Goofed Home

(XMPP Setup Guide) Discord Was Never the End Game - TonyBTW

$$4559
https://programming.dev/u/ruffsl posted on Feb 26, 2026 14:49
https://programming.dev/post/46372370

$$10197
https://ani.social/u/saejima posted on Mar 10, 2026 17:18
In reply to: https://lemmy.dbzer0.com/comment/24661075

With this kind of mentality, nobody will ever migrate and one will have to deal with Discord’s horrible terms and conditions

https://ani.social/comment/15600344
$$10198
https://lemmy.dbzer0.com/u/KairuByte posted on Mar 10, 2026 17:20
In reply to: https://ani.social/comment/15600344

The only alternative is to willingly leave over a hundred communities, some of which I have strong ties to, and never interact with the majority again.

That’s a big ask.

https://lemmy.dbzer0.com/comment/24873121

Docker container with a web UI to manage virtual machines?

$$4233
https://lemy.lol/u/flork posted on Feb 25, 2026 18:45

I run Home Assistant in a virtual machine on my home server. Sometimes I need to restart it and I’m not always in a position to SSH or VNC in. Is there anything out there that would allow me to do this quickly?

https://lemy.lol/post/61683678

$$4727
https://lemy.lol/u/flork posted on Feb 26, 2026 20:58
In reply to: https://lemmy.world/comment/22350818

Not looking for a workaround but thanks

https://lemy.lol/comment/24403234
$$4731
https://lemy.lol/u/flork posted on Feb 26, 2026 21:00
In reply to: https://lemmy.world/comment/22347823

OK now we’re talking! Thanks.

https://lemy.lol/comment/24403266

LibreOffice Online, a self-hostable libre office environment, is coming back!

$$3832
https://lemmy.world/u/FirmDistribution posted on Feb 24, 2026 21:53
https://lemmy.world/post/43539596

$$4721
https://lemmy.ca/u/SaveTheTuaHawk posted on Feb 26, 2026 20:42
In reply to: https://lemmy.world/comment/22355279

yep… I write all my papers in Google because I can access the files anywhere, and nothing beats PaperPile for referencing yet.

https://lemmy.ca/comment/21919316
$$4856
https://lemmy.conorab.com/u/conorab posted on Feb 27, 2026 06:17
In reply to: https://retrolemmy.com/comment/18119672

I recall spreadsheets being particularly painful on mobile when I’d try to select multiple rows and it would select way more at a time but would need to fouble-check that or find a screen recording if I made one at the time.

The main issues is there was a bug where if there is an open session for a document in Collabora (including dead sessions say from mobile) and that Collabora server is shut down in the wrong order, then all changes including if you click “Save” will be lost. A bug was opened for this and closed by making sure the servers shut down in the correct order, but I don’t know if that fixes cases where the servers a hard shutdown.

https://lemmy.conorab.com/comment/2302262

Network Security Audit

$$3763
https://lemmy.world/u/irmadlad posted on Feb 24, 2026 18:44

From time to time I like to review my network to see where I can tighten up. Review logs, check out the landscape, and make sure there are no gaps. Today, I have some downtime, so I figured it’d be a good for it. Since I am not a certified IT professional, this is what I have cobbled together reading, and seeing what others have done. I’d like to bounce this off you guys who are more experienced than I and get your impressions. If you have any recommendations, I’m always down to be schooled.

So if you’d like to participate in my audit, I have a home network as follows:

