Digest of r/selfhosted

by Redditors

Issue Tue, Jan 06 06:15 AM

Introducing Hypermind: A fully decentralized, P2P, high-availability solution to a problem that doesn't exist.

Just updated the image with a fix for the particles!!

Edit again: Thank you SO much everyone! this has been so incredibly dumb and fun. I can't believe we're about to hit 100k nodes 5 hours after me posting this. You're all very cool and i appreciate everyone that helped me fix it and made pull requests. cant wait til we hit 1 mill and i steal all your ram ♡

Hey everyone, so you just finished setting up the *Arr stack and your dashboards lookin crisp. But you look at your htop and see... unused RAM.

It’s disgusting, isn't it?

So I built Hypermind.

Hypermind is a completely decentralized, peer-to-peer deployment counter. It does exactly one thing: It solves the critical infrastructure challenge of knowing exactly how many other people are currently wasting 50MB of RAM running this specific container.

That’s it. That’s the whole app.

Despite being useless, the tech stack is actually kind of neat.

  • No Central Server: This runs on the Hyperswarm DHT (Distributed Hash Table).
  • P2P Discovery: Your node announces itself to the swarm and gossips with peers.
  • Ephemeral: If everyone turns off their container, the network dies. If one person turns it on, they are the Creator of the Universe.

How to join the Swarm

If you have extra RAM you hate, run this:

docker run -d \
  --name hypermind \
  --network host \
  --restart unless-stopped \
  -e PORT=3000 \
  ghcr.io/lklynet/hypermind:latest

Note: You must use --network host because P2P DHTs need to punch through NATs, and Docker networking hates fun.

Open http://localhost:3000. You'll see a realtime counter of active nodes with a physical representation via the particle system.

GitHub Repo: https://github.com/lklynet/hypermind

Let’s see how high we can get this number before my gf asks why the electric bill went up.

Remember that with Hypermind, you're never truly alone. ♡

By u/ponzi_gg ⬆️ 1619


Been rocking hompage and it just gets better over time.

This whole self hosting thing has dramatically changed how we do everything in our house.

Homepage is my default tab in Firefox and gives me a full overview of my systems at glance, as well as providing direct access to all my services. Have recently added a reference tab with quick links to the websites I use the most. The system information, tabs, and row of smaller links stays available in all sections. While it took a minute to get the configuration files figured out, it has become second nature and very easy to maintain.

If you are looking for a dashboard homepage is by far the most elegant solution.

Looking back a year you can see how far this dash has evolved by viewing my original post. This link gives you insight to how far it has come and is a great reference to the before and after in my homepage evolution. At the time I posted previously, I was quite surprised by the engagement it generated. Seems the learning curve for homepage can throw beginners off course. I'm always available to answer questions if I can.

By u/beatznbleepz ⬆️ 846


I just wanted to watch high-quality anime... but I accidentally spent 3 months rewriting Windows 95.

The spiral into madness:

So, I’m a Systems Engineer with a simple goal: watch my anime collection (stored on Shoko) without dealing with clunky web interfaces.

But instead of just clicking "play," my brain went: "What if I could search my Navidrome music, my TubeArchivist YouTube archives, and my offline Wikipedia (Kiwix) all in one place?".

And then the real damage happened: "What if that place looked exactly like my first PC from 1995?".

Meet Maamut95:

It’s not just a dashboard; it’s a web-based Media OS built with FastAPI and React. I’ve basically built a digital bunker to hide from the modern internet.

Why did I do this to myself?

