CIRCLE WITH A DOT

Garage is a lightweight, open-source object storage system you can self-host.S3-compatible, it lets you run your own cloud storage backend without relying on third parties.Designed for distributed setups, it replicates data across nodes and stays available even if some go offline. https://github.com/deuxfleurs-org/garage More privacy-friendly tools: https://digitalescapetools.com/#OpenSource #SelfHosting #Privacy #CloudStorage #Homelab #DigitalMinimalism

@housepanther That would be incredible!

A "fun" little homelab experiment that I had to debug: over the last week, I set up a private Piped instance for myself so that I can watch YouTube videos without input from the algorithm: https://github.com/TeamPiped/PipedIt was pretty easy to set up, and importing my subscriptions worked flawlessly. But a few hours later, I discovered an issue: the import function scrapes YouTube for the latest videos from every subscribed channel all at once. But updating those subscriptions uses a different function that will only work if the Piped instance is an internet-accessible enpoint (like a public instance would be) and given that my instance has no public endpoint (it's accessible only on my Tailscale network), Google couldn't send me subscription updates. So my feed was permanently frozen in time at the moment of that first successful import.To fix this, I extracted the authentication token from Piped (it's in their documentation) and wrote a small bash script (or, about 20 small bash scripts while I was debugging) that will run on a schedule using my Synology NAS' task manager. The script:- Uses a docker command to forcibly wipe Piped's subscription database in the backend- Opens a JSON file with my exported YouTube subscriptions- Strips out the majority of the data leaving only the channel ID with exactly 24 characters (this took forever to figure out)- Hands those IDs to the Piped backend container to process- Piped receives the subscriptions and begins the import process as if it were for the first timeThe result of this is that Piped fetches new subscription data using its import process rather than its true subscription feed process. And so now it works without my having to expose a public-facing endpoint. The only downside is that if I subscribe to a new channel, I need to make a new JSON export to ensure that it's imported during the next task execution. Using Piped, that takes about a minute, so it's not a huge deal.But hey, it works!#homelab #FOSS #selfhosted

@tinsuke That endpoint gets a LetsEncrypt cert, anything with auth usually requires openId.I've got fail2ban on one service as it came as a feature. Been contemplating putting it in more globally. Also, as much as possible, single responsibility services. The proxy does proxy stuff. The web server does static pages. Other services are containerized and individually secured and isolated as much as possible. GrayLog is for monitoring, doesn't itself secure anything. But does let me know what to focus on.. (when I monitor the relevant info )

@pax0707 /sarcasm/Replace that e1000e with vmxnet3/esxi joke/ 🤪

Having a "reflective" afternoon.On the topic of free operating systems, I have been playing with these lately, and recommend if it suits usage (alpha order).- Alpine Linux (my daily driver)- Chimera Linux- Elementary Linux- FreeBSD- OpenBSD- Solus Linux Not "mainstream" suggestions per se, and that's kinda the point. Caveats re: glibc/musl, nvidia support, etc. apply. If I had to have nvidia support for my primary workstation I'd probably go with Solus (KDE), or at least try it, in spite of systemd.I'm starting to scratch the surface on - CachyOS for my son's gaming rig. Pretty much what it says on the tin. I like it. Arch could use a bit of polish. We'll see how it goes on real hardware. Others that I haven't run much beyond playing with the iso, but am intrigued by, mostly by intended use case tbh:- Mint- ZorinI used to run these for years and years and years but don't nowadays:- Arch- GentooExcellent, but the time intensity ... ~20 years ago I used to run Gentoo in a government research agency data centre. Even came up with an "ansible-like" set of deployment scripts/framework and whatnot in /bin/bash+openssh to manage them (pre-dates Ansible). Fun times... the time... the time.Gentoo was bracketed by RHEL in the past and CentOS as the successor. CentOS was fine but gave up a lot of performance way back then. Shifting priorities, server hardware was still following Moore's, and all that.I flirted with Ubuntu a bit over the years. Could never really get into it back when it was decent. I won't touch it now.Today, I think I'm done with Debian. Too static for my tastes - stuff gets too stale. Sure, there's Testing/Sid but there's also other options at that point. Now that I'm a sysadmin just for myself I can embrace using whatever I want. Ha. I'm all about community projects nowadays. Corporate software will eventually disappoint you so it pays to just not go there in the first place.Deep thoughts.#Linux #RunBSD #HomeLab #SelfHosted #SelfHosting #AlpineLinux #ChimeraLinux #Elementary #ElementaryOS #FreeBSD#OpenBSD #SolusLinux #Solus #LinuxMint #ZorinLinux #Gentoo #ArchLinux #CachyOS

@davidmaddock

@dbtechyt Isn't it just analytics?

Fresh Debian 13 (Trixie) install – was ich immer als erstes mache:→ Root deaktivieren→ SSH-Key only (ed25519)→ UFW mit nur den nötigen Ports→ Docker readyDokumentation für mich, vielleicht nützlich für andere.https://m1ch4.net/blog/debian13-grundsetup/#Debian #Linux #Docker #Selfhosting #Homelab

@hl I typically don't these days due to the proliferation of bullshit machine scrapers.Everything is behind a VPN.However, I'd definitely be using a robust full-ASN blocklist to firewall off the known bad actors before considering it, just from the noise perspective.

@blint I think there is a script in the mastodon helm chart that does this: https://github.com/mastodon/chart/blob/main/templates/job-assets-copy.yamlIf you don't run your stuff in Kubernetes, you should still be able to do the same, it just calls rclone with a bunch of parameters and environment variables.

@spacebug Thank you! I just heard tomorrow I am headed home.

Ok, props to Seagate for listing power adapter specs for all their current AND legacy external drives so people playing "which wall wart" at home have a hope of winning.https://www.seagate.com/support/kb/power-adapter-specifications-for-seagate-products/#homelab

Why let Google index your private files?Hister is a self-hosted search engine for your own webpages and files (PDF, DOCX, Markdown) — no cloud, no tracking, full-text search on your own server.Minimum requirements: 256MB RAM, runs great on Raspberry Pi. One-line Docker deploy.Practical guide + comparison with Meilisearch & SearXNG: https://newsgroup.site/hister-self-hosted-search-engine-homelab-guide-2026/#SelfHosted #Homelab #Privacy #OpenSource #Linux #Docker #DigitalFreedom

You don't need to pirate if you want to own your media and self-host Jellyfin #homelab Here's my guide: https://www.jeffgeerling.com/blog/2022/how-i-rip-dvds-and-blu-rays-my-mac-2022-edition/

@ironicbadger It's a shame because I did consider it and it looked like really good hardware to replace my power-hungry Mac Pro 2012 that I use as a Proxmox host. 300w on idle really does a number on the electricity bill and I had two of them in a two-node cluster. Total consumption was about 14% of my total household consumption.

@vermaden I ignored the political layer on purpose. I just had a couple of wines and wanted to see "what happens if I..." and then frankensteined a RHEL that boots with rEFInd on a ZFS root.. And (after patching serious parts of convert2rhel, removing sanity check functions), it did work and boot I still wouldn't trust my actual data to that system and my personal infrastructure runs ons FreeBSD (Server) and OpenBSD (Firewalls)