![\"image\"](\"https://rssglue.subdavis.com/media/ff/ff51e1d8285414b1113db92e5fa1cd82bb8a7ac822c43f967610aa763ee52ce4.png\")
⬆️ 380 points | 💬 56 comments
","metadata":{"score":380,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1tbjmet","title":"Because we are a self hosting family that's why.","link":"https://www.reddit.com/r/selfhosted/comments/1tbjmet/because_we_are_a_self_hosting_family_thats_why/","author":"BobButtwhiskers","published_at":"2026-05-13T00:21:24+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/08/08bb0f1d01a36f2ca97397b107939d71fd2b29738cb418fab57122a5df6b181e.jpg\")
Found this and want to share it.
\n⬆️ 1,191 points | 💬 46 comments
","metadata":{"score":4453,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1tajo1n","title":"Accidentally exposed publicly my entire LAN for 2 weeks","link":"https://www.reddit.com/r/selfhosted/comments/1tajo1n/accidentally_exposed_publicly_my_entire_lan_for_2/","author":"ldkv","published_at":"2026-05-11T23:08:38+00:00","content":"\n\n\nPosting this as a PSA / confession because I almost had a heart attack last night and I figure if I got bit, someone else will too.
\n\nTL;DR: Replaced pangolin + NPMplus with a double-Caddy + WireGuard setup. Put a \"clever\" config on the local Caddy to minimize maintenance. Tested it once and called it a day. Two weeks later realized my entire LAN was reachable from the public internet via the wildcard tunnel.
\n\nI used to run pangolin (VPS) + NPMplus (local proxy for split DNS) to selectively expose my services. The setup worked fine, but having to click through two different web UIs every time I added a new service was offending my inner lazy engineer. So a few weeks ago I decided to replace them both with a double Caddy setup linked by a WireGuard tunnel.
\n\nThe Caddyfile on the VPS side is a dumb catch-all that punts everything down the tunnel (first mistake):
\n\n*.mydomain.com {\n route {\n reverse_proxy http://10.0.0.2:9999\n }\n}\nAnd the local Caddyfile:
\n\n# Listen on both the Tunnel (Port 9999) and LAN (Port 80/443)\nhttp://:9999, *.mydomain.com {\n map {host} {vars.is_public} {\n public1.mydomain.com true\n public2.mydomain.com true\n default false\n }\n\n @vps_unauthorized {\n expression \"{local_port} == '9999' && {vars.is_public} == 'false'\"\n }\n handle @vps_unauthorized {\n abort\n }\n\n @public1 host public1.mydomain.com\n handle @public1 {\n reverse_proxy 192.168.1.100:8000\n }\n\n @local1 host local1.mydomain.com\n handle @local1 {\n reverse_proxy 192.168.1.101:8001\n }\n}\nThe \"clever\" bit is the matcher in the middle (second mistake). The idea: \"if the request came in via the tunnel (port 9999) AND the host isn't on my public allowlist, kill it.\" This way I get split-horizon DNS while only having to maintain one single local Caddyfile.
\n\nI did a SINGLE (third mistake) quick test from my phone on cellular: public1.mydomain.com loaded, local1.mydomain.com returned a connection error. I went to bed feeling like a genius.
Fast forward about two weeks. I was out and accidentally tapped local1.mydomain.com on my phone. It loaded instantly.
I aged five years in about ten seconds. For the past two weeks, anyone who had bothered to enumerate subdomains on the VPS could have walked straight into my LAN, including services with zero authentication (you know which). So much for the elegant solution.
\n\nThe cleanup afterwards was time consuming. I yanked the VPS tunnel, rotated every credential I could think of, scoured Caddy access logs (thank god I had them on) for anything suspicious, and spent a solid hour combing through logs of my unprotected services.
\n\nIn the end I think I got away with it because nobody bothered to brute force my VPS (which was also protected by crowdsec), but \"security through nobody-bothered\" is not a posture I want to be in.
\n\nExplicit blocking on the VPS side is non-negotiable. The little maintenance overhead is worth it for the security benefits. Another benefit is that it minimize useless traffic hitting my local server. I wasn't able to pinpoint what was wrong with my \"clever\" expression, so just ended up scrapping it and added the following line to the VPS Caddyfile: @public header_regexp Host ^(public1|public2)\\.mydomain\\.com$. Yes I'm still very lazy here with the concise regex, but this time I made sure to test it correctly 😅
\"It worked when I tested it\" is not the same as \"it's doing what I think it's doing.\" Test both the happy path AND the path that's supposed to fail, from outside, more than once. One green light is not a security audit.
Protect local services with authentication. Even a simple HTTP auth layer would have saved me a lot of stress here, and it's not like I don't have the tools to set it up. I was just too lazy and thought nothing could ever happen.
This incident has been a wake-up call to my complacency and lack of rigor when it comes to security. Post the story and the broken config above as the cautionary tale. Don't be me 💀.
\n⬆️ 341 points | 💬 76 comments
","metadata":{"score":498,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1taacxr","title":"Puter 26.05: Open-source, self-hosted, Internet OS! 2 years, 370 contributors, 400K downloads, and 40K stars later, we're out of beta!","link":"https://www.reddit.com/r/selfhosted/comments/1taacxr/puter_2605_opensource_selfhosted_internet_os_2/","author":"mitousa","published_at":"2026-05-11T17:34:54+00:00","content":"\n\nhttps://github.com/heyPuter/puter/
\n\n\n\n\n\n⬆️ 242 points | 💬 61 comments
","metadata":{"score":466,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t9mdul","title":"AirPipe v4: my self-hosted file transfer is now true peer-to-peer","link":"https://www.reddit.com/r/selfhosted/comments/1t9mdul/airpipe_v4_my_selfhosted_file_transfer_is_now/","author":"Frag_O_Fobia","published_at":"2026-05-10T23:30:42+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/23/2346508d869c86996011edb3d6097bd70607f86a6ad24b54c00df432587418a8.gif\")
I posted about AirPipe here a few months back. Been working on it pretty much non-stop since. v4 just shipped.
\n\nHeads up, video editing isn't my strong suit, sorry for the artifacts and quality. Hope it conveys what the thing does.
\n\nThe big change: files go peer-to-peer over WebRTC. Sender picks how the relay helps. Either as a signaling relay (your bytes flow directly between the two devices), or as an encrypted 10-minute mailbox (relay holds the ciphertext if the receiver isn't online yet).
\n\nEither way, the relay only sees ciphertext.
\n\nSender picks the mode. Receiver types the passphrase anywhere. Homepage, CLI with airpipe download <PHRASE>, or scan the QR. One code, three ways in.
Try it: open airpipe.sanyamgarg.com in two browsers and share a passphrase between them.
\n\nSelf-host the relay in one container, or use mine:
\n\ndocker run -p 8080:8080 ghcr.io/sanyam-g/airpipe-relay\nCLI for headless boxes:
\n\ncurl -sSL https://airpipe.sanyamgarg.com/install.sh | sh\nairpipe send report.pdf\nSource: github.com/Sanyam-G/Airpipe (MIT)
\n⬆️ 227 points | 💬 32 comments
","metadata":{"score":263,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t95c4m","title":"Girls come and go, Docker Servers stay","link":"https://www.reddit.com/r/selfhosted/comments/1t95c4m/girls_come_and_go_docker_servers_stay/","author":"Matletic","published_at":"2026-05-10T12:14:33+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/11/11a4805d4f87cb0aca9a5950d2ed23afe3d27a96548e2af5b5f4c08f0be20080.png\")
⬆️ 715 points | 💬 58 comments
","metadata":{"score":1536,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t92807","title":"Docker bypasses UFW and exposed my database. Again. Writing this down so I stop forgetting","link":"https://www.reddit.com/r/selfhosted/comments/1t92807/docker_bypasses_ufw_and_exposed_my_database_again/","author":"Substantial_Word4652","published_at":"2026-05-10T09:28:19+00:00","content":"\n\n\nDocker bypasses UFW and exposed my database. Again. Writing this down so I stop forgetting.
\n\nSelf-hosters, this one is for you.
\n\nI finish setting up a new app on my VPS, everything looks good, then I run a security check and boom. Same mistake again. Docker silently bypassing my firewall and exposing my database to the internet.
\n\nThis has happened to me more than once. I keep forgetting it, so I'm writing it here as a reminder for myself and hopefully useful for someone else running their own server.
\n\nWhen you're using docker compose in production on a VPS, remember:
\n\nDon't expose database ports unless you absolutely need to. And if you do, don't do this:
\n\nports:\n - \"5432:5432\"\nDo this instead:
\n\nports:\n - \"127.0.0.1:5432:5432\"\nWhy does this matter?
\n\nDocker manages network rules at a very low level on Linux. When you publish a port, it sets up routing rules directly in the system networking stack. So if you don't explicitly bind it to localhost, you're effectively exposing that service on the machine's public network interface.
\n\nAnd if you're thinking \"it's fine, I have UFW enabled\", not necessarily. UFW is just a frontend for Linux firewall rules, and Docker bypasses it by manipulating those rules directly. Your database might still be exposed even with the firewall on.
\n\nHas anyone else been caught by this?