  • Virtual Filesystem (mFS): I wrote a backend layer that mounts my self-hosted services as virtual drives. Opening /TubeArchivist feels like browsing a local folder of 32.Gün documentaries and Noclip videos.
  • mSH (Maamut Shell): Because I’m a terminal addict, I built a functional CLI. I can literally cd into my anime library and play a series from a prompt.
  • Outlook Express (RSS): I’m reading FreshRSS feeds in a pixel-perfect clone of a mail client from thirty years ago. The irony of reading "computers are bad" articles inside this thing is not lost on me.
  • The "Cortex" Engine: It’s a search orchestrator that suggests music while I'm reading a wiki. If I’m looking at a Commodore 64 page, it automatically finds the related YouTube archives.
  • Balloon Notifications: Linked it to NTFY so my desktop can sarcastically tell me when a download is finished.

The Tech Stack (The "How"):

  • Backend: FastAPI handles the heavy lifting, proxying all my different APIs (Navidrome, Immich, etc.) to bypass CORS and unify the data.
  • Frontend: React + react95 for that authentic "I miss my childhood" aesthetic.
  • Infrastructure: It lives in my "meridian-underground" datacenter (don't ask about the cable management).

Current Status: I still haven't finished that anime series, but I did spend six hours yesterday fixing a pixel-alignment issue on the start menu. 10/10 would over-engineer again.

-----------------------

Hey everyone.

I saw some skepticism in the comments, so I recorded a quick demo video to show this isn't just a mockup- it’s a fully functional system running in my homelab.

Watch the demo here: YouTube Link

Just to clear up the context:

  1. The "Why": My internet connection is absolute trash. Seriously. So, I decided to build my own "local internet." Big Hypnospace Outlaw vibes here. It’s not just for aesthetics; I needed a way to browse my media, read RSS feeds (via the Outlook Express UI), and access cached content without waiting for buffering.
  2. The "Vibe Coding" Part: I picked the flair for a reason. I'm a System Engineer, not a Frontend Developer. Coding isn't my main job. Yes, I used AI tools to bridge the gap. But this wasn't a magic "one-shot prompt." I had to architect the backend, figure out the file system logic, and spend hours debugging spaghetti code. It was a grind.
  3. Is it real?: 100%. The screenshots aren't AI art. It connects to my real services (Navidrome, etc.) and actually works as my daily driver.
  4. Source Code: Right now, the code lives in my local Gitea. To be honest, it's a mess. I need to do some serious cleaning before I'm brave enough to push it to GitHub.

P.S. English isn't my first language, so bear with me.

By u/Swalzoom ⬆️ 810


Complete: 5tb Portable Media Server

Features:

  • Pi 4 (2GB RAM), in a Geekworm NASPI-lite case. Modified to fit a larger 2.5" 5tb HDD, 20000mah battery and added power/status led button.
  • 5tb HDD, storing a mirrored/synced copy of my complete media library
  • Two wifi adapters:
    • A) Connecting as guest to wifi for local LAN/internet access
    • B) Providing hotspot for administration and streaming to local devices (ie offline playback)
  • HDMI output, for connecting directly to TVs and playing via Kodi (with Jellyfin plug-in). Repurposed Firestick remote control.
  • Tailscale so it automatically syncs from the remote master library whenever it's online

Weight: 2lbs. Running time: 10 hours, streaming 4k video Cost: $170

-------
Fyi: This replaces WD My Passport Wireless Pro 2TB, which had most of the same features.

The Passport:

  • only 1.4 lbs
  • 2tb drive
  • Running a limited Debian Linux repo (last firmware update 2019
  • No fileshare access controls, anyone on the wifi/LAN has write access
  • No HDMI/local playback
  • Plex only (No Jellyfin) meaning flakey local only playback via smb

I was able to get rsync and Tailscale installed, so it does do auto library syncing whenever I'm online

Keeping the Passport for some grab and go uses.

By u/LowerH8r ⬆️ 809


qbitwebui - modern qBittorrent frontend

UPDATE:

  • Thanks for the feedback. Added filtering by tracker or category.
  • Removed modal (click to view details). Now the details view is more similar to the original webui - collapsible panel with all info.

I think we can all agree that qBittorrent webui is a bit outdated. Since I like to look at my torrents stats often, I wanted something simple that looks more modern.

