I’m not sure anyone shares the same glee I feel when I view all the blocked IPs scrolling by in my pFsense firewall. Suricata does a lot of heavy lifting for sure.
What’s your selfhosting guilty pleasure or pleasures?
Iocaine? I followed the instructions on the website which were fairly easy to follow. Depending on your skill level it might suffice.
Good luck on achieving that.
You’ll be more successfull in whitelisting every possible vconnection instead ;)
Spend some time (IMO too much) mysealf researching ASNs and publicly accessible blocklists of datacenters/crawlers.
Not as easy task.
Hi everyone
I’m trying to degoogle as much as possible. I’ve heard about this thing called calDAV and cardDAV but I have no idea how to use it.
With radicale, do I need to install some other somewhere in order to use it?
I’m just looking for basic useage for myself only at this stage. I’d like to be able to self host my own calendar and contacts. Is radicale appropriate for this?
Is it safe to self host a calendar?
Can a self hosted calendar still send and receive invites to other calendars?
Any help greatly appreciated, thank you
mailbox.org is another service that is straightforward to use. You create an account, download davx5, and install any calendar app. It’s paid but cheap (1 €/month)
No worries mate. I was just sitting here jamming some blues on the guitar and felt inspired.
Hey,
Some of you may know me for Jotty and Cr*nmaster, been quiet with my head down lately improving my apps and trying to build a searxng alternative for myself.
https://lemmy.world/pictrs/image/a70266bc-f67b-4dc1-b516-86166c8e4080.png
Whilst I have used searxng for about a year now, I have had quite a few personal gripes with it so in the past few weeks I have decided to make my take on it and ran it happily locally. Since publishing the beta to my discord server I ended up building a fairly extensive tool.
Degoog is actually pretty minimal, there’s no much to it aside from a very comprehensive plugin/extension system. The idea being users can create their own engines, themes and plugins that hook into the core application and do.. pretty much anything, from adding stuff to the result page (e.g. speedtests, tmdb information, ip retrieval, rss feeds embedded on the home page) to full on OIDC systems.
This is still very much in beta and I figured the best way to get it out of beta would be to publish it to a wider audience (currently some users in our discord server have been testing it fairly successfully and i’ve been on top of bug fixing).
Repo: https://github.com/fccview/degoog
Official extensions: https://github.com/fccview/fccview-degoog-extensions
Docs: https://fccview.github.io/degoog
You can install custom plugins/extensions. You can make your own repo and add it to the store page in the settings, or you can just have your own plugins locally for yourself.
Let me know what you think, and feel free to ask any questions and feel free to join our discord (link in releases page on any of my apps) for a more direct chat about things <3
I think they have their own action system (https://codeberg.org/actions/meta), but I’ve never tried it. Maybe you can look into that?
My point about Microsoft was mainly because my butt is harmful and often used in a hostile way against open source. Also the fact that Microsoft tries to own the whole free software ecosystem.
That would be awesome! Anyway good luck and have fun developing it, it’s interesting project 😊
Disclaimer: I am the developer
Long story short, after Huntarr exploded I still wanted an app that did the core of Huntarr’s job: find and fetch missing or upgradable media. I looked around for some solutions but didn’t like them for various reasons. So, I made my own.
No web UI, configured via environment variables in a similar manner to Unpackerr. It does one job and it does it (a little too) well. Even when trying a few different solutions for a few days each, Fetcharr caught a bunch of stuff they all missed almost immediately. This is likely due to the way it weights media for search.
Since you made it this far, a few notes: 1) I did still use ChatGPT on a couple of occasions. They’re documented and entirely web UI - no agents. Anything it gave me was vetted and noted in the code before publishing. 2) The current icon is temporary and LLM-generated. I’ve put out some feelers to pay an artist to create an icon. Waiting to hear back. 3) It’s written in Java because that’s the language I’m most familiar with. SSL certs in Java containers can be painful but I added some code to make it as easy as Python requests or Node 4) While it still has a skip-if-tagged-with-X feature, it doesn’t create or apply any tags. I didn’t find that portion necessary, despite other popular *arrs using it. Not sure why they do, even after developing this. 5) Caution is advised when first using it on a large media collection. It’ll very likely pick up quite a number of things initially if you weren’t on top of things beforehand. Just make sure your pipeline is set up well, or you limit the number of searches or lengthen the amount of time between searches using the environment variables.