\n⬆️ 321 points | 💬 194 comments
","metadata":{"score":610,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t8iohb","title":"You guys are begging people to start lying on AI disclosures","link":"https://www.reddit.com/r/selfhosted/comments/1t8iohb/you_guys_are_begging_people_to_start_lying_on_ai/","author":"EmergencyRadiant8038","published_at":"2026-05-09T20:01:45+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/68/68bc30f8247bb512dbd3cc988133eb5a2f56d4e157efbe54f523f20b6d2f3fd9.png\")
I understand and am against using AI without any idea of what is going on, but when the community pulls of things like this, the next time this person posts -- or if someone about to posts sees this -- what do you think they will be? Honest? No, and I won't blame them if I start to see false claims.
\n⬆️ 614 points | 💬 222 comments
","metadata":{"score":2329,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t7qfjf","title":"After years of using Heimdall ... I've finally moved to Dashy","link":"https://www.reddit.com/r/selfhosted/comments/1t7qfjf/after_years_of_using_heimdall_ive_finally_moved/","author":"swake88","published_at":"2026-05-09T01:06:40+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/5b/5bd1c49088bf1263f20c7da33b14cdd668b013e35ad90a7f9221452d0081344d.png\")
⬆️ 259 points | 💬 46 comments
","metadata":{"score":397,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t6iuyd","title":"Which services are you exposing to the internet, and how are you securing them?","link":"https://www.reddit.com/r/selfhosted/comments/1t6iuyd/which_services_are_you_exposing_to_the_internet/","author":"sysadmin_light","published_at":"2026-05-07T18:20:56+00:00","content":"\n\n\nI keep thinking about things like SSO and it's got me curious, how are all of you locking down your public-facing services?
\n\nCurrently, I've got only a select few - primarily Seerr, Immich, Mealie, and FoundryVTT - publicly exposed via SWAG (with geo-ip blocks) so that friends and family can access them without needing extra apps like Tailscale on their devices.
\n\nI know all of the services I make available have their own login prompts, but knowing how some projects can be, I figure things could always be more secure, so I'm curious to hear how everyone else does it.
\n⬆️ 230 points | 💬 166 comments
","metadata":{"score":246,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t63vxr","title":"How do you monitor your self-hosted servers?","link":"https://www.reddit.com/r/selfhosted/comments/1t63vxr/how_do_you_monitor_your_selfhosted_servers/","author":"vdorru","published_at":"2026-05-07T07:58:36+00:00","content":"\n\n\nI’m curious how people here handle server monitoring.
\n\nRight now I’m thinking about things like:
\n\nBut I’m not sure what the “normal” setup looks like for self-hosting.
\n\nHow are you doing it?
\n\nAlso, what do you actually keep an eye on day to day?
\n\nHow many servers are you actually monitoring?
\n\nI assume the setup changes a lot depending on scale. One home server is probably very different from managing 10–20 machines (if anyone even has that many for self-hosting).
\n\nWould be interesting to hear how your approach changes with the number of servers.
\n\nIf you’re using dashboards, feel free to share what yours looks like or describe it!
\n⬆️ 217 points | 💬 204 comments
","metadata":{"score":234,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t5mk41","title":"My Homepage Dashboard on my RPi5","link":"https://www.reddit.com/r/selfhosted/comments/1t5mk41/my_homepage_dashboard_on_my_rpi5/","author":"Antonioxsuarez","published_at":"2026-05-06T19:06:48+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/4f/4fd78ec5f46c83d2c4358af311cec5b1f47b217de585002848474498f8c59dd8.png\")
I'm on LibreWolf (Firefox fork) and I can't save the whole page as a screenshot. Hence why I had to stitch it.
\nEdit: I only run Homepage, Gotify, Pi-hole and Nginx Proxy Manager on my RPi5. Everything else is on my main server.
⬆️ 235 points | 💬 51 comments
","metadata":{"score":267,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t5do5v","title":"how can I self host to avoid having Google blow my life up randomly?","link":"https://www.reddit.com/r/selfhosted/comments/1t5do5v/how_can_i_self_host_to_avoid_having_google_blow/","author":"fartedcum","published_at":"2026-05-06T13:55:41+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/42/4213f210dc967eac4b2b5b138821a43686d8de4cabbd01900119504f19061ed2.jpg\")
no, I'm not worried about having any offensive child related content on my device, but I have seen people be perma banned with no option to appeal for less offensive things. I'm worried about losing access to my accs with how much MFA I have set up and worse, 10s of thousands of pictures of my life and family. is there a solid way to self host these things that is reliable?
\n⬆️ 905 points | 💬 277 comments
","metadata":{"score":928,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t5cxe5","title":"A homepage dashboard I'm finally happy with.","link":"https://www.reddit.com/r/selfhosted/comments/1t5cxe5/a_homepage_dashboard_im_finally_happy_with/","author":"mwojo","published_at":"2026-05-06T13:27:27+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/9c/9ce6972044519793aceed8aafe0ce62eeddf905fd19f710953732ba519c7783d.png\")
⬆️ 436 points | 💬 51 comments
","metadata":{"score":477,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t3l3zu","title":"PSA for anyone not using LXCs on Proxmox","link":"https://www.reddit.com/r/selfhosted/comments/1t3l3zu/psa_for_anyone_not_using_lxcs_on_proxmox/","author":"HoeCage","published_at":"2026-05-04T15:31:12+00:00","content":"\n\n\nThe Point: Holy shit LXCs are so cool and felt like black magic getting \"free\" RAM back. If you're newer, like me, and have just been using VMs instead of LXCs, you should look at changing that.
\n\nI started my server back in November knowing absolutely nothing about using Linux, using CLI, or Docker. At the same time, I also went in raw, jumping straight into Proxmox on three nodes. As a result, I ended up using a lot of the Proxmox VE Helper Scripts for initial setup and have since gone back and learned how to do a lot of things myself. One of the hugely inefficient decisions I made at the time was to use a VM for Docker instead of an LXC.
\n\nFor context, two of my nodes are running an i3-5005U and 8gb of soldered DDR3 RAM. One of those machines was exclusively running a VM to run Docker containers largely centered around downloads. On average, I was hitting ~30-50% CPU on the PVE host and ~7GB RAM usage.
\n\nSwitching to an LXC has brought that down to 10-25% CPU and ~2-2.5GB RAM usage. A machine that felt like it was at its limit suddenly gained immense amounts of headroom.
\n\nJust wanted to put this out there for anyone procrastinating switching some VMs to LXCs. In my case, it was worth the relatively low amount of effort to free up such a significant amount of resources.
\n⬆️ 251 points | 💬 83 comments
","metadata":{"score":314,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t3ba9r","title":"n8n + Paperless-ngx + Paperless-GPT for adding RAG to your documents!","link":"https://www.reddit.com/r/selfhosted/comments/1t3ba9r/n8n_paperlessngx_paperlessgpt_for_adding_rag_to/","author":"hackslashX","published_at":"2026-05-04T08:06:35+00:00","content":"\n\n\nPaperless-ngx is undoubtedly one of the most important and useful containers in my self-hosted stack. I have a modest collection of documents, ranging from receipts, to pay-stubs, certificates, notices, IDs, etc. While it's great for cataloging documents, I feel like for scanned documents (especially) the in-built Tesseract based OCR is quite poor (I've worked with Tesseract professionally and it's really hard to get solid OCR performance on documents that have out of the ordinary template or styling). Secondly, there's no ability to semantically search for information within document, for example, \"What was my electricity bill for a particular month\" or \"How much income tax I paid last year\", and so on.
\n\nI wanted to keep my implementation as simple and straightforward as possible. There are 5 tools that I used to achieve this.
\n\nPaperless-GPT
\n\nAfter uploading a document to Paperless, I basically set two tags on the document, paperless-gpt-ocr-auto to perform LLM assisted OCR on the document and replace the content with AI generated text. This is not exact 1-1 OCR but it's very readable and LLM also attempts to fix OCR mistakes. The second tag is paperless-gpt which is used for automatic population of tags, title, correspondent and created-at fields for each document. The important part is \"content\" since that's what the RAG ingestion workflow uses to generate embedding.
\n\nThe n8n RAG ingestion workflow
\n\n\n\nThe workflow itself is pretty basic. I use Chat Message trigger to send a document ID to the workflow. This can be replaced with a webhook call and you can configure Paperless to automatically call this URL, although I haven't configured that yet. It also can be replaced with a scheduled job that retrieves new documents added to Paperless and ingest them automatically.
\n\nWith the document ID, I basically hit a couple of endpoints like below to get all required information.
\n\n![https://preview.redd.it/xl4utsiqs2zg1.png?width=1640&format=png&auto=webp&s=79cff39c069cde564818ba5be2a75bb70f75defc](\"https://preview.redd.it/xl4utsiqs2zg1.png?width=1640&format=png&auto=webp&s=79cff39c069cde564818ba5be2a75bb70f75defc\"){kind=link}
GET api/documents/<document_id>/\nGET api/correspondents/<correspondent_id>/\nGET api/document_types/<document_type_id>/\nGET api/tags/<tag_id>/ (loop over multiple tags)\nNow that I have all of the required information, I simply use an Embedding provider (in my case I'm using Azure since I have an Enterprise account with data sharing for model training disabled) that generates embedding for the document. The document is chunked by the splitter at every 2000 characters with 200 characters overlap. This is then pushed to Milvus collection.