Honestly, not much to explain, it's just a very lightweight frontend for qBittorrent, built with Vite.

Features:

  • Real-time torrent monitoring with auto-refresh
  • Add torrents via magnet links or .torrent files
  • Detailed torrent view with file priority control, trackers, peers
  • Filter by status, category, tag, or tracker
  • Sortable columns, keyboard navigation
  • Context menu, multi-select, bulk actions
  • Tag/category management, configurable ratio thresholds
  • Multiple themes, update notifications
  • Uses qBittorrent REST API directly, login with your already existing credentials

I'd be happy to hear any feedback or feature requests, if anyone wants to try it out!

Github: https://github.com/Maciejonos/qbitwebui

Docker compose:

services:
  qbitwebui:
    image: ghcr.io/maciejonos/qbitwebui:latest
    ports:
      - "8080:80"
    environment:
      - QBITTORRENT_URL=http://localhost:8080
    restart: unless-stopped

By u/blaznos ⬆️ 735


Termix v1.10.0 - Self-hosted server management platform (alternative to Termius) with SSH terminal, tunneling, and file editing capabilities, now with Docker management and RBAC support!

GitHub

Discord

Hello!

If you didn't already know: Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a multi-platform solution for managing your servers and infrastructure through a single, intuitive interface. Termix offers SSH terminal access, SSH tunneling capabilities, remote file management, and many other tools. Termix is the perfect free and self-hosted alternative to Termius available for all platforms (desktop and mobile builds included).

Last night, v1.10.0 was finally released for Termix! It added many new features, including Docker support and an RBAC/host sharing system! View the full update log here.

The Docker system allows you to manage containers (start, stop, remove, pause, etc.) along with viewing their stats, logs, and executing commands with a terminal. It does NOT allow you, however, to create containers since that was not the original goal. It's not meant to replace Portainer/Dockge; it's simply to manage them in the same tool you use to SSH.

The RBAC system allows administrators to create and assign roles, while users can then share hosts with other users or within other roles.

Here is a full list of all available Termix features:

  • SSH Terminal Access – Full-featured terminal with split-screen support (up to 4 panels) with a browser-like tab system. Includes support for customizing the terminal, including common terminal themes, fonts, and other components
  • SSH Tunnel Management – Create and manage SSH tunnels with automatic reconnection and health monitoring
  • Remote File Manager – Manage files directly on remote servers with support for viewing and editing code, images, audio, and video. Upload, download, rename, delete, and move files seamlessly
  • Docker Management – Start, stop, pause, and remove containers. View container stats. Control the container using Docker exec terminal. It was not made to replace Portainer or Dockge but rather to simply manage your containers compared to creating them.
  • SSH Host Manager – Save, organize, and manage your SSH connections with tags and folders, and easily save reusable login info while being able to automate the deployment of SSH keys
  • Server Stats – View CPU, memory, and disk usage along with network, uptime, and system information on any SSH server
  • Dashboard – View server information at a glance on your dashboard
  • RBAC – Create roles and share hosts across users/roles
  • User Authentication – Secure user management with admin controls and OIDC and 2FA (TOTP) support. View active user sessions across all platforms and revoke permissions. Link your OIDC/Local accounts together.
  • Data Export/Import – Export and import SSH hosts, credentials, and file manager data
  • Automatic SSL Setup – Built-in SSL certificate generation and management with HTTPS redirects
  • Modern UI – Clean desktop/mobile-friendly interface built with React, Tailwind CSS, and Shadcn. Choose between dark and light mode based UI.
  • Languages – Built-in support ~30 languages (bulk translated via Google Translate, results may vary ofc)
  • Platform Support – Available as a web app, desktop application (Windows, Linux, and macOS), and dedicated mobile/tablet app for iOS and Android.
  • SSH Tools – Create reusable command snippets that execute with a single click. Run one command simultaneously across multiple open terminals.
  • Command History – Auto-complete and view previously run SSH commands
  • Command Palette – Double-tap left shift to quickly access SSH connections with your keyboard
  • SSH Feature Rich – Supports jump hosts, warpgate, TOTP-based connections, SOCKS5, password autofill, etc.

v2.0.0 will be released in about a month, which will feature RDP, VNC, and Telnet support!