Not sure what you mean by that. I occasionally use the web UI as the tool that it is and I’ve played around with opencode, cursor, etc previously on other home projects to get a sense for where things are and what the limits of these things are. That said, I take pride in my own work and this project is no exception. Is there something in this project that makes you think I threw a prompt into cursor and am passing that off as my own? Or are you against the idea of using an LLM and consider any person or project using them at all to be vibecoded?
That’s great! A cronjob can be effective if your indexer doesn’t mind the extra strain or you have a small library.
I posted this over at https://discuss.tchncs.de/c/navidrome, but I thought I’d post it here, maybe someone has had experience with this.
I’ve been noticing demo.navidrome.org showing up in my firewall:
pFsense: https://discuss.tchncs.de/pictrs/image/3829f59a-fe76-4fd0-b988-c8b8896f2dd3.png
abuseipdb.com: https://discuss.tchncs.de/pictrs/image/fd0b1738-8a21-4cfc-a996-36b109268c28.png
As with anything entering or exiting my network, I am cautious and curious why my instance of Navidrome has the need to contact demo.navidrome.org.
I am running Navidrome as a Docker Instance. I have combed my compose file and can find nothing in that itself that would trigger Navidrome to ‘call home’.
Is this for stats, or other? As of right now, I have demo.navidrome.org blocked until I’ve gathered some information.
BTW, sweet piece of opensource software. I tip my hat to the dev team(s).
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
| Fewer Letters | More Letters |
|---|---|
| FTS | Flight Termination System |
| IP | Internet Protocol |
| UDP | User Datagram Protocol, for real-time communications |
| WDR | Wet Dress Rehearsal (with fuel onboard) |
[Thread #147 for this comm, first seen 8th Mar 2026, 16:20] [FAQ] [Full list] [Contact] [Source code]
Ahah! Ok that makes sense. Thank you so much for clearing that up. I guess I can now unblock demo.navidrome.org.
Figured I’d give Netbird a go, glad I did because I can self host extremely easily by using the new services feature.
You specify a subdomain, point to a peer, specify a protocol and port, and you are good. NetBird fetches you the certificate and your site goes live fast.
I can use my Immich with my mobile data now.
https://lemmy.fedioasis.cc/pictrs/image/6af03fdb-3e87-421b-8830-6c27972d3172.webp
I don’t think so in your case. From their docs these features are only available for self hosted instances, so you’d have to host Traefik instead of Nginx and end up with a similar config as your current one.
If you wanted to hide your home IP you could either use something like Defelct or Cloudflare as a reverse proxy, or host your own reverse proxy on a cloud provider (either Nginx like you currently are, or Netbird’s reverse proxy UI) and proxy it back to your local server over something like Netbird/Tailscale.
DDOS/Scraping protection would depend on the method you choose.
Last year, I was tearing apart some of these fancier pacifiers for adults when I noticed something
When you know you’re going to enjoy the article.
Loaded very quickly for me, just a few seconds. I’m guessing it was overloaded for a bit.
Hey guys, so I’ve been self hosting for 2 years, making small upgrades until I reached this point where I replaced my router with one of those Chinese fanless firewalls running Intel n150 and running a proxmox homelab.
I am self hosting headscale with many of my buddies connected, including ny own services. Everything was working great until I setup OPNsense.
The firewall was not easy to setup, but after I set it up, I discovered odd behaviors from tailscale.
The firewall was blocking all connections from the ip 100.60.0.0/24, I had to explicitly allow it and change the forewall state to hybrid
What happens is that my LXC containers running tailscale would receive requests from tailscale0 interface but respond via LAN.
Apparently as I understood, consumer routers have assymetric NAT so that works fine, but not with opnsense.
Every guide I read online talks about installing tailscale on the opnsense router directly but I do not want to expose it to the tailscale network.
For now temporarily I set an ip route to tailscale0 and resolved it that way temporarily, but I still cannot get a solution that can help without compromising the firewall.