\n\nMilvus Collection Schema
\n\nI created the collection manually since n8n sets varchar size for some fields quite low. You can use pymilvus or Attu to create this:
\n\n| Field Name | \nType | \nKey | \nDescription | \n
|---|---|---|---|
| langchain_primaryid | \nInt64 | \nPK | \nPrimary identifier | \n
| langchain_vector | \nFloatVector (dim=3072) | \n— | \nEmbedding vector | \n
| langchain_text | \nVarChar (65535) | \n— | \nMain text content | \n
| source | \nVarChar (65535) | \n— | \nSource of the document | \n
| blobType | \nVarChar (65535) | \n— | \nBlob type or format | \n
| loc | \nVarChar (65535) | \n— | \nLocation or path | \n
| document_id | \nFloat | \n— | \nDocument identifier | \n
| title | \nVarChar (65535) | \n— | \nDocument title | \n
| correspondent | \nVarChar (65535) | \n— | \nAssociated correspondent | \n
| document_type | \nVarChar (65535) | \n— | \nType/category of document | \n
| tags | \nVarChar (65535) | \n— | \nTags or keywords | \n
| created | \nVarChar (65535) | \n— | \nCreation timestamp | \n
| document_link | \nVarChar (1024) | \n— | \nLink to the document | \n
I also created separate users with read and write permissions and configured them in n8n accordingly.
\n\nThe MCP workflow
\n\nThis is pretty trivial. It's just an MCP Server Trigger with a Retrieve Documents tool. Make sure to update the title and description of the tool in n8n so that it populates properly in MCP tools discovery. I haven't added a re-ranker node here since n8n only supports Cohere for now :(
\n\n\n\nAlso, attach a Bearer Auth token with the MCP trigger to protect the endpoint. Publish the workflow and copy the Production MCP URL from the node settings.
\n\nLobechat Integration
\n\nIn Lobechat, go to Skills Management and register a new MCP skill. It's pretty straightforward too!
\n\n\n\nI also created a new Agent in Lobechat to let it know which tool to call (even if not explicitly requested) and the output format.
\n\n![https://preview.redd.it/wjnh9fsdu2zg1.png?width=748&format=png&auto=webp&s=5833d680c8052d93363be38d6fa4f88fd09176a8](\"https://preview.redd.it/wjnh9fsdu2zg1.png?width=748&format=png&auto=webp&s=5833d680c8052d93363be38d6fa4f88fd09176a8\"){kind=link}
![https://preview.redd.it/ntpry7n4v2zg1.png?width=1882&format=png&auto=webp&s=64dcd68ded5378ff2dc01125b0b993587ae2a18a](\"https://preview.redd.it/ntpry7n4v2zg1.png?width=1882&format=png&auto=webp&s=64dcd68ded5378ff2dc01125b0b993587ae2a18a\"){kind=link}
You are an AI assistant that answers user queries using the DocumentsRAG knowledge base.\nCore Behavior\nAlways retrieve relevant information using the DocumentsRAG skill before answering.\nDo this even if the user does not explicitly request document lookup.\nBase your responses strictly on retrieved documents whenever possible.\nIf no relevant documents are found, clearly state that and provide the best possible general answer.\nResponse Format\nStructure every response in the following format:\n1. Answer Summary\nProvide a clear, concise answer to the user’s question.\n2. Supporting Details\nExpand on the answer using information from retrieved documents.\nUse bullet points or short paragraphs for readability\nHighlight key facts, definitions, or steps\n3. Sources / References\nList all relevant documents used:\nInclude document title\nProvide direct links (if available)\nOptionally include a short snippet or context\nExample:\nDocument Title 1 – <link>\nDocument Title 2 – <link>\nAdditional Guidelines\nPrefer accuracy over completeness when documents are limited\nDo not fabricate sources or links\nIf multiple documents conflict, mention the discrepancy\nKeep responses structured and easy to scan\nAvoid unnecessary verbosity\nResults
\n\nI'm pretty impressed by it. Since it has allowed me to naturally query my documents, ask questions, and get information without searching and reading the document.
\n\n\n\nAnyways, I just wanted to shared my self-hosted workflow for RAG. But I'm very much interested in what everyone else uses!
\n⬆️ 251 points | 💬 31 comments
","metadata":{"score":258,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t35sph","title":"She may come to regret asking.","link":"https://www.reddit.com/r/selfhosted/comments/1t35sph/she_may_come_to_regret_asking/","author":"RCAMuse","published_at":"2026-05-04T03:06:40+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/79/79880dd17191763e9e69044d72c9b88177bb7c0cdcc2e180be41c9fd1d91b509.png\")
Buckle up sis, that's just the top 10% of the iceberg.
\n⬆️ 997 points | 💬 65 comments
","metadata":{"score":4281,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t336f3","title":"A homepage dashboard I'm finally happy with.","link":"https://www.reddit.com/r/selfhosted/comments/1t336f3/a_homepage_dashboard_im_finally_happy_with/","author":"mwojo","published_at":"2026-05-04T01:06:58+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/2e/2e1a52b678394224281d0e59044fbae204aef8a07e8dd378bc5c612fdd0f3233.png\")
⬆️ 399 points | 💬 42 comments
","metadata":{"score":399,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t2qd26","title":"Vaultwarden 1.36.0 patches vulnerabilities","link":"https://www.reddit.com/r/selfhosted/comments/1t2qd26/vaultwarden_1360_patches_vulnerabilities/","author":"0x3e4","published_at":"2026-05-03T16:38:12+00:00","content":"\n\nhttps://github.com/dani-garcia/vaultwarden/releases/tag/1.36.0
\n\n\n\nSecurity fixes
\n\nThis release contains security fixes for the following advisories. We strongly advice to update as soon as possible.
\n\nSSO Login CSRF - GHSA-pfp2-jhgq-6hg5, GHSA-w6h6-8r66-hcv7
\nUser/Organization Enumeration - GHSA-hxqh-ff5p-wfr3
\nSSO existing-user binding - GHSA-j4j8-gpvj-7fqr
\nGHSA-6x5c-84vm-5j56
\nSSRF via Icon Endpoint - GHSA-72vh-x5jq-m82g
\nSome crate's updated and other minor security enhancements
These are private for now, pending CVE assignment.
\n\nhttps://github.com/dani-garcia/vaultwarden/releases/tag/1.36.0
\n⬆️ 254 points | 💬 14 comments
","metadata":{"score":367,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t2ff9c","title":"Whats the point in a VPS?","link":"https://www.reddit.com/r/selfhosted/comments/1t2ff9c/whats_the_point_in_a_vps/","author":"Unusual_Economics653","published_at":"2026-05-03T08:08:59+00:00","content":"\n\n\nSo i originally came into self hosting to get away from subscriptions, to stop renting everything/ start owning things, to not rely on external sources, etc... but now that im on reddit and looking to be a bit more active im seeing A LOT of posts on VPSs.
\n\nI had no idea what they were so i decided to look it up, and to my surprise, its renting your own self hosted work(?) It still feels wrong and i mightve been lead astray by the internet, but isnt that like everything that self hosting is meant to not be?
\n\nVPS - small subscription, relying on external sources, and not owning your own setup?
\n\nOwned machine - one time payment, easily upgradeable, not relying kn external sources, etc.
\n\nLike i get it might be more affordable in the temporary, but thats everything when owning vs subscribing...
\n\nSo i ask, is there any genuine technical reason to use a vps over your own machine? Like some reason people cant use their own machine ehile being able to use a VPS? Not like a convenience issue where it would just be annoying to work around, (self hosting isnt typically convenient to setup when starting out) but an actual reason that physically could not work in their own home, or possibly a reason to keep it out of your home? Please let me know, and sorry if this was too much of a ramble
\n\nEdit: To all those looking for the answers in the future, this is the large majority of it. I encourage everyone to dig through the comments because there is a lot of useful info. in no order:
\n\nThank you everyone for clarifying!!!
\n⬆️ 223 points | 💬 224 comments
","metadata":{"score":225,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t10cj8","title":"3-2-1 rule , how are you all doing it without breaking bank?","link":"https://www.reddit.com/r/selfhosted/comments/1t10cj8/321_rule_how_are_you_all_doing_it_without/","author":"Tasty-Picture-8331","published_at":"2026-05-01T17:40:26+00:00","content":"\n\n\nSo my nas is getting big now slowly with around 8tb of data.
\n\nI run it on raid 1, but I wonder in the worst case scenario, I wanted to also have a off site backup. But obviously 8tb + on cloud is going to be expensive no?
\n\nHow are you guys storing your offline backup? And where do you guys store it?
\n⬆️ 264 points | 💬 196 comments
","metadata":{"score":289,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t0v2so","title":"Appreciation post: Tailscale and Headscale","link":"https://www.reddit.com/r/selfhosted/comments/1t0v2so/appreciation_post_tailscale_and_headscale/","author":"Curious_Olive_5266","published_at":"2026-05-01T14:30:51+00:00","content":"\n\n\nThese two are the most incredible technologies on the modern Internet. The Web is finally free and open again, just as Tim Berners-Lee intended it so many decades ago at CERN. People are finally taking the Web back from corporations, and it is amazing to see. Tailscale is going to be the biggest tech company in the world by the next decade, and the GTA will overtake the Bay Area as the world's tech capital.