  • Modem receiving IP from ISP. Modem to router. Router to stand alone pfsense firewall. Router has a 54 character complex password for WiFi. There are no guest provisions for WiFi.
  • Pfsense firewall with pfblockerng & suricata running on both lan and wan, both with a full array of rules/feeds updated daily. pfsense has tailscale as an overlay vpn. Server traffic and PC traffic have their own VLAN provided by pfsense. My approach is to deny all until something complains and address that on a case by case basis. Additionally ntopng is utilized for traffic analysis. IPv6 is disabled.
  • Server running Tailscale as an overlay VPN, UFW deny all posture, and fail2ban with an aggressive posture. Server has been hardened against Lynis spec where applicable. Not all recommendations apply to my server. Server is utilizing host deny/host allow and SSH keys.
  • Server is utilizing containers for services.
  • Server is using Cloudflare tunnel/zero trust.
  • Server and pfsense communicate via Tailscale encrypted tunnel. PC/Phone/mobile device can communicate with pfsense via Tailscale.
  • Server services are accessed via https.
  • PC connected to pfsense firewall with same rules as server. PC is using a VPN with Cloudflare 1.1.1.11.0.0.1 for DNS queries. Firefox is using 1.1.1.11.0.0.1. Settings for Firefox are the strictest for Enhanced Tracking Protection, and DOH. HTTPS-Only mode enabled. PC is also running a soft firewall.
  • All other devices such as phones, laptops, and tablets run a VPN with Cloudflare 1.1.1.11.0.0.1 for DNS queries.
  • IoT devices are isolated. Phones are isolated. Smart TVs are isolated.

How secure would you say this network is and give any recommendations to further harden the network besides keeping up with current updates, monitoring and auditing logs.

Thanks

https://lemmy.world/post/43533409

$$4184
https://lemmy.world/u/Archer posted on Feb 25, 2026 17:22
In reply to: https://lemmy.world/comment/22339322

You’re ahead of an alarming number of my colleagues by just trying until you can get it working then documenting things

https://lemmy.world/comment/22342852
$$4298
https://lemmy.world/u/irmadlad posted on Feb 25, 2026 20:34
In reply to: https://lemmy.world/comment/22342852

I have to document. At 71, with a TBI, my brain is not what it used to be. Sometimes I don’t even remember what I had for breakfast. LOL

https://lemmy.world/comment/22346284

Readarr Forks/Replacements

$$3575
https://sopuli.xyz/u/ytg posted on Feb 24, 2026 09:07

Ever since Readarr was officially discontinued, many forks and replacements have popped up. I’m currently running pennydreadful/bookshelf, which seems to be chugging along. Faustvii/Readarr is also around but seems to not be actively meaintained??

There’s also Chaptarr, which looks promising, but I’ve heard concerns about it being vibe-coded and such (see rreading-glasses: “I do not endorse the vibe-coded Chaptarr project.”). Does anybody know to what extent this is true, and what the code quality is like?

https://sopuli.xyz/post/41652324

$$3697
https://lemmy.world/u/non_burglar posted on Feb 24, 2026 14:32
In reply to: https://sopuli.xyz/comment/22077432

??

Caliber web isn’t two separate applications, it’s a calibre-compatible database served via http. There is no desktop “calibre” involved.

There is integrated koreader sync, though.

https://lemmy.world/comment/22320794
$$3742
https://lemmy.ca/u/mgrimace posted on Feb 24, 2026 16:38
In reply to: https://sopuli.xyz/comment/22077432

Yep! for a while I deployed Calibre-Web alongside Calibre in a ‘books’ compose.yaml stack using Docker. I used volume mounts to expose my library to both containers. The main thing to be cautious of is that you don’t write to the db from both C and CW at the same time (which could result in corruption). Some folks spin up/down Calibre as-needed, but I had them both running and was just mindful. I personally ended up switching from C+CW to Calibre-Web Automated and fully removing Calibre. I’m able to do everything from CWA that I was doing in both previously. FWIW if you are managing devices (e.g., family, etc.), Kobo devices + Kobo sync via CW/CWA is wonderful for usability (books show up on devices ‘natively’).

https://lemmy.ca/comment/21878843

How bad of an idea is it to use computing HDDs in a DIY NAS?

$$3564
https://sopuli.xyz/u/theorangeninja posted on Feb 24, 2026 08:20

The title says basically everything but let me elaborate.

Given the recent news about the sold out of harddrives for the current year and possibly also the next years (tomshardware article) I try to buy the HDDs I want to use for the next few years earlier than expected.

I am on a really tight budget so I really don’t want to overspend. I have an old tower PC laying around which I would like to turn into a DIY NAS probably with TrueNAS Scale.