It’s also very cumbersome to do this for 50+ LXC containers over and over, even with running systemd scripts a problem might happen in the future
If you guys have any experience with this it would help a lot.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
| Fewer Letters | More Letters |
|---|---|
| IP | Internet Protocol |
| NAT | Network Address Translation |
| VPN | Virtual Private Network |
| VPS | Virtual Private Server (opposed to shared hosting) |
[Thread #136 for this comm, first seen 6th Mar 2026, 09:50] [FAQ] [Full list] [Contact] [Source code]
I might have a solution for you by doing what I’m doing. I’m running OPNSense as my firewall as well. I have one NAT:Port Forward rule for torrents (I really am seeding linux iso torrents) and that is it. Any services I’m hosting outside the network are done using Cloudflare tunnels from either a Cloudflared instance or from the LXC itself. This method has fixed my issues with Plex outside of my network since I was able to turn off “Remote Access” and make it available to my friends/family through a “Custom server access URL” (in the network settings, looks like: https://plex.domain.url,http://192.168.1.xx:32400/). No messy NAT rules to complicate things.
I am also using tailscale, but I don’t terminate it on my firewall. I terminate Tailscale on another host inside my network, you could probably use an LXC container. It’s a Debian system with Tailscale installed, routing enabled (https://tailscale.com/docs/features/subnet-routers), and set up as an exit node and subnet router. On OPNSense, I set up a Gateway on the LAN interface pointing to my Debian Tailscale router node. Then I pointed the remote networks of my family to the Tailscale router using the routes in OPNSense. Fortunately, for me (and because I set them up), they are all different networks.
The benefit to this method is also that when remotely reaching my services, the traffic looks to the services on my network as if they are coming from the Tailscale router and so return there instead of trying to go out my firewall. Tailscale maintains the tunnel through the firewall so it really isn’t a participant in the tailnet. The only issue I’ve really had had been DNS with the Tailscale Magic DNS wanted to respond instead on my internal DNS servers. I’ve got MagicDNS disabled. but it always messed stuff up. The way I fixed it was to put tailscale on my Adguard container and make it’s tailscale IP the first DNS server, followed by the internal IP addresses of my DNS servers (192. addresses). This has worked for me pretty well.
Please let me know if you want any follow up info. I’ve been doing this for a long time. It’s my main hobby (and directly congruent to my job).
I am interested in self hosting a Personal Health Record (PHR) system. I don’t need my own EMR/EHR, I just want to be able to pull down my own data, host it, and navigate it.
For example, I’d like to be able to pull down my vitals/labs from my provider and look at trends over time. I’d like to be able to pull down my prescriptions to see when I went on/off different medications. I’d like to pull down doctor’s notes, so I can see when I first started complaining about poor sleep, to see if it correlates to any of my medications or some other health change.
I have tried Mere Medical, and it was able to pull down my information from my provider (who uses Cerner), but the functionality is quite lacking. You basically get a timeline view, but nothing to really organize or search through notes (they are mostly just linked documents), or anyway to pull down lab results and see trends.
FastenHealth has also come up in my search, but it seems the onprem is a very stripped down, limited version of their paid product.
Is anyone familiar with anything like this? Ideally, it’s be combined with a fitness tracker to pull my health data from my phone/wearables too.
Sure. But I’d also not host it publicly on the Internet, just on my local lan!
Mere was interesting, but it runs entirely offline in a browser (which is pretty cool). But, this means all data lives in your browser’s localStorage (or indexdb), which would make it hard to sync between devices.
histv - Honey, I Shrunk The Vids
::: spoiler screenshots
:::
I was doing a lot of manual re-encoding down from insane source bitrates with FFMPEG, and I wondered if I could put it into a nice GUI. Then I wondered if I could make it hardware-agnostic. Then I wondered if I could give it a dark theme… and on and on and on… until finally I had it working how I wanted and I wondered if I could put it into a single executable file.
So all up I spent a little while on this today and I think I finally have something worth shipping. The executable will probably trigger your antivirus because it boostraps the powershell script, and the script will always throw a warning asking if you’re sure you want to run it. But it works and it’s safe, read the full source and readme in the codeberg if you want to be sure.
I hope this might be helpful for anyone else transcoding videos on Windows! I’d love feedback, but please be gentle, it’s my first project like this and I have no idea what I’m actually doing.
I’m not trying to convince you of anything. Succinctly:
None of them are a complete solution for me, and for a lot of people actually. So, until the day when I have one OS that does everything I want it to do, I am forced to use all three of the major OS. I realize that goes against the grain of the anti-Windows coalition, but that is reality.
You think Windows is a dead end? The OS that is the overwhelming market leader in the category?