\n⬆️ 232 points | 💬 75 comments
","metadata":{"score":232,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t0uoxm","title":"Patch your servers, peeps, new Linux kernel vulnerability just dropped","link":"https://www.reddit.com/r/selfhosted/comments/1t0uoxm/patch_your_servers_peeps_new_linux_kernel/","author":"bz386","published_at":"2026-05-01T14:16:23+00:00","content":"\n\n\nCopyFail just dropped, it's a new Linux kernel vulnerability that gives attackers root privileges. https://arstechnica.com/security/2026/04/as-the-most-severe-linux-threat-in-years-surfaces-the-world-scrambles/
\n\nDebian has an updated kernel, Proxmox too. Looks like Raspberry Pi hasn't released an updated version yet.
\n⬆️ 366 points | 💬 162 comments
","metadata":{"score":919,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t0nq8t","title":"Living in Turkmenistan: 75% of IPs blocked, 6Mbps max speed. Need Linux & VPN advice for 3D Freelancing.","link":"https://www.reddit.com/r/selfhosted/comments/1t0nq8t/living_in_turkmenistan_75_of_ips_blocked_6mbps/","author":"Beautiful-Bread818","published_at":"2026-05-01T08:45:26+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/47/47f27b19e2db8cbc34e81b3541f9a3b89c1140ec6548f872e8f339123f6a45b8.jpg\")
Hi everyone,\nI’m a 3D artist living in Turkmenistan, and I’m facing a digital \"survival challenge.\" In my country, the internet is heavily censored: about 75% of global IP addresses are blocked. This includes everything from YouTube and Reddit to Wikipedia.\nThe Situation:\nSpeed: My current speed is 2 Mbps (I plan to upgrade to the national \"maximum\" of 6 Mbps soon).\nHardware/OS: I am using Linux Mint 22.3.\nWork: I work as a freelance 3D artist. Constant disconnections and blocks make it almost impossible to sync assets or even look up tutorials.\nWhat I’ve tried so far:\nPaid VPS: I rented a server from Aeza for $12/month. I was detected and blocked within 3 days. My connection is so unstable that heavy obfuscation protocols often \"choke\" the bandwidth entirely, while simple ones get sniped by the firewall instantly.\nFree VPNs: Most Play Store VPNs only deliver 25-40% of my already slow speed. Paid ones are slightly better (up to 75-90% of line speed), but they get blocked very quickly.\nLegacy Tools: Programs like Free Browser (Android) and SoftEther (Windows) used to work well, but Free Browser is mobile-only, and I can't find a reliable way to run SoftEther on Linux Mint.\nMy Questions:\nWhat is the most \"lightweight\" stealth protocol for a very slow connection (2-6 Mbps) that can survive a national-scale firewall? Is VLESS + Reality a good option here?\nAre there any Linux Mint native clients you recommend? I’ve heard of nekoray or v2rayA, but I’m not sure which handles low bandwidth better.\nAre there specific VPS regions or providers that are less likely to be flagged than the big ones like Aeza?\nAny advice from network engineers or people living in high-censorship regions would be a lifesaver. I just want to be able to work and learn.\nThank you! 🙇♂️
\n⬆️ 275 points | 💬 88 comments
","metadata":{"score":705,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t0bo8e","title":"My setup","link":"https://www.reddit.com/r/selfhosted/comments/1t0bo8e/my_setup/","author":"Expert-Paramedic1156","published_at":"2026-04-30T22:51:17+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/3d/3d3c51fe9cc03cf8492482fe96407195480a2cda8b74ece8dc6c05bde6bf4d1d.jpg\")
This is my setup. Image made by AI but overall looks like this. There is no connection between proxmost host and media but proxmox uses my truenas storage (16TB). I removed everything. Nginx isn’t connected anymore. Everything is LAN. Started homelabbing in Feb with no background.
\n\nWatched a lot of videos and read too many posts on here. I run apps I vibe code for personal use.
\n⬆️ 200 points | 💬 42 comments
","metadata":{"score":827,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1t00urv","title":"Pangolin 1.18: Web proxy through VPN, high availability client routing, wildcard resources, alerts, and more","link":"https://www.reddit.com/r/selfhosted/comments/1t00urv/pangolin_118_web_proxy_through_vpn_high/","author":"MrUserAgreement","published_at":"2026-04-30T16:12:03+00:00","content":"\n\n\nHello everyone!
\n\nPangolin 1.18 brings HTTPS support for private resources, multi-site high availability routing, uptime tracking, health checks, alert rules, wildcard resources, and more. Let's dig in!
\n\nGitHub: https://github.com/fosrl/pangolin
\n\nPangolin is an open-source, identity-aware remote access platform. Use it to securely expose authenticated web applications and private VPN resources to anyone with peer-to-peer zero-trust networking.
\n\n\n\nPrivate HTTP is a new resource type for web workloads. It behaves like a public resource with a domain name and valid TLS but nothing is exposed on the public internet. The hostname resolves to a reverse proxy running in the site connector (Newt) and only serves traffic when the user has an active Pangolin client connection.
\n\n\n\nPrivate resources now support multiple site connectors. Pangolin routes traffic through whichever path is best at the time and automatically fails over if a site goes offline.
\n\n\n\nSet the subdomain field to * on a public resource and Pangolin routes every hostname at that level through the same resource and tunnel. Access rules and auth apply across all matched hostnames, and the original Host header is preserved for downstream routing.
\n\n1.18 also adds uptime tracking on sites and resources, standalone health checks (HTTP and TCP) that can watch anything on your network, alert rules with email, webhook, the ability to import an identity provider across organizations, and a handful of UI improvements and bug fixes.
\n\n\n\nCheck out the full blog post for details on everything in this release: https://pangolin.net/news/1-18-release
\n\nAs always, available for self-hosting via the Community or Enterprise editions or on Pangolin Cloud. The Enterprise is free for personal use.
\n\nIf you haven't starred us on GitHub yet, it genuinely helps. Thank you!
\n⬆️ 240 points | 💬 92 comments
","metadata":{"score":249,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1szdvgo","title":"I came to realize that selfhosted forums are an essential part towards digital sovereignty","link":"https://www.reddit.com/r/selfhosted/comments/1szdvgo/i_came_to_realize_that_selfhosted_forums_are_an/","author":"Digital_Nerve_8765","published_at":"2026-04-29T22:32:07+00:00","content":"\n\n\nHey, here's the HortusFox dev again.
\n\nI got inspired by Dan Brown's decision to abandon discord for a hosted zulip instance. And then it hit me...
\n\nBack in the day, software projects had a website, documentation and forum. Some had, in addition, an IRC channel somewhere. This just worked. It was an amazing way to foster community and keep control over your data.
\n\nSo, today I was very unhappy regarding enshittification again. I mean, we used to have soooo many platforms and sites back in the day. Now everything takes place on a handful of platforms. Internet monopolization by corporations. I know, this is no recent news. We all know that.
\n\nI believe forums may be a key aspect to regain digital sovereignty again. That's why I've decided to setup a forum infrastructure for HortusFox. When tinkering around, I eventually decided to go with Flarum. Simply because it's easy to install, uses the well-established Laravel framework and I like it's style from the ground without any additional extensions installed.
\n\nThe selfhosted community is one of the most aware communities when it comes to data protection and digital sovereignty. I love that! That's why I once again decided to post here. ❤️
\n\nAs for me, I am now going into the process of migrating from discord to flarum. I mean, discord feels great, it offers many features, but it's eventually centralized, it only has closed communities in terms of SEO and recent decisions in terms of age verification are concerning. The latter one is also a reason why I finally abandoned publishing play store apps three years ago, and went fully PWA. Microsoft Store does the same now (removed sign-up fee in favor of ID verification).
\n\nMaybe I'm a bit carried away, but imagine, if even the reddit communities such as r/opensource or r/selfhosted would abandon reddit in favor of a forum-based communities run by volunteers? Reddit is not our friend. And various decisions to wipe out third-party apps and pushing echo chambers aren't really something I consider \"the heart of the internet\". By the way, did you notice Reddit now tests forcing people to use the mobile app when they browse reddit via a mobile browser? Pretty sure, they will eventually rollout this \"feature\".
\n\nWhat do you think? Both developers and selfhosters, would you like the idea that we turn back to forums again?
\n\nPS: HortusFox now also officially backs the open-source petition to have the german government acknowledge opensource work as volunteering by law. A big thanks to Boris Hinzer for launching the campaign.
\n⬆️ 203 points | 💬 43 comments
","metadata":{"score":409,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1sz2r37","title":"Hound - A Media Server Alternative to Plex/Jellyfin + Stremio","link":"https://www.reddit.com/r/selfhosted/comments/1sz2r37/hound_a_media_server_alternative_to_plexjellyfin/","author":"NearbyYak7156","published_at":"2026-04-29T15:50:30+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/67/67879ef8aa4e2df4e3cb19c108371e5def78035f3fa018cb4985c352d5b7beea.png\")
What is Hound?
\n\nHound is a self-hosted, open-source media server, like Plex/Jellyfin, but with the extra ability to stream content through P2P (torrent) or HTTP/Debrid without downloading first. With Hound, you have the flexibility of fully controlling your media like Jellyfin, but can also stream instantly ala streaming services. It's the best of both worlds.
\n\nI posted about Hound in this sub years ago, when it was originally built as a simple movie/tvshow tracker. Since then Hound has evolved into a full media server. Link.
\n\nLinks
\n\nFeatures
\n\nDemo
\n\nNote that the web portal isn't optimized for mobile yet:
\n\nAccess the demo here.
