansible at first, then I ditched it for Cloudbox (an OSS provisioning script for media server)
    
    Works wonders for me but I believe it’s currently stuck on a deprecated Ubuntu release
    
    source
N0x0n@lemmy.ml ⁨9⁩ ⁨months⁩ ago
Possible for a dark mode version XD? Normally excalidraw can do that.

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  Of course! here you go: files.catbox.moe/hy713z.png. The image has the raw excalidraw data embedded, so you can import it to the website like a save file and play around with the sorting if need be.
  
  source
  - Landless2029@lemmy.world ⁨9⁩ ⁨months⁩ ago
    Thanks for the dark mode link!!
    
    I was also going to mention draw.io
    
    source
  - N0x0n@lemmy.ml ⁨9⁩ ⁨months⁩ ago
    Thank you 🫶
    
    source
krash@lemmy.ml ⁨9⁩ ⁨months⁩ ago
How do you like crowdsec? I’ve used it on a tiny VPS (2 vcpu / 1 GB RAM) and it hogs my poor machine. I also found it to have a bit of learning curve, compared to fail2ban (which is much simpler, but dosen’t play well with Caddy by default).

Would be happy to see your Caddy / Crowdsec configuration.

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  The crowdsec agent running on my homelab (8 Cores, 16GB RAM) is currently sitting idle at 96.86MiB RAM and between 0.4 and 1.5% CPU usage. I have a separate crowdsec agent running on the Main VPS, which is a 2 vCPU 4GB RAM machine. There, it’s using 1.3% CPU and around 2.5% RAM. All in all, very manageable.
  
  There is definitely a learning curve to it. When I first dove into the docs, I was overwhelmed by all the new terminology, and wrapping my head around it was not super straightforward. Now that I’ve had some time with it though, it’s become more and more clear. I’ve even written my own simple parsers for apps that aren’t on the hub!
  
  What I find especially helpful are features like explain, which allow me to pass in logs and simulate which step of the process picks that up and how the logs are processed, which is great when trying to diagnose why something is or isn’t happening.
  
  The crowdsec agent running on my homelab is running from the docker container, and uses pretty much exactly the stock configuration. This is how the docker container is launched:
  
  crowdsec: image: crowdsecurity/crowdsec container_name: crowdsec restart: always networks: socket-proxy: ports: - "8080:8080" environment: DOCKER_HOST: tcp://socketproxy:2375 COLLECTIONS: "schiz0phr3ne/radarr schiz0phr3ne/sonarr" BOUNCER_KEY_caddy: as8d0h109das9d0 USE_WAL: true volumes: - /mnt/user/appdata/crowdsec/db:/var/lib/crowdsec/data - /mnt/user/appdata/crowdsec/acquis:/etc/crowdsec/acquis.d - /mnt/user/appdata/crowdsec/config:/etc/crowdsec
  
  Then there’s the Caddyfile on the LabProxy, which is where I handle banned IPs so that their traffic doesn’t even hit my homelab. This is the file:
  
  { crowdsec { api_url http://homelab:8080 api_key as8d0h109das9d0 ticker_interval 10s } } *.mydomain.com { tls { dns cloudflare skPTIe-qA_9H2_QnpFYaashud0as8d012qdißRwCq } encode gzip route { crowdsec reverse_proxy homelab:8443 } }
  
  Keep in mind that the two machines are connected via tailscale, which is why I can pass in the crowdsec agent with its local hostname. If the two machines were physically separated, you’d need to expose the REST API of the agent over the web.
  