I'll see you then,

Luke

By u/VizeKarma ⬆️ 647


My Homelab: One Year Later

Last year I shared my lab infrastructure, so I figured I’d post an update on how it has evolved since then.

It’s still a bit of a mess (probably always will be 😅), but I’m learning a lot along the way.

Over time, I’ve moved most of my services to Docker and added another NAS for extra storage.

Looking ahead to 2026, I’m planning to migrate everything to Kubernetes to finally get high availability in place.

I also want to deploy Wazuh using Docker — which, honestly, has been more painful than I expected.

Not perfect, but that’s kind of the point of a homelab.

By u/AlexTryHarder ⬆️ 641


The icing on the cake of selfhosting for me was music, and I must say it is perfect!

This is just an appreciation post for the whole community developping all these amazing services. It's been roughly one month that I decided to start selfhosting and it's been so fun. I'm no layperson when it comes to this, since I'm an embedded programmer, but getting on the process of learning new tools that perfectly cover your needs is so cool.

The last thing I wanted to do was hosting a music server and finding good open source apps to go with it. Having all those hi-res flacs ready to be played wherever I go is perfect. So here's my recommendation for anyone interested:

Navidrome for the server, Feishin for the desktop (Linux) app and Tempus for the Android app.

Cheers!

By u/hbacelar8 ⬆️ 627



Issue Tue, Dec 30 06:15 AM

Home lab went from fun project to unpaid oncall job

Started selfhosting 2 years ago with the usual stuff. Pihole, plex, some docker containers, it was genuinely fun learning how everything worked. Then my family started using these services. My wife relies on the password manager daily and kids stream from plex constantly. Suddenly it's not my hobby anymore, people now depend on it

Now when something breaks at 11pm it's "dad the internet isn't working" because pihole crashed. Or my wife's locked out of her accounts because the password thing stopped responding. I spent last weekend fixing stuff instead of relaxing because I realized one hard drive failure would destroy everything.

Still glad I selfhost instead of paying for cloud services but nobody warned me that once other people depend on your setup, it stops being fun and becomes real work. Now I understand why sysadmins drink.

By u/CoffeeRory14 ⬆️ 1627


After ~2 months of learning, my self-hosted setup is “done (for now)” – what should I host next?

After around 2 months of trial, error, and learning, I finally have a stable self-hosted setup that I’m happy with (for now).

Stack: • OpenMediaVault 7 • Docker / Portainer • Homarr as the main dashboard

Services: • Jellyfin • Immich • Home Assistant • AdGuard Home • Sonarr / Radarr / Prowlarr • Uptime Kuma

The goal was simple, reliable, and low-maintenance, and it’s been rock solid so far.

I’m still a beginner with self-hosting, so I’m sure there’s a lot more to explore.

Bonus: it’s quiet, doesn’t look like a server rack, and is officially wife-approved 😄

What would you recommend hosting next?

By u/Mean_Trick_2791 ⬆️ 1481


How have I only just discovered nylon labels?!

These things are brilliant for sticking to cables. Found a £8 cartridge for my old Dymo D1 label maker.

By u/hometechgeek ⬆️ 991


I built a modern, self-hosted web IPTV player (Live TV, EPG, VOD) because existing ones felt clunky. Meet NodeCast TV.

Hey everyone! 👋

I wanted a clean, fast, and modern web interface for my IPTV service that I could host myself. Most existing players I tried were either clunky, outdated, closed-source, or just didn't handle large playlists with thousands of channels very well.