\n\n![https://preview.redd.it/5ygkyjbcv2zg1.png?width=950&format=png&auto=webp&s=1f91589f52b712f8e83ada28789d0adb6f0dec5c](\"https://preview.redd.it/5ygkyjbcv2zg1.png?width=950&format=png&auto=webp&s=1f91589f52b712f8e83ada28789d0adb6f0dec5c\"){kind=link}
![https://preview.redd.it/mahwfp9nv2zg1.png?width=991&format=png&auto=webp&s=eb6b866c392962ab6e89c33d2819423c8a8416af](\"https://preview.redd.it/mahwfp9nv2zg1.png?width=991&format=png&auto=webp&s=eb6b866c392962ab6e89c33d2819423c8a8416af\"){kind=link}
![https://preview.redd.it/yrj4fzbsqcyg1.png?width=3456&format=png&auto=webp&s=8deba1390d2be6ec6ea5efdb834284333d559703](\"https://preview.redd.it/yrj4fzbsqcyg1.png?width=3456&format=png&auto=webp&s=8deba1390d2be6ec6ea5efdb834284333d559703\"){kind=link}
![https://preview.redd.it/mxs6483tqcyg1.png?width=1730&format=png&auto=webp&s=917528d2af7c82cae70812b07ee0bf64e95cc682](\"https://preview.redd.it/mxs6483tqcyg1.png?width=1730&format=png&auto=webp&s=917528d2af7c82cae70812b07ee0bf64e95cc682\"){kind=link}
![https://preview.redd.it/wpvwjhqtqcyg1.png?width=1762&format=png&auto=webp&s=5677b90b3ca3271e4f767c478c51b925017352da](\"https://preview.redd.it/wpvwjhqtqcyg1.png?width=1762&format=png&auto=webp&s=5677b90b3ca3271e4f767c478c51b925017352da\"){kind=link}
![https://preview.redd.it/740y4bfneeyg1.png?width=2030&format=png&auto=webp&s=ae0b7f7a9798d002ea2c7a27c4b0bf8169c5d6d1](\"https://preview.redd.it/740y4bfneeyg1.png?width=2030&format=png&auto=webp&s=ae0b7f7a9798d002ea2c7a27c4b0bf8169c5d6d1\"){kind=link}
username: selfhosted\npassword: password\nThis is just the web portal, for actually watching content you'll want to use the apps
\n\nPlatforms
\n\nAndroid and Android TV apps are available, you'll need to sideload the APKs. iOS and tvOS require a bit more time for testing and to distribute through TestFlight. They share the same code (built on React Native TVOS) so most of the effort is done.
\n\n\n\nInstallation
\n\nDocker compose is the recommended way to install Hound:
\n\nservices:\n hound-postgres:\n container_name: hound-postgres\n image: postgres:18\n environment:\n POSTGRES_DB: hound_db\n POSTGRES_USER: hound\n POSTGRES_PASSWORD: super-strong-password\n volumes:\n - ./Hound Data/postgres_data:/var/lib/postgresql\n healthcheck:\n test: [\"CMD-SHELL\", \"pg_isready -U hound -d hound_db\"]\n interval: 5s\n timeout: 5s\n retries: 5\n\n hound-server:\n container_name: hound-server\n image: houndmediaserver/hound:latest\n depends_on:\n hound-postgres:\n condition: service_healthy\n ports:\n - \"2323:2323\"\n environment:\n - POSTGRES_DB=hound_db\n - POSTGRES_USER=hound\n - POSTGRES_PASSWORD=super-strong-password\n - HOUND_SECRET=super-strong-secret\n volumes:\n - ./Hound Data:/app/Hound Data\n # (Optional) attach your media library\n # IMPORTANT: Please read the docs before doing this\n # - /path/to/movies:/app/External Library/Movies\n # - /path/to/shows:/app/External Library/TV Shows\nPOSTGRES_PASSWORD on both hound-postgres and hound-server servicesHOUND_SECRETThen run docker compose up -d
Access the web portal at port 2323:
http://<ip-address>:2323\nusername: admin\npassword: password\nMake sure you change your password immediately.
\n\nNext, you'll want to set up a provider next to start watching content, refer to the guides below:
\n\n\n\nWhy Hound?
\n\nWhen I set up Jellyfin for my friends and family, I found that they kept switching back to Netflix/Prime when it was more convenient. Today, the Plex/Jellyfin ecosystem is quite mature. But for some (especially older) people, using a separate app, requesting content first, and waiting a couple minutes (or even longer) can be unintuitive/inconvenient. It's much nicer to be able to scroll and discover content, and watch immediately in seconds.
\n\nFrom an admin perspective, drives are getting increasingly expensive, and larger libraries drive electricity costs even more.
\n\nMy vision for Hound was to have all the advantages of self-hosting media, with the flexibility of streaming. You can still curate a library with whatever content you like, but for content not yet downloaded in your library, Hound switches automatically to P2P/Debrid streaming, so it's a seamless experience for users.
\n\nHound is in Beta + Pricing
\n\nHound is in Beta, so please expect bugs and run backups often. Although Hound is completely self-hosted and open source (AGPLv3), there will be a paid tier when Hound leaves beta:
\n\nUnfortunately, unlike the amazing maintainers at Jellyfin, I can't keep Hound free. I thought long and hard about pricing that respects self-hosting and open source philosophies. I settled on this model so anyone can try Hound and all its features for free, and have an informed choice on whether or not to purchase.
\n\nSince Hound is completely open-source, I can't stop you from forking and removing the license checks. Instead of doing this, if you contribute to Hound's development actively, I'll give you keys upon release.
\n\nYou can't actually purchase yet since we're in Beta, but I wanted you to know in advance.
\n\nPlease try the demo and leave feedback! If you like the project, please consider adding Hound to your stack, and even contributing!
\n⬆️ 228 points | 💬 96 comments
","metadata":{"score":621,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1sz2kur","title":"Do you keep your docker containers running 24/7","link":"https://www.reddit.com/r/selfhosted/comments/1sz2kur/do_you_keep_your_docker_containers_running_247/","author":"shrimpdiddle","published_at":"2026-04-29T15:44:24+00:00","content":"\n\n\nDo you keep your docker containers running 24/7, or spin them up before they are needed. For example, I use BentoPDF maybe three times a week. So I've gotten to where I down the container after I'm done using it. The only containers I leave up, are my “infrastructure” apps... vaultwarden, radicale, WireGuard, NPM, Jellyfin.
\n\nGiven that most images have unresolved CVEs, reducing exposure, is just another security layer. As well it frees up memory, and reduces CPU load, and the power that requires.
\n⬆️ 174 points | 💬 146 comments
","metadata":{"score":268,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1symidv","title":"Can I host myself streaming games (like on Twitch) to my own website?","link":"https://www.reddit.com/r/selfhosted/comments/1symidv/can_i_host_myself_streaming_games_like_on_twitch/","author":"FantasticFrontButt","published_at":"2026-04-29T02:57:28+00:00","content":"\n\n\nI essentially want to be able to embed a stream of myself (thru OBS) onto a personal website without relying on external services like YouTube, Kick, or Twitch.
\n\nI do not expect large audiences, but somehow integrating IRC chat would be great.
\n\nMight anyone point me in any direction I'd need to start to accomplish this?
\n⬆️ 185 points | 💬 58 comments
","metadata":{"score":185,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1sxqyh7","title":"It’s always DNS.","link":"https://www.reddit.com/r/selfhosted/comments/1sxqyh7/its_always_dns/","author":"warriorforGod","published_at":"2026-04-28T04:23:13+00:00","content":"\n\n\nWell having a proxmox server go down silently, then upon bringing it back up and having it spin up a second DNS server that had the same IP as your primary DNS server so that nothing works in terms of name resolution whether local or remote is a sobering experience.
\n\nYou should try it sometime. Lmao.
\n\nEdit: Autocorrect fixing.
\n⬆️ 148 points | 💬 46 comments
","metadata":{"score":160,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1swsb7o","title":"Glance Dashboard V.2 | GA","link":"https://www.reddit.com/r/selfhosted/comments/1swsb7o/glance_dashboard_v2_ga/","author":"ginesjunior11","published_at":"2026-04-27T03:36:19+00:00","content":"\n\nhttps://www.reddit.com/gallery/1swsb7o
\n\n\nAfter a lot of trial & error (and a few docker restart moments 😅), I finally got my dashboard where I want it:
All running on a Raspberry Pi 5 with a clean and optimized Docker stack.
\n\nStill a work in progress (because let’s be honest… a homelab is never “finished”), but it’s already my daily control center.
\n\nWhat would you add next? Any ideas for the next upgrade?
\n⬆️ 333 points | 💬 37 comments
","metadata":{"score":1524,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1swkj5a","title":"It’s a mess, but it’s my mess.","link":"https://www.reddit.com/r/selfhosted/comments/1swkj5a/its_a_mess_but_its_my_mess/","author":"New-Raspberry3572","published_at":"2026-04-26T21:42:59+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/e4/e4e76e237b80ffd82ecbffc58d9f269d4e7ea7cbd85dc83fca9fc2852765b0de.jpg\")
Finally moved my Pi 3+ off the desk and mounted it (with hopes and dreams) next to my ISP's WiFi 6 router. I know the cables are a crime scene, but everything is working 24/7 so I’m afraid to touch it lol.