  I hope this helps clear up some of your confusion! Let me know if you need any further help with understanding it. It only gets easier the more you interact with it!
  
  source
  - krash@lemmy.ml ⁨9⁩ ⁨months⁩ ago
    Thanks for the offer! I might take you up on that :-) If you have a Matrix handle and hang out in certain rooms, please DM me and I’ll ~~harass~~ reach out to you there.
    
    source
    -> View More Comments
- Sekki@lemmy.ml ⁨9⁩ ⁨months⁩ ago
  Somehow I only had issues with CrowdSec. I used it with Traefik but it would ban me and my family every time they used my selhosted matrix instance. I could not figure out why and it even did that when I tried it on OPNSense without the Traefik bouncer…
  
  source
- rbos@lemmy.ca ⁨9⁩ ⁨months⁩ ago
  I have crowdsec on a bunch of servers. It’s great and I love that I’m feeding my data to the swarm.
  
  source
callcc@lemmy.world ⁨9⁩ ⁨months⁩ ago
Remeber, the more boxes you have, the more advanced you are as an admin! Once you do his job for money, the challenge is the exact opposite. The less parts you have, the better. The more vanilla they are, the better.

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  Absolutely! To be honest, I don’t even want to have countless machines under my umbrella, and constantly have consodilation in mind - but right now, each machine fulfills a separate purpose and feels justified in itself (homelab for large data, main VPS for anything thats operation critical and cant afford power/network outages and so on). So unless I find another purpose that none of the current machines can serve, I’ll probably scale vertically instead of horizontally (is that even how you use that expression?)
  
  source
Decronym@lemmy.decronym.xyz ⁨9⁩ ⁨months⁩ ago
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:

Fewer Letters More Letters

IP Internet Protocol

SSH Secure Shell for remote terminal access

VPS Virtual Private Server (opposed to shared hosting)

[Thread #473 for this sub, first seen 2nd Feb 2024, 05:25] [FAQ] [Full list] [Contact] [Source code]

source
kadotux@lemmings.world ⁨9⁩ ⁨months⁩ ago
I saved this! Yeah, it seems like a lot of work, but I got inspired again (I had a slight self-hosting burnout and nuked my raspberry setup ~year ago) so I appreciate it. :) Can I ask what hardware you run this on?

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  Glad to have gotten you back into the grind!
  
  My homelab runs on an N100 board I ordered on Aliexpress for ~150€, plus some 16GB Corsair DDR5 SODIMM RAM. The Main VPS is a 2 vCPU 4GB RAM machine, and the LabProxy is a 4 vCPU 4GB RAM ARM machine.
  
  source
  - sailingbythelee@lemmy.world ⁨9⁩ ⁨months⁩ ago
    What VPS service do you use/recommend and what’s your monthly cost?
    
    source
    -> View More Comments
rutrum@lm.paradisus.day ⁨9⁩ ⁨months⁩ ago
What software did you use to make this image? Its very well done

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  Thank you! It’s done in excalidraw.com. Not the most straightforward for flowcharts, took me some time to figure out the best way to sort it all. But very powerful once you get into the flow.
  
  If you’re feeling funny, you can download the original image from the catbox link and plug it right back into the site like a save file!
  
  source
  - brbposting@sh.itjust.works ⁨9⁩ ⁨months⁩ ago
    Image
    
    Now just gotta understand everything beyond… Jellyfin haha
    
    source
  - filister@lemmy.world ⁨9⁩ ⁨months⁩ ago
    Draw.io is also pretty good or lucidcharts
    
    source
notfromhere@lemmy.ml ⁨9⁩ ⁨months⁩ ago
What is seedbox? Is it part of the homelab or a service like the VPSs?

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  its basically a VPS that comes with torrenting software preinstalled. Depending on hoster and package, you’ll be able to install all kinds of webapps on the server. Some even enable Plex/Jellyfin on the more expensive plans.
  
  source
  - notfromhere@lemmy.ml ⁨9⁩ ⁨months⁩ ago
    How do you do the sshfs mount, tracker and search queries? Is that over tailscale?
    
    source
    -> View More Comments
BoiLudens@lemmy.world ⁨9⁩ ⁨months⁩ ago
I have taken a picture and shall study it

source
Fedegenerate@lemmynsfw.com ⁨9⁩ ⁨months⁩ ago
I am sorry, I am but a worm just starting Docker and I have two questions.