So I built NodeCast TV.

📺 What is it? A self-hosted web application that lets you stream Live TV, Movies, and Series from your Xtream Codes or M3U provider directly in your browser. It's built with performance in mind and handles large libraries smoothly.

✨ Key Features:

  • Live TV & EPG: Full grid-style TV guide with 24h timeline, category filtering, and search.
  • VOD Support: Dedicated sections for Movies and TV Series (complete with season/episode browsing).
  • High Performance: Uses virtual scrolling technology to render lists with 7000+ items without lagging your browser.
  • Favorites System: Unified favorites list across all content types.
  • Universal Player: Built on HLS.js for robust playback support.
  • Docker Ready: Easy to deploy on your home server or NAS.

🚀 Tech Stack:

  • Backend: Node.js + Express (Lightweight proxying)
  • Frontend: Vanilla JavaScript (No heavy frameworks) + CSS3
  • License: Open Source (GPL-3.0)

🔗 Links:

I'd love to hear your feedback, feature requests, or bug reports! Let me know what you think.

By u/NeonXI ⬆️ 929


"Ninite" for Linux? THE MISSING BULK APP INSTALLER FOR LINUX

It’s a web-based tool that generates a single copy-paste command or a distro-specific shell script to bulk-install your entire setup.

Why use it:

  • Native Support: Ubuntu/Debian, Arch (including AUR via yay), Fedora, openSUSE, NixOS, Flatpak, and Snap.
  • Universal: Integrated Flatpak and Snap support.
  • Smart Scripts: Includes network retries, progress bars, and ETA - not just a list of names.
  • Fast UI: 150+ apps in 15 categories, fully navigable via Vim keys (hjkl).
  • Open Source: GPL-3.0.

Live: tuxmate.abusov.com

GitHub: github.com/abusoww/tuxmate

P.S. I know the URL is a bit clunky right now. Buying a proper domain name is next on my list!

By u/N1C4T ⬆️ 912


I _also_ built a modern, self-hosted web IPTV player .... because I didn't know the other guy already did.

Well, I was excited to announce my IPTV player but it looks like https://www.reddit.com/r/selfhosted/comments/1pxb8il/i_built_a_modern_selfhosted_web_iptv_player_live/ beat me to it. :)

Anyway, here's my take on it. https://github.com/jvdillon/netv

Edit1: I've come to learn that at least one major difference is mine does transcoding at the server. This is essential for many/most IPTV streams which have audio and/or video encodings which are not currently supported by chrome nor likely ever. As far as I know all standard audio/video codecs will work. Additionally I spent significant effort on getting CC working and Chromecast (though these are admittedly unsexy things). Finally there's a few gems in tools, especially tvguide scraping and custom building ffmpeg. (Which I tested on: TitanX, 3090, 5090. I have a lot of GPUs...)

Edit2: To my surprise, there's been a lot of discussion about who coded this. I'm not sure why it matters but: Yes, I coded most of this project myself "by hand" except for: unit-tests, README, and some of the setup scripts. In fact, some of the code Im sharing has been a WIP of mine for literal years, going back to my MythTV days. (The zap2xml and xtream2m3u are the geological oldest and ultimately led me to just doing the whole shebang. xtream2m3u exists to make Emby work and zap2xml exists for HDHomeRun.) Feel free to study the code for yourself and pass your own judgement--or even better: make a PR to make it better. :)

By u/Legal-Pop-1330 ⬆️ 602


I built a TUI client for WhatsApp

I've been working on WAHA TUI - a Terminal User Interface for WhatsApp that lets you manage your chats directly from your terminal.

What is it?

WAHA TUI is a WhatsApp client that runs in your terminal, powered by WAHA (WhatsApp HTTP API). It's built with TypeScript, runs on Bun, and uses OpenTUI for the beautiful terminal interface.