\n\nRunning a pretty packed stack for a Pi 3+:
\n\n⬆️ 199 points | 💬 43 comments
","metadata":{"score":257,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1svz9fi","title":"My self-hosted website ran on my Pi Zero 2W","link":"https://www.reddit.com/r/selfhosted/comments/1svz9fi/my_selfhosted_website_ran_on_my_pi_zero_2w/","author":"mads_5489","published_at":"2026-04-26T06:00:55+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/67/678baf07a849739bf087dd505d71551d91d4ed7b9e76691b009b07e5a22b5106.jpg\")
So I have been working on my personal portfolio website for some time now, I had since forgot about it and had no motivation to expand it. I have been looking for the perfect usecase for my Pi Zero 2W, after moving my Pi-hole server from it onto my new Pi 5.
\n\nI then saw this post: https://www.reddit.com/r/selfhosted/comments/1sqvujn/selfhosted_public_website_running_on_a_10_esp32/
\n\nAnd it honestly got me excited to update my site, and move everything over the Pi. It is certainly much easier to run my site, from a measly 512KB of ram to just about 512MB.
\n\nThe site is finally in a state where I feel comfortable sharing it, and I hope you guys like the aesthetic. There is a guestbook to sign as well :)
\n\nSite:
\nhttps://spellbound.sh
⬆️ 220 points | 💬 19 comments
","metadata":{"score":410,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1svxsx1","title":"MinIO repository was archived on Apr 25, 2026","link":"https://www.reddit.com/r/selfhosted/comments/1svxsx1/minio_repository_was_archived_on_apr_25_2026/","author":"Kitchen-Patience8176","published_at":"2026-04-26T04:43:43+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/4d/4d70c0de1e8217986c645dcfb10dac7a67de76949d1a8232ca18f1330cf09f5c.png\")
Just learned about S3-style object storage and was looking into self-hosted options for my homelab. Came across MinIO and got pretty excited because it seemed like exactly the kind of thing I’d want to learn and maybe use.
\n\nThen I noticed the repo is archived, which was a bit discouraging.
\n\nI know that doesn’t necessarily mean the software is dead, but it made me pause before building around it.
\n\nFor those using MinIO, would you still adopt it today for a homelab? Or would you look at alternatives instead?
\n\nCurious what people here are doing.
\n⬆️ 310 points | 💬 62 comments
","metadata":{"score":582,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1svq0y0","title":"PSA: if you’re running iSponsorblockTV you’ll need to pair your devices again","link":"https://www.reddit.com/r/selfhosted/comments/1svq0y0/psa_if_youre_running_isponsorblocktv_youll_need/","author":"dmunozv04","published_at":"2026-04-25T22:31:58+00:00","content":"\n\n\nHi there, I’m iSponsorblockTV’s maintainer.
\n\nIf you’re running iSponsorblockTV, you’ll need to pair your devices again since YouTube have changed the screenId format and are on the process of revoking all older codes.
\n\nFor those of you that don’t know, iSponsorblockTV allows you to use SponsorBlock on all YouTube TV devices (TVs, sticks and consoles). It can also click the skip button for you and mute native YouTube ads.
\n\nSadly there’s nothing that can be done on my part other than pairing devices again.
\n\nEDIT: the new screen id will be 64 hex digits long, compared to the old 26 characters
\n⬆️ 197 points | 💬 18 comments
","metadata":{"score":360,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1svh7km","title":"Responsibility and Ownership: You Can’t Vibe‑Code Your Way Around It","link":"https://www.reddit.com/r/selfhosted/comments/1svh7km/responsibility_and_ownership_you_cant_vibecode/","author":"SigsOp","published_at":"2026-04-25T16:46:38+00:00","content":"\n\n\nThe title took me a while to land on, but the thoughts behind it have been sitting in my head for months. I've been into homelabing since early 2020 with my first build, then a second, then a third, then whatever my bank account allowed after that. It's been a lot of fun and tears. But lately browsing this community has had a edge to it, a lot of AI negativity that I mostly understand, and that's what I want to write about.
\n\nI'm a programmer by trade, actually army before, but released and went back to school. The usage of AI at work has increased and I don't see that trend stopping quite yet, AI is useful as a companion to handle tedious tasks like documentation, reviewing SQL, tedious front-end markup, one shot scripts etc.. But using it to one-shot a whole application is risky and if published downright irresponsible and this is where I think most of the friction is happening, at least for me.
\n\nWhen I see the AI projects posted here, with my experience, I think I can separate the wholly vibe coded ones from those that AI was used to assist, the latter I don't mind, despite what some Luddites say, that's what the industry is like now. When you code something for your own use, the blast radius is limited, thing could run horribly and it won't matter, you are the only one that suffers the consequences, but if you publish this code you need to take ownership of it and ownership brings responsibilities that you need to shoulder. Even as a programmer I don't take this lightly, this is not something people should dismiss with the command git push origin main.
It's one of the reasons I don't publish my stuff, or at the very least don't advertise it, not because it's vibe coded, it isn't, it's because I still need to take responsibility for it, that's time, effort and commitment that shouldn't be underestimated (many seems to). Maintenance is not a trivial affair, thinking about current and future users, how you approach breaking changes, how you architect things to avoid breaking changes as much as possible. Continuity of the project is also important, if you take your project seriously and your user base seriously you should have this in mind : \"What if I can't continue the project?\", archiving the repo and disappearing is not the right way to do things.
\n\nSo, before publishing and parading your project, you just need to ask yourself a simple question : \"Can I take ownership and responsibility for this code\". The answers will depend on your definitions of these concepts, but if you think about it for more than 5 minute, you might just realise your project should stay private.
\n\nPS: Here I am talking more about the moral/ethical implications when I talk about responsibilities and ownership, you are obviously responsible for what run in your machine. Excuse some awkward syntax or phrases, non native English speaker.
\n⬆️ 230 points | 💬 87 comments
","metadata":{"score":526,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1su3pp2","title":"Turned my broken Steam Deck into a low-power 2.5GbE NAS (Debian + rsync + Glances)","link":"https://www.reddit.com/r/selfhosted/comments/1su3pp2/turned_my_broken_steam_deck_into_a_lowpower_25gbe/","author":"Decker_Bazzite","published_at":"2026-04-24T03:05:25+00:00","content":"\n\nhttps://www.reddit.com/gallery/1su3pp2
\n\n\nMy Steam Deck LCD screen died, so I repurposed it as a headless Debian 12 NAS.
\n\nCurrent setup:
\n\n- Debian 12 minimal (no GUI)
\n\n- 2.5GbE USB NIC
\n\n- 6TB (main storage) + 4TB (backup)
\n\n- rsync-based incremental backups (~280MB/s)
\n\nI added a small sub display running Glances for real-time monitoring (CPU / RAM / network / processes).
\n\nThis lets me check system status instantly without SSH.
\n\nAlso integrated some controls via Stream Deck:
\n\n- One-button safe shutdown (sync + poweroff)
\n\n- HDD temperature check
\n\n- SSH access
\n\nThe NAS is not always-on.
\n\nI power it on only when needed (backups / file access).
\n\nSo far it's stable and surprisingly fast for a Steam Deck.
\n\nHappy to answer any questions 👍
\n⬆️ 213 points | 💬 59 comments
","metadata":{"score":660,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1stjtay","title":"Bitwarden CLI has been compromised. Check your stuff.","link":"https://www.reddit.com/r/selfhosted/comments/1stjtay/bitwarden_cli_has_been_compromised_check_your/","author":"RedTermSession","published_at":"2026-04-23T14:07:55+00:00","content":"\n\nhttps://socket.dev/blog/bitwarden-cli-compromised
\n\n\n\nSame as the title. The Bitwarden CLI has been compromised and it would be good to check your stuff. I know how popular Bitwarden is around here.
\n⬆️ 723 points | 💬 152 comments
","metadata":{"score":1478,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1st7c1x","title":"In which folder do you keep your Docker stack?","link":"https://www.reddit.com/r/selfhosted/comments/1st7c1x/in_which_folder_do_you_keep_your_docker_stack/","author":"Artistic_Quail650","published_at":"2026-04-23T03:32:33+00:00","content":"\n\n\nI keep my entire Docker stack in /opt/docker/ and all my external volumes in /mnt/hdd_1tb/{nextcloud, jellyfin, immich, etc.}
\n\nI'm curious to hear about other ways people store their files.
\n⬆️ 177 points | 💬 212 comments
","metadata":{"score":186,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1ss09kn","title":"Self-hosted personal finance automation: n8n + Actual Budget + SimpleFIN + Claude on my homelab.","link":"https://www.reddit.com/r/selfhosted/comments/1ss09kn/selfhosted_personal_finance_automation_n8n_actual/","author":"Hail_2_Victors","published_at":"2026-04-21T20:47:25+00:00","content":"\n\n\nSharing something I've been running for a few months that's become one of the most useful things on my homelab.
\n\nThe stack:
\n\nWhat it does:
\n\nSix n8n workflows that run on schedules and replace what I used to do manually every week:
\n\nArchitecture notes:
\n\nThe stack runs entirely on self-hosted n8n. No recurring SaaS costs beyond SimpleFIN (~$15/year) and Anthropic API calls (~$0.01/100 transactions). Everything else runs on your own infrastructure.
\n\n\n⬆️ 307 points | 💬 106 comments
","metadata":{"score":339,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1srtphr","title":"LubeLogger, Self-Hosted Vehicle Maintenance and Fuel Mileage Tracker, has some Important Quality of Life Improvements You Should Know About","link":"https://www.reddit.com/r/selfhosted/comments/1srtphr/lubelogger_selfhosted_vehicle_maintenance_and/","author":"ChiefAoki","published_at":"2026-04-21T16:59:42+00:00","content":"\n\n\nHi all, it's been a few months and we've made some incremental updates to LubeLogger over that time.