Say I set up pihole in a container. Then say I use Pihole’s web UI to change a setting, like setting the web UI to the midnight theme.

Do changes persist when the container updates?

I am under the impression that a container updating is the old one being deleted and a fresh install taking its place. So all the changes in settings vanish.

I understand that I am supposed to write files to define parameters of the install. How am I supposed to know what to write to define the changes I want?

Sorry to hijack, the question doesn’t seem big enough for its own post.

source
- Limit@lemm.ee ⁨9⁩ ⁨months⁩ ago
  With containers, most will have a persistent volume that is mapped to the host filesystem. This is where your config data is. When you update a container, just the image is updated(pihole binaries) but it leaves the config files there. Things like your block lists and custom dns settings, theme settings, all of that will remain.
  
  source
  - Fedegenerate@lemmynsfw.com ⁨9⁩ ⁨months⁩ ago
    Thank you.
    
    source
jkrtn@lemmy.ml ⁨9⁩ ⁨months⁩ ago
I’ve seen Caddy mentioned a few times recently, what do you like about it over other tools?

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  In addition to the other commenter and their great points, here’s some more things I like:
  
  ressource efficient: im running all my stuff on low end servers, and cant afford my reverse proxy to waste gigabytes of RAM (kooking at you, NPM)
  
  very easy syntax: the Caddyfile uses a very simple, easy to remember syntax. And the documentation is very precise and quickly tells me what to do to achieve something. I tried traefik and couldn’t handle the long, complicated tag names required to set anything up.
  
  plugin ecosystem: caddy is written in go, and very easy to extend. There’s tons of plugins for different functionalities, that are (mostly) well documented and easy to use. Building a custom caddy executable takes one command.
  
  source
  - jkrtn@lemmy.ml ⁨9⁩ ⁨months⁩ ago
    I think the two of you have convinced me to check it out! It is sounding pretty great, so thank you in advance.
    
    source
- xantoxis@lemmy.world ⁨9⁩ ⁨months⁩ ago
  I can answer this one, but mainly only in reference to the other popular solutions:
  
  nginx. Solid, reliable, uncomplicated, but. Reverse proxy semantics have a weird dependency on manually setting up a dns resolver (why??) and you have to restart the instance if your upstream gets replaced.
  
  traefik. I am literally a cloud software engineer, I’ve been doing Linux networking since 1994 and I’ve made 3 separate attempts to configure traefik to work according to its promises. It has never worked correctly. Traefik’s main selling point to me is its automatic docker proxying via labels, but this doesn’t even help you if you also have multiple VMs. Basically a non-starter due to poor docs and complexity.
  
  caddy. Solid, reliable, uncomplicated. It will do acme cert provisioning out of the box for you if you want (I don’t use that feature because I have a wildcard cert, but it seems nice). Also doesn’t suffer from the problems I’ve listed above.
  
  source
  - oh_gosh_its_osh@lemmy.ml ⁨9⁩ ⁨months⁩ ago
    Fully agree to this summary. traefik also gave me a hard time initially, but once you have the quirks worked out, it works as promised.
    
    Caddy is absolutely on my list as an alternative, but the lack of docker label support is currently the main roadblocker for me.
    
    source
    -> View More Comments
  - jkrtn@lemmy.ml ⁨9⁩ ⁨months⁩ ago
    I feel so relieved reading that about traefik. I briefly set that up as a k8s ingress controller for educational purposes. It’s unnecessarily confusing, brittle, and the documentation didn’t help. If it’s a pain for people in the industry that makes me feel better. My next attempt at trying out k8s I’ll give Kong a shot.
    