I don’t expect high loads, it will only be 1-2 users with medium writing and reading.

In this article from howtogeek the author talks about the differences and I get it, but a lot of the people commenting seem to be in a similar position as I am. Not really a lot of read-write load, only a few users, and many argue computing HDDs are fine for this use case.

Possibilites I came up with until now: 1. Buy two pricey Seagate Ironwolf or WD Red HDDs and put them in RAID1 2. Buy three cheaper Seagate Barracuda or WD Blue and put two in RAID1 and keep one as a backup if (or should I say when?) one of the used drives fails.

I am thankful for every comment or experience you might have with this topic!

https://sopuli.xyz/post/41651204

$$4725
https://piefed.blahaj.zone/u/glizzyguzzler posted on Feb 26, 2026 20:55
In reply to: https://lemmy.world/comment/22354995

It is a gamble, fuck the my butt bozos for speculating us into economic uncertainty

https://piefed.blahaj.zone/comment/3514180
$$4728
https://piefed.blahaj.zone/u/glizzyguzzler posted on Feb 26, 2026 20:58
In reply to: https://mastodon.cloud/users/bitsandburnouts/statuses/116136515226902176

F in the chat for your savings, least you’ve got the peak of home NASes. Pretty fuckin cool and I hold out hope when the drop comes in a… 6 months to 3 years…? that I’ll be able to afford full SSD NAS life. The power savings, the speed, the no worries of shock or vibrations, the silence - jealous

https://piefed.blahaj.zone/comment/3514207

How to reach different services via name instead of ip?

$$3413
https://lemmy.world/u/Auth posted on Feb 24, 2026 00:57

On my Lan I have 192.168.1.111 hosting a bunch of various services not containerized. All connections are done either from my internal lan or from wireguard going through 192.168.1.111 so no external traffic bar wireguard.

I’ve set the host name of 111 in the hosts file inside the router and 111 and it works for all devices expect the ones connecting via wireguard.

But I dont want to have to use hostname+port for every service, I’d like each service to have its own name. I’d also like certs.

Can someone point me in the right direction for what I need to do? I’m thinking maybe this requires a local DNS server which im hesitant to run because im happy using 8.8.8.8.

For certs do I create a single cert on the 192.168.1.111 and then point all the applications to it?

https://lemmy.world/post/43506147

$$4054
https://lemmy.world/u/BeatTakeshi posted on Feb 25, 2026 10:15
In reply to: https://lemmy.world/comment/22331609

See the section “Personal dashboards” of this great resource page I often refer to: https://github.com/awesome-selfhosted/awesome-selfhosted

https://lemmy.world/comment/22336742
$$4056
https://lemmy.blahaj.zone/u/KyuubiNoKitsune posted on Feb 25, 2026 10:35
In reply to: https://lemmy.world/post/43506147

I don’t see anyone else recommending it here but you can also use Traefik, that’s what I use. I’ve sein it up so that I can automatically add any docker hosted apps based on the container tags, it makes it convenient to use.

https://lemmy.blahaj.zone/comment/19357766

Docker Hub's trust signals are a lie — and Huntarr is just the latest proof

$$3411
https://lemmy.ml/u/dendrite_soup posted on Feb 24, 2026 00:53

The Huntarr situation (score 200+ and climbing today) is getting discussed as a Huntarr problem. It’s not. It’s a structural problem with how we evaluate trust in self-hosted software.

Here’s the actual issue:

Docker Hub tells you almost nothing useful about security.

The ‘Verified Publisher’ badge verifies that the namespace belongs to the organization. That’s it. It says nothing about what’s in the image, how it was built, or whether the code was reviewed by anyone who knows what a 403 response is.

Tags are mutable pointers. huntarr:latest today is not guaranteed to be huntarr:latest tomorrow. There’s no notification when a tag gets repointed. If you’re pulling by tag in production (or in your homelab), you’re trusting a promise that can be silently broken.

The only actually trustworthy reference is a digest: sha256:.... Immutable, verifiable, auditable. Almost nobody uses them.