\n\nIn case you've never heard of LubeLogger, it's a self-hosted vehicle maintenance and fuel mileage tracker, you can log your service records and fillups in here and it will tell you exactly how much you've spent your vehicles.
\n\n\n\n\n\n\n\nFirst, as stated in our previous post here with the big UI update, we were going to start converting the grids in mobile views to cards, which makes it a lot easier to see all data without horizontal scrolling on small vertical screens, and that's finally delivered. If you prefer the older grid view in mobile, there is an option to revert in the Settings page.
\n\n\n\nSecond, there are now real-time notifications built within the app, if you follow us on the r/lubelogger subreddit, you might have heard of a daemon service that needed to be deployed separately, well that's no longer the case as we have integrated the daemon features into the LubeLogger app itself. Real-time notifications will allow you to immediately be notified when a reminder has its urgency changed to an urgency that you're tracking(i.e.: a reminder went from Not Urgent to Urgent), and it can be integrated with nearly every notification service out there as long as they take a HTTP POST request(there are samples for NTFY, Gotify, and Discord in the Documentation), if you don't wish to use an external notification service, it can also be configured to use the pre-existing SMTP settings.
\n\n\n\n\n\nAs part of this, there are also Automated Events that you can now configure, some examples of what you can do with Automated Events:
\n\nHere's what the automated backup email looks like:
\n\n\n\nThird, there is now a smoother way to onboard OIDC users with SSO-specific registration options
\n\n\n\nMisc. Improvements:
\n\nCSV's are now validated before any imports are performed, and it will tell you what went wrong/was formatted wrong:
\n\n\n\nYou can now add multiple recurring reminders to Plan Records and you can modify which reminders are tied to these plan records all the way up until the plan is marked as done
\n\n\n\nOn that note, there are now QR Codes that you can generate that can either take you to a specific record or to add a new record:
\n\n\n\nIf you want realtime events coming from LubeLogger but you don't want a webhook integration, you can now use web sockets which works on a pub-sub model.
\n\n\n\nAnyways, that's it from us for this update, have a great Summer and we'll see you in Fall.
\n⬆️ 339 points | 💬 47 comments
","metadata":{"score":397,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1srmjht","title":"Twenty v2.0: Self-hosted CRM","link":"https://www.reddit.com/r/selfhosted/comments/1srmjht/twenty_v20_selfhosted_crm/","author":"charlesBochet","published_at":"2026-04-21T12:43:03+00:00","content":"\n\n\nHi everyone,
\n\nWe're an open-source CRM (https://github.com/twentyhq/twenty). It's been a while since I last posted here, but today we're shipping our biggest update yet, so I wanted to give a heads-up.
\n\nTwenty 2.0 lets you build apps on top of the CRM without forking the codebase. The idea is a framework one level above web frameworks, tailored specifically for enterprise SaaS. Roughly Salesforce's original idea from 20 years ago, but built from a clean slate in 2026, and self-hostable.
\n\nIn practice: you can build (or ask Claude Code) a call recording feature or anything you'd like, using an SDK. It creates custom objects, React components, server-side logic. Your code but get everything Twenty already ships: permissions, dashboards, workflows, API, AI chat, webhooks, audit logs. That way, you can ship quickly on top of the engine and still keep version control, CI/CD, and so on.
\n\nOn the technical side, building extensibility into an enterprise app surfaced interesting problems:
\n\nHappy to answer any questions and would love to hear your feedback!
\n\nCharles (CTO)
\n\nAll the code is available here on Github
\n⬆️ 152 points | 💬 60 comments
","metadata":{"score":152,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1sqvujn","title":"Self-hosted public website running on a $10 ESP32 on my wall","link":"https://www.reddit.com/r/selfhosted/comments/1sqvujn/selfhosted_public_website_running_on_a_10_esp32/","author":"Techtoshi","published_at":"2026-04-20T17:19:17+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/54/544976dea98930eea084b0cb51139de1d176355b8b22b5dcc5d469c4f435bf30.jpg\")
My homelab does have the usual rack of stuff (Dell Poweredge R730s and ECU servers), but this one ESP32 sits separately on the wall and serves a public website entirely by itself. No nginx or apache, no Pi, no container... just a $10 microcontroller holding an outbound WebSocket to a Cloudflare Worker that fronts the traffic.
\n\nThe original launch of this back in 2022 ran for ~500 days before the original board burned out in 2023. The site sat as a read-only archive until now. I relaunched it after rebuilding it from the ground up with a lot of redundancy in mind such as a Worker relay, daily off-site backups to R2, and more, check out the project's README.
\n\nSite: https://helloesp.com
\n\nCode: https://github.com/Tech1k/helloesp
\n\n---
\n\nUpdate: So slight miscalculation on how popular this was going to get, this was a good stress test of the ESP to say the least. The hug of death hit way harder than I anticipated lol
\n\nI believe the ESP32 has fully crashed or it's exhausting heap in a loop. It's not even showing up on my router now. The Cloudflare Worker is still serving the offline page in the meantime which is expected. Probably not the best idea to have made this post while I was at work and away from it. I will reboot and investigate this when I'm home and make adequate changes to get it back online and stable!
\n\nUpdate to the update: it has risen from the cold grasp of offline darkness and reconnected as the WiFi watchdog kicked in and rebooted it automatically. Requests are getting served again and I managed to regain access to it on LAN. Cloudflare is back to showing timeouts for some while others get through (expected behavior). I may lower the SSE cap and raise the min heap threshold. It's back to just getting overloaded at the moment. I will investigate further and see what I can make changes on later to help keep it afloat and serve more requests on 520KB of ram lol
\n⬆️ 467 points | 💬 35 comments
","metadata":{"score":3274,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1sqi04i","title":"Beyond the Basics: What are your non-negotiable Linux server hardening steps before exposing a service to the web?","link":"https://www.reddit.com/r/selfhosted/comments/1sqi04i/beyond_the_basics_what_are_your_nonnegotiable/","author":"Browndude345","published_at":"2026-04-20T07:09:10+00:00","content":"\n\n\nMost of us start by slapping a reverse proxy (like Nginx Proxy Manager or Traefik) and maybe Tailscale or Wireguard on our setups. But for those of you exposing specific services directly to the web, how far do you take your server hardening?
\n\nI usually stick to a strict baseline (Fail2Ban/Crowdsec, UFW, disabling root SSH, key-only auth, and isolating apps in Docker containers), but I’m curious about the more advanced layers. Are any of you actively running SOC-level monitoring, Wazuh, or strict SELinux/AppArmor profiles on your homelabs?
\n\nWhat is the one security measure you think the average self-hoster overlooks until it's too late?
\n⬆️ 364 points | 💬 187 comments
","metadata":{"score":446,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1sq2xkt","title":"My retired gaming-rig became a mediaserver","link":"https://www.reddit.com/r/selfhosted/comments/1sq2xkt/my_retired_gamingrig_became_a_mediaserver/","author":"Drummerrob666","published_at":"2026-04-19T19:42:33+00:00","content":"\n\n![\"image\"](\"https://rssglue.subdavis.com/media/5d/5d34899fe1237f9074646029fbb8f6ecee7cbdb8a6b1cc342f6b31bec63fbeb5.jpg\")
I just wanted to share my two weeks of progress and configuration that I am quite happy about.
\n\nIt all started with installing Jellyfin on a outdated machine with Windows 10 to be able to play music and movies from my own collection.
\n\nTwo weeks later the same computer is now running Proxmox VE with a single VM that is running an arr-stack.
\n\nI also took ownership of all my 40K of photos and videos through Immich and said goodbye to Apple and Google.
\n\nThe picture shows the whole setup and I just wanted to share this because I had so much fun setting this up and wanted to take the opportunity to say thank you for this subreddit, it’s been an inspiration!🙏
\n\n**EDIT** I just tried starting up a brand new VM to test my Immich-backup and it worked flawlessly. Database and photos intact and the full 38K of photos with correct metadata was read from my backup. Happy guy!
\n⬆️ 253 points | 💬 97 comments
","metadata":{"score":254,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1sps0gj","title":"Reitti v4.0.2: A New Map Experience and Update Progress","link":"https://www.reddit.com/r/selfhosted/comments/1sps0gj/reitti_v402_a_new_map_experience_and_update/","author":"_daniel_graf_","published_at":"2026-04-19T12:45:37+00:00","content":"\n\nhttps://www.reddit.com/gallery/1sps0gj
\n\n\nHey everyone, I’m Daniel.
\n\nIt's been 103 days since I last posted about Reitti, and what a journey it's been! What started as a personal project on June 5, 2025, has grown immensely. In that time, Reitti has seen exactly 52 releases, culminating last week in the biggest and most ambitious update yet: Reitti 4.0! Today, I want to recap everything that's happened since my last post.
\n\nThe past few months have been dedicated to transforming how I interact with my movement data, and the community's support has been incredible:
\n\n\"Reitti\" is Finnish for \"route\" or \"path.\" It’s a personal location tracking and analysis application. It is fully local and private, and no data ever leaves your server. You own the database, and you own the memories.
