• 1 Post
  • 19 Comments
Joined 11 months ago
cake
Cake day: March 10th, 2025

help-circle
  • Surgeon.

    Seeing tech ceo’s at the trump inauguration got me sick in the stomach. I unsubscribed from everything out of spite and nausea and learned to selfhost over the course of what is almost a year now. At first it took up all my spare time and made my wife crazy. Now it’s been several weeks since i last had to sudo anything.

    It also opened my eyes to how stupid everything IT related in my country is. My municipality for example bought for what has now become a billion fucking euros a digital health record system from Epic. It’s the shittiest piece of software ive ever used, fully closed source and there’s ongoing customization costs trying to get it to work. We’re also a 100% onboard with office360 (copilot and all).








  • It’s going well. I started selfhosting most of my services on a debian machine. TV doesnt have internet anymore, it’s hooked to a fedora mini pc that i use to play media. I’ve installed Asahi fedora on my M1 Pro macbook and it’s flawless.

    Dont miss anything. The only thing that pisses me off is when i work on a document on nextcloud (using onlyoffice) it doesnt look nice on MS office. So for work stuff i have to sometimes log into ms office account and use their cloud to work on a presentation or something.

    I also kind of have to keep the OSX installation for some photography stuff although when i have the time ill look for linux alternatives. Mainly i need something to edit fujifilm raw photos with


  • Ive been very satisfied with my two user instance set up using the AIO container via docker compose. They have that as a standardized deployment method nowadays. You can choose additional integrated services like onlyoffice and schedule backups via borg in the AIO mastercontainer’s webUI. My server (with a i3 coffee lake and 16GB DDR4) has 14 other services including immich and jellyfin. No performance issues whatsoever. I think nextcloud has really stepped it up.

    We (me and my wife) even use the kanban board as a PWA Although it’s a little clunky it works and all the deadlines even show up as tasks in my ical. Caldav was a bit weird to set up though.

    Using the virtual file sync client for osx so most of the files are actually never kept on the client device.



  • My duckdns domain was deemed untrustworthy and i hit the firewall with it.

    Spinning up a pangolin instance on a vps and getting a proper .fi (finland) domain fixed it. Plus it’s pretty bad form exposing ports directly instead of using a reverse proxy (and im guessing youre not using something like fail2ban and crowdsec and geoblocking either to keep the bots out.) Pangolin is an “all in one” solution that uses traefik for reverse proxy, handles certs automatically and almost automates the setup of Crowdsec for you. I highly recommend it. Can be used locally too if needed.





  • Id recommend setting up a domain even if just for local use. No-ip.com is at least working for me right now (i have free throwaway domain set up there and my router is keeping my dynamic ip dns records up to date so i can wireguard into my router/lan even if the ip changes).

    You dont need to expose your services but if you ever do want to, it’s so much easier if youve got a working reverse proxy infront already set up plus you can use https via let’s encrypt certifications inside LAN

    Setting up (sub)domains in lan forces you to learn to use a reverse proxy like caddy traefik or nginx. Personally to me NPM(nginx proxy manager) was the easiest to use but i use caddy nowadays. For half a year i didnt expose anything but after wanting to share some albums with the extended family i decided to do so via pangolin hardened with crowdsec running on a virtual private server. Pangolin - while not as easy as tailscale is selfhosted and is very well documented and works well. Then internally, i still have my casdy reverse proxy and certs.

    All the services work with the same domain names internally (via the routers dns) and externally. Internally the domain simply points to my severs LAN address. Externally the domain points to my VPS where Pangolin relays my internal domains to the users but adds an extra authentication layer/recerseproxy/access control layer infront. For authentication i use Pocket ID. I can reach nextcloud and access and edit all my documents and other files right there in the browser from any computer which is very convinient.



  • Two 4tb disks in raid 1 is a waste of money for most selfhosters. Unless you really want to avoid downtime due to disk failure. (and even then you could get a power outage or a network failure). A second disk will protect you from disk failure but not from other forms of data loss (like you fucking up something and erasing all of your family photos).

    Do you also plan to buy some cold storage medium and cloud storage or a remote backup server or something (for 3+2+1 backups)? thats way more important.

    Ive got an office pc with a 9th gen intel i3 4 core, 16gb RAM, you can propably find one for 100-200 dollars. Ive installed a 4TB NVMe into it.

    For nightly remote backups i have a pi with another 4TB NVMe(overkill for sure, you could use pretty much anything for this) and for cold store i have 4TB external that i plug in when i remember.

    I run docker and immich, nextcloud+office, jellyfin + a bunch of smaller services. I could perhaps use a little bit a better gpu for jellyfin transcoding sometimes with certain 4k files. Otherwise no need for upgrades.


  • I really feel like people who are beginners shouldnt play with exposing their services. When you set up Caddy or some other reverse proxy and actually monitor it with something like fail2ban you can see that the crawlers etc are pretty fast to find your services. If any user has a very poor password (or is reusing a leaked one) then someone has pretty open access to their stuff and you wont even notice unless you’re logging stuff.

    Of course you can set up 2FA etc but that’s pretty involved compared to a simple wg tunnel that lives on your router.


  • Meanwhile linux nowadays is ridiculously easy to install and can be run without issues on hardware that is almost 10 years old. I just bought an 8th gen i3 mini desktop machine for 100€ and it runs all my selfhosted services plus functions as a desktop. The bootup and general speed of the OS is on par with a 2000€ pc or mac for regular office use. Planned obsolense is obviously the reason you cant use those machines for more than 5 years without installing linux on them (especially the pcs)

    People should stop buying new computers unless it’s needed for llm’s or games.