The Huntarr case specifically:

Someone did a basic code review — bandit, pip-audit, standard tools — and found 21 vulnerabilities including unauthenticated endpoints that return your entire arr stack’s API keys in cleartext. The container runs as root. There’s a Zip Slip. The maintainer’s response was to ban the reporter.

None of this would have been caught by Docker Hub’s trust signals, because Docker Hub’s trust signals don’t evaluate code. They evaluate namespace ownership.

What would actually help:

  • Pull by digest, not tag. Pin your compose files.
  • Check whether the image is built from a public, auditable Dockerfile. If the build process is opaque, that’s a signal.
  • Sigstore/Cosign signature verification is the emerging standard — adoption is slow but it’s the right direction.
  • Reproducible builds are the gold standard. Trust nothing, verify everything.

The uncomfortable truth: most of us are running images we’ve never audited, pulled from a registry whose trust signals we’ve never interrogated, as root, on our home networks. Huntarr made the news because someone did the work. Most of the time, nobody does.

https://lemmy.ml/post/43612224

$$3806
https://lemmy.ca/u/pulverizedcoccyx posted on Feb 24, 2026 20:30
In reply to: https://lemmy.world/comment/22320303

One thing that sucks about that is you might miss an upgrade that needed to happen before a large version jump later. It’s pretty rare but I believe I’ve seen a container break like that and the upgrade was misery.

https://lemmy.ca/comment/21882993
$$3936
https://lemmy.world/u/porkloin posted on Feb 25, 2026 04:36
In reply to: https://piefed.social/comment/10270841

Fair! I’m not giving enough credit to the fact that some applications don’t really have another option than to run root for some dependencies

https://lemmy.world/comment/22333696

Matrix hosting

$$3365
https://sh.itjust.works/u/bridgeenjoyer posted on Feb 23, 2026 23:17

Hey y’all, this actually isn’t self hosting related, but who have you had good luck with for paid matrix hosting?

Right now, I do enough tinkering with everything that I would be willing to just pay to host a matrix server for my friends.

Unless it really is easy enough to do it on a synology nas for text/voice/screen share…but do I need to pay for a domain still?

We are (like everyone) on matrix.org now but realize we need to move eventually.

https://sh.itjust.works/post/55811303

$$3791
https://lemmy.world/u/Eldaroth posted on Feb 24, 2026 19:57
In reply to: https://piefed.social/comment/10266493

If you have your own VPS anyway, there is the Matrix Ansible Playbook which makes the setup with docker containers very easy. But I also get the sentiment that you don’t want to tinker around all the time and just want stuff to work.

Kudos to you for using Matrix in the first place, I hope you can bring a lot of your friends and family to switch over to it. So far this has been the biggest hurdle on my journey 😅

https://lemmy.world/comment/22327042
$$3802
https://lemmy.ca/u/dudesss posted on Feb 24, 2026 20:25
In reply to: https://lemdro.id/comment/22655013

If you’re Canadian, you can get free and cheap .ca domains https://www.cira.ca/en/why-choose-ca/

https://lemmy.ca/comment/21882919

Can someone ELI5 how to upgrade Overseerr now that it's Seerr?

$$3273
https://lemy.lol/u/flork posted on Feb 23, 2026 20:50

I have CasaOS and I installed this https://hub.docker.com/r/linuxserver/overseerr

Is there an easy way to simply upgrade it like a normal update and keep the settings?

https://lemy.lol/post/61586160

$$4593
https://lemmy.wtf/u/Ibuthyr posted on Feb 26, 2026 16:14
In reply to: https://lemy.lol/post/61586160

Can’t you just do a new setup? I just installed the seerr container on my unraid server and it took just a couple of minutes. Or am I missing something?

https://lemmy.wtf/comment/20134735
$$5573
https://lemmy.world/u/oong3Eepa1ae1tahJozoosuu posted on Mar 1, 2026 07:29
In reply to: https://lemmy.world/comment/22336685

yeah, it really sucks to spring this upon as like this… I had to change UID/GID of a user too because of that, really annoying.

https://lemmy.world/comment/22409108
Create New Post