    I really like solid, reliable, and uncomplicated. The fun part is running the containers and VMs, not spending hours on a config to make them accessible.
    
    source
    -> View More Comments
- krash@lemmy.ml ⁨9⁩ ⁨months⁩ ago
  I see everyone else have already chimed in on whats so great about Caddy (because it is!), one thing that has been a thorn in my side though is the lack of integration of fail2ban since Caddy has moved on from the old common log format and moved on to more modern log formats. So if you want to use a IPS/IDS, you’ll have to either find a creative hack to make it work with fail2ban or rely on more modern (and resource heavier) solutions such as crowdsec.
  
  source
  - xinayder@infosec.pub ⁨9⁩ ⁨months⁩ ago
    You can install the log transformer plugin for Caddy and have it produce a readable log format for fail2ban: github.com/caddyserver/transform-encoder
    
    I had this setup on my VPS before I moved to a k3s setup. I will take a look at how to migrate my fail2ban setup to the new server.
    
    source
    -> View More Comments
lemmyissupergay@discuss.online ⁨9⁩ ⁨months⁩ ago
This is needlessly over complicated and bloated just FYI but if you enjoy complexity for the sake of complexity then go for it.

source
dataprolet@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
What is the proxy in front of crowdsec for?

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  If you’re referring to the “LabProxy VPS”: So that I don’t have to point a public domain that I (plan to) use more and more in online spaces to my personal IP address, allowing anyone and everyone to pinpoint my location. Also, I really don’t want to mess with the intricacies of DynDNS. This solution is safer and more reliable than DynDNS and open ports on my router thats not at all equipped to fence of cyberspace attacks.
  
  If you’re referring to the caddy reverse proxy on the LabProxy VPS: I’m pointing domains that I want to funnel into my homelab at the external IP of the proxy VPS. The caddy server on that VPS reads these requests and reverse-proxies them onto the caddy-port from the homelab, using the hostname of my homelab inside my tailscale network. That’s how I make use of the tunnel. This also allows me to send the ban decisions from bruteforce attacks on apps at the homelab to the Proxy VPS, which then denies all incoming requests from that source IP before they ever hit my homelab. Clean and Safe!
  
  source
  - atzanteol@sh.itjust.works ⁨9⁩ ⁨months⁩ ago
    “pinpoint” is a bit hyperbolic. Country, state and maybe city can be pretty good, at least in the US.
    
    It’s fine if that’s important to you to hide, but entirely unnecessary for most people.
    
    source
    -> View More Comments
  - dataprolet@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
    Thanks, but I meant the HAProxy in your homelab.
    
    source
    -> View More Comments
Mbourgon@lemmy.world ⁨9⁩ ⁨months⁩ ago
What did you use to chart this? And nicely done.

source
- Mbourgon@lemmy.world ⁨9⁩ ⁨months⁩ ago
  Excalidraw. Reading is hard.
  
  source
  - dipshit@lemmy.world ⁨9⁩ ⁨months⁩ ago
    Excalidraw is nice. Also, I want to throw in a mention for mermaid.live (mermaid js). A little less flexiblity but it’s nice. There’s also kroki.io which hosts a lot of these types of apps.
    
    source
    -> View More Comments
Cyanogenmon@lemmy.world ⁨9⁩ ⁨months⁩ ago
This is oddly similar to some informal workups I’ve done for our work network.

Nice work 👍.

source
remotedev@lemmy.ca ⁨9⁩ ⁨months⁩ ago
Sorry if someone already asked this, but do you have any tutorials or guides that you used and found helpful for starting out? I have some small experience with nginx and such, but I would definitely need to follow along with something that tells me what to do and what each part does in a infrastructure like you have haha

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  That’s a tough one. I’ve pieced this all together from countless guides for each app itself, combined with tons of reddit reading.
  