\n\nThis release focuses on taking your map experience to the next level. I've completely rebuilt the map from the ground up, switching to a foundation powered by MapLibre GL JS and deck.gl. This enables a new level of visualization for your movements, even with millions of data points from years of tracking, it remains blazingly fast and responsive!
\n\nThanks to the incredible dedication of the community translators, Reitti has expanded its global reach and now officially supports more languages, including:
\n\nThese additions are a huge step towards making Reitti accessible to even more users worldwide.
\n\nWhen editing a place, you can now directly request geocoding suggestions and select the most accurate result from various available providers. This makes managing your locations much more intuitive and precise.
\n\nI've completely overhauled the algorithms for detecting visits and trips. The new system is not only significantly faster but also much more robust, leading to more accurate and reliable insights into your time spent and journeys taken.
\n\nAs part of this update, I'm introducing two new, free-to-use services that power Reitti 4.0 and are available for everyone:
\n\nWhile Reitti 4.0 added new features, there are a couple of crucial changes you need to be aware of for a smooth upgrade:
\n\n![https://preview.redd.it/13txlwifkkwg1.png?width=800&format=png&auto=webp&s=74c3eae6a1750460529764ff9fa047c0ceeab0b7](\"https://preview.redd.it/13txlwifkkwg1.png?width=800&format=png&auto=webp&s=74c3eae6a1750460529764ff9fa047c0ceeab0b7\"){kind=link}
![https://preview.redd.it/q4mgykzzmkwg1.png?width=1363&format=png&auto=webp&s=1175e815a0ff23837cf3ed7192087fcb83c6c39c](\"https://preview.redd.it/q4mgykzzmkwg1.png?width=1363&format=png&auto=webp&s=1175e815a0ff23837cf3ed7192087fcb83c6c39c\"){kind=link}
![https://preview.redd.it/k0okuk9unkwg1.png?width=525&format=png&auto=webp&s=ef159f8174acd22b83a9f1814127d2d16c0a5ae3](\"https://preview.redd.it/k0okuk9unkwg1.png?width=525&format=png&auto=webp&s=ef159f8174acd22b83a9f1814127d2d16c0a5ae3\"){kind=link}
![https://preview.redd.it/04ptjed3okwg1.png?width=421&format=png&auto=webp&s=6e521ee9c1226a22f44ee2426b25c59ffea8b378](\"https://preview.redd.it/04ptjed3okwg1.png?width=421&format=png&auto=webp&s=6e521ee9c1226a22f44ee2426b25c59ffea8b378\"){kind=link}
rabbitmq has been fully removed. This simplifies the stack and reduces dependencies.photon has been removed from the default docker-compose file. While it's still supported if you wish to use it, it's no longer a default component thanks to my new open-source geocoding service!It is absolutely essential that you update your docker-compose file during the upgrade process. Please visit https://www.dedicatedcode.com/projects/reitti/4.0/upgrade/ for the necessary steps to get your Reitti instance running seamlessly on 4.0.
Full v4.0.0 Release Notes: https://github.com/dedicatedcode/reitti/releases/tag/v4.0.0
\n\nThis project thrives because of its community. Thank you to everyone who contributed this year. To the new contributors like u/Jonsen94, u/GunseiKPaseri, u/sieren, u/wjansenw, u/subha0319, and u/per_terra your code, ideas, and dedication are invaluable. Special thanks go to the translators who ensure Reitti is accessible worldwide, and to everyone who posts issues, suggests features, and supports the project indirectly.
\n\nThanks to the incredible support from my Ko-fi supporters, I've recently acquired a dedicated GPS logger! This means I'm now setting my sights on bringing multi-device support to Reitti. Imagine this: you use your phone for day-to-day tracking, while simultaneously logging a run or ride with another device, leaving your phone at home. My goal is to seamlessly bring these timelines back together into one cohesive view. Along with this, I'll be introducing more powerful editing capabilities, such as defining \"no-visit\" areas and the ability to remove individual GPS points.
\n\nFor the Memories feature I explored local AI for natural-language travel diaries, it's still very much on my mind. However, I haven't yet managed to get decent results with a small, local LLM that supports multiple languages. Time will tell if this ever happens, as I only want to introduce massive new requirements when they can deliver a truly tremendous impact for all of you. If anyone has a tip, please drop me a message.
\n\nI use AI as a development tool to accelerate certain aspects of the coding process, but all code is carefully reviewed, tested, and intentionally designed. AI helps with boilerplate generation and problem-solving, but the architecture, logic, and quality standards remain entirely human-driven.
\n\nI appreciate your feedback and support! Here are a few ways to connect:
\n\n#reitti on libera.chat.I'll be in the comments to answer your questions.
\n⬆️ 284 points | 💬 49 comments
","metadata":{"score":295,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1sp1bvz","title":"n8n dropped every webhook at 3am for two weeks and I only noticed because a client asked where his invoice was","link":"https://www.reddit.com/r/selfhosted/comments/1sp1bvz/n8n_dropped_every_webhook_at_3am_for_two_weeks/","author":"Ambitious-Garbage-73","published_at":"2026-04-18T15:54:04+00:00","content":"\n\n\nSo this is either useful or embarrassing depending on who's reading, probably both.
\n\nRunning n8n on a mini PC under my desk (NUC clone, 16GB, Debian 12, docker compose). Been up around 8 months, mostly boring. A couple weeks ago I noticed the invoice-reminder flow had silently stopped firing on a few contacts. Poked it for ten minutes, blamed a flaky SMTP relay I'd swapped the week before, moved on.
\n\nYesterday a client DMs me basically asking if I'd ghosted him because he hadn't heard anything since late March. I open the executions tab and there's this neat little gap every single night between roughly 02:50 and 03:30 where literally nothing ran. Fourteen nights of it. The dashboard I never close had been showing a green checkmark the whole time because whatever executions happened outside the gap worked fine.
\n\nThe actual bug, for the record: logrotate. The postrotate hook was doing docker kill -s HUP on the n8n container to make it reopen log files. n8n apparently does not take SIGHUP well and just dies. The restart policy brought it back, but only after the rest of logrotate finished whatever else it was rotating, which is why the gap drifted a little each night. Fix was switching to copytruncate, ugly but it works.
the thing I actually can't get over is that uptime-kuma was green for all fourteen days. container up. HTTP port open. /healthz returning 200. every layer of my \"monitoring\" was technically correct and also completely lying about whether the thing n8n exists to do was happening. I'd built a setup that told me what I asked instead of what I needed to know.
\n\nso I'm looking at bolting on a synthetic check that actually fires a test webhook into one flow and asserts on the expected execution ID in the DB a few seconds later. feels like something that should already exist as a Docker sidecar or whatever but I haven't found it. anyone here doing real end-to-end synthetic monitoring on self-hosted workflow stuff, or am I about to spend a Saturday writing something mediocre?
\n\n(also yes I know about Healthchecks.io, I use it for cron, but for a webhook->DB assertion I'd need something slightly more)
\n⬆️ 210 points | 💬 43 comments
","metadata":{"score":213,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1sockr8","title":"My lab domain got added to a DNS blocklist and broke my whole setup.","link":"https://www.reddit.com/r/selfhosted/comments/1sockr8/my_lab_domain_got_added_to_a_dns_blocklist_and/","author":"FanClubof5","published_at":"2026-04-17T20:27:02+00:00","content":"\n\n\nI setup the hagezi ultimate adblock list in pihole a few months ago and didnt think much of it after that. Today I am chilling and trying to avoid working too much on a Friday afternoon when I get an alert from uptime kuma that my nginx-proxy-manager stopped responding.
\n\nI check the docker container first, everything is green and logs look fine, weird but lets restart it just to be sure. No change, hmmm well I can access the demo page at the direct IP so maybe its not this, lets check the DNS resolve.
\n\n > nslookup proxy.homelab.com\nServer: 10.0.1.66\nAddress: 10.0.1.66#53\n\nName: proxy.homelab.com\nAddress: 0.0.0.0\nName: proxy.homelab.com\nAddress: ::\nOdd that should be resolving to the 10.0.1.66 server not 0.0.0.0 I wonder what changed. I dig around in the Pihole logs for a bit and discover that my domain was actually added to the offical blacklist. I am not really sure how since my public footprint is minimal, gets virtually zero traffic except for some bots to the root domain, and definitely doesn't serve ads. Either way I was able too lookup the commands to white list my domain in Pihole and bam everything was back to normal.
\n\nJust some friday fun.
\n⬆️ 333 points | 💬 54 comments
","metadata":{"score":339,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}},{"id":"1soavp6","title":"Migrated a client off shared hosting to a VPS last week, the difference was embarrassing","link":"https://www.reddit.com/r/selfhosted/comments/1soavp6/migrated_a_client_off_shared_hosting_to_a_vps/","author":"Own_Addition_7619","published_at":"2026-04-17T19:24:44+00:00","content":"\n\n\nso i've been telling this client for 2 years their site was slow because of shared hosting
\nthey finally listened after a competitor started ranking above them on google
moved them to a KVM VPS, same wordpress stack, nothing else changed
\npage load went from 3.2 seconds to 0.9 seconds. that's it. that's the whole story
the amount of money they lost over 2 years because they didn't want to spend an extra 15€ a month is genuinely painful to think about
\n\nif your site is on shared hosting and you're wondering why it feels slow, it's that. it's always that
\n⬆️ 338 points | 💬 32 comments
","metadata":{"score":815,"source_feed_id":"r-selfhosted","source_feed_type":"reddit"}}]