Features

  • Session Management - Create and manage WhatsApp sessions with QR code login
  • Full Chat Interface - Browse chats with a WhatsApp-style layout and real-time updates
  • Messaging - Send and receive messages with read receipts
  • Beautiful UI - WhatsApp Web-inspired interface with colors and icons
  • Fast & Lightweight - Built with Bun for blazing-fast performance
  • Privacy-Focused - All configuration stored locally in ~/.waha-tui/
  • Real-time Updates - QR codes refresh automatically, typing indicators, and live status updates

You'll need a running WAHA server (self-hosted WhatsApp API) as the backend.

Why I built this

I spend most of my day in the terminal and wanted a way to quickly check and respond to WhatsApp messages without switching contexts.

GitHub: https://github.com/muhammedaksam/waha-tui

⚠️ Note: This is still a work in progress and in experimental development, so expect some rough edges!

Would love to hear your thoughts and feedback. PRs and issues are welcome! 🙌

By u/XanelaOW ⬆️ 556


BentoPDF's biggest update - 1.15.1

Hello folks, it's been a month since I last posted about an update. This update for BentoPDF is the biggest so far and introduces a lot of features.

But before that I wanted to share BentoPDF wrapped, which shows what tools and what type of PDFs you guys mostly used this year ❤️: BentoPDF Wrapped

New Releases

1. Revamped Compression tool

BentoPDF now has the best compression among all open source tools.

BentoPDF had two compression algos: Vector and Photon. Vector has been deprecated and replaced with Condense, which is now the recommended method.

I tested it across various type of PDFs with different languages, and it performs either almost on par and sometimes better than commercial ones.

2. Office to PDF and PDF to Office Support

Now supports converting Word, PowerPoint, Excel, CSV documents to PDF.

Added support for OpenOffice formats: ODT, ODS, ODP, and ODG

Also supports for: PDF to Word, PDF to Excel and PDF to CSV

3. Now supports a variety of image formats

JPG, PNG, BMP, GIF, TIFF, PNM, PGM, PBM, PPM, PAM, JXR, JPX, JP2 (JPEG 2000) PSD, SVG, HEIC, and WebP can now be converted to PDF

Also supports PDF to SVG

4. Markdown Support

A new markdown live preview has been added, which supports both GFM and Common Mark. Mermaid support was also supposed to be in this release, but I stashed the changes and forgot to include them lol. But it will be included in next release.

PDF to Markdown is also supported with embedded image

  1. E-book & Comic Book Formats

Added support for converting EPUB, MOBI, CBR, CBZ, FB2, and XPS files to PDF.

6. Data Extraction & AI Ready

Prepare for AI: Output LLM-ready JSON from your PDF for easy ingestion by AI models.

Extract Tables: Extract tables from PDF and export them as JSON, Markdown, or CSV.

PDF to Text: This performs fast text extraction for digital PDFs. FOr non digital OCR tool is recommended.

Extract Images: Extracts all images while retaining their original native format and resolution.

7. PDF/A SUpport
Supports PDF/A-1b,2b,3b. Please verify with verapdf always.

Miscellaneous Tools

---

Text to PDF now has proper support for RTL languages

We also added Booklet support

Rasteize PDF is now supported

Nested OCG support is included

Thank you again for your support! In the next release Digital Signature and true text editing will be possible.

Full Release Note: https://github.com/alam00000/bentopdf/releases/tag/v1.15.1

By u/paglaulta ⬆️ 477



Issue Tue, Dec 23 06:15 AM

I built Tracearr - account sharing detection and monitoring for Plex, Jellyfin, and Emby

I run a Plex server for family. But "family" turned into friends, then friends of friends, then some guy my cousin works with. I started wondering who was actually using my server and if accounts were getting passed around.

Other tools show you what happened. They don't tell you when something looks off. So I built Tracearr.