  There are some sources that I can list though:
  
  awesome-selfhosted.net is great to find apps you might want to host
  
  docs.ibracorp.io mainly aims at Unraid hosting, but the information can oftentimes be transferred
  
  how2host.it has some start-to-finish guides that explain every setup step
  
  github.com/mikeroyal/Self-Hosting-Guide is an incredibly long list of apps and ressources you can use as a launchpad. Note the “Tutorials & Ressources” Section for further links
  
  source
- von@infosec.pub ⁨9⁩ ⁨months⁩ ago
  Had to look up what a few of these were myself, check the sidebar resources: github.com/awesome-selfhosted/awesome-selfhosted
  
  source
- dutchkimble@lemy.lol ⁨9⁩ ⁨months⁩ ago
  I’ve been dabbling in self hosting recently and found that chatgpt can help you setup a lot if you don’t get annoyed and keep fixing your prompts. It even writes out your docker compose files for you and you can ask it questions on what things mean and what’s linked to each other. If you do try it out though, avoid giving personal info like passwords in the chat.
  
  source
possiblylinux127@lemmy.zip ⁨9⁩ ⁨months⁩ ago
I can’t say I’m in support of bring discussion of illegal content to Lemmy but you do you

source
- PersonalDevKit@aussie.zone ⁨9⁩ ⁨months⁩ ago
  Happy to learn what illegal content is on display and discussed about here?
  
  source
  - Zozano@lemy.lol ⁨9⁩ ⁨months⁩ ago
    I’m sure OP only torrents unlicenced media.
    
    source
  - Urist@lemmy.ml ⁨9⁩ ⁨months⁩ ago
    Torrents are assumed illegal and discussion of it likewise by confused parent comment.
    
    source
- camr_on@lemmy.world ⁨9⁩ ⁨months⁩ ago
  Not trying to make an argument for or against, but the 2nd largest lemmy community is !piracy@lemmy.dbzer0.com
  
  source
- BCsven@lemmy.ca ⁨9⁩ ⁨months⁩ ago
  What illegal content?
  
  source
- steersman2484@sh.itjust.works ⁨9⁩ ⁨months⁩ ago
  Maybe he is just seeding Linux ISOs on the private trackers
  
  source
  - possiblylinux127@lemmy.zip ⁨9⁩ ⁨months⁩ ago
    Possibly but I doubt it
    
    source
- vsis@feddit.cl ⁨9⁩ ⁨months⁩ ago
  Nothing illegal has being discussed.
  
  But I’m happy to talk about Jolly Roger.
  
  source
thorbot@lemmy.world ⁨9⁩ ⁨months⁩ ago
I just have a UniFi firewall, a Synology Diskstation, and a linux server running everything. Provides torrenting, video streaming with plex, file sharing, game server hosting, music hosting, and more, and I don’t ever have to mess with it :). This is impressive but I don’t know if I would want to support it personally

source
- 7Sea_Sailor@lemmy.dbzer0.com ⁨9⁩ ⁨months⁩ ago
  I’d love to have everything centralized at home, but my net connection tends to fail a lot and I dont want critical services (AdGuard, Vaultwarden and a bunch of others that arent listed) to be running off of flakey internet, so those will remain in a datacenter. Other stuff might move around, or maybe not. Only time will tell, I’m still at the beginning of my journey after all!
  
  source
  - thorbot@lemmy.world ⁨9⁩ ⁨months⁩ ago
    Fair. I’m lucky enough to be able to get business internet at home so I have a static IP and 99.9% uptime. My plex watchers and game hosting players know that sometimes around 3am, they might be booted when my networking gear auto updates itself, haha
    
    source
LunchEnjoyer@lemmy.world ⁨9⁩ ⁨months⁩ ago
Since nobody else asked about this, why ruTorrent over the other typical download clients?

source
vox@sopuli.xyz ⁨9⁩ ⁨months⁩ ago
btw why did you choose tailscale over zerotier

source

Fewer Letters	More Letters
IP	Internet Protocol
SSH	Secure Shell for remote terminal access
VPS	Virtual Private Server (opposed to shared hosting)