What it does

  • Session tracking - who watched what, when, from where, on what device
  • IP geolocation - city, region, country for every stream
  • Sharing detection - five rule types:
    • Impossible travel (NYC then London 30 min later)
    • Simultaneous locations (same account, two cities, same time)
    • Device velocity (way too many IPs in a short window)
    • Concurrent streams (set limits per user)
    • Geo restrictions (block countries)
  • Trust scores - users build or lose trust over time. Get alerts via Discord, ntfy, webhooks
  • Stream map - see where your streams are coming from on a map, live or historical
  • Multi-server - Plex, Jellyfin, Emby all in one place
  • Kill streams - terminate sessions from the UI
  • Import history - pull in your Tautulli or Jellystat data

What I've found on my own server

  • A "family member" who was streaming from Boston and Detroit on the same day
  • One account shared between at least 3 people in 2 different countries
  • Someone who hit 15 unique IPs in a single month

How it compares to Others

Same ideas as Tautulli and JellyStat - watch history, stats, session monitoring. Difference is Tracearr adds sharing detection rules on top. You can run both, they don't conflict.

Other tools do watch history and stats well. But they slow down quickly with years of data, and if you run multiple servers you need multiple instances.

Tech stack is Fastify + TimescaleDB. Uses continuous aggregates so queries stay fast even with years of history.

Privacy

100% self-hosted. No cloud, no telemetry, nothing phones home. Your data stays on your box.

Quick Start

All-in-one (includes Postgres + Redis)

Three Service Stack (Tracearr, TimescaleDB, Redis)

Not done yet

  • Automated stream kills via rules (manual only right now)
  • Email/Telegram (Discord and webhooks work)
  • Mobile app exists but still in beta (Testflight now available!)

Links

If anyone runs Jellyfin or Emby, I'd really like to know how it works for you. I've hammered on Plex but the other two need more real-world testing.

What other detection rules would be useful? Anything you wish other monitoring tools did that they don't do now?

Also, want to say a big thanks to the early adopters from the Discord community - Bramble, killerbyte1985, nzbnate, SuperKing, and WildWayz , coyuya, Jam, IamSpartacus and Zass - who've been finding bugs and suggesting features since day one. A lot of what's in there now came from their feedback.

Thank you for taking a look!

Gallapagos

By u/GallapagosIsland ⬆️ 1507


Who’s going to self host Spotify?

Looks like self hosting Spotify (99.6% of songs listened to) is only 300TB

By u/the_uke ⬆️ 1350


Fell victim to CVE-2025-66478

So today I was randomly looking through htop of my home server, when suddenly I saw:

sh ./hash -o auto.c3pool.org:13333 -u 45vWwParN9pJSmRVEd57jH5my5N7Py6Lsi3GqTg3wm8XReVLEietnSLWUSXayo5LdAW2objP4ubjiWTM7vk4JiYm4j3Aozd -p miner_1766113254 --randomx-1gb-pages --cpu-priority=0 --cpu-max-threads-hint=95

aaaaaaand it was fu*king running as root. My heart nearly stopped.

Upon further inspection, it turned out this crypto mining program is in a container, which hosts a web ui for one of my services. (Edit: hosted for my friends and families, and using vpn is not a viable way since getting them to use the vpn requires too much effort)

Guess what? It was using next.js. I immediately thought of CVE-2025-66478 about 2 weeks ago, and it was exactly that issue.

There's still hope for my host machine since:

  • the container is not privileged
  • docker.sock is not mounted onto it
  • the only things mounted onto it are some source codes modified by myself, and they are untouched on the host machine. (shown by git status)

So theoretically it's hard for this thing to escape out of the container. My host machine seems to be clean after close examinations led by myself and claude 4.5 opus. Though it may need to be observed further.

Lesson learned?

  • I will not f*cking expose any of my services to the internet directly again. I will put an nginx SSL cert requirement on every one of them. (Edit: I mean ssl_client_certificate and ssl_verify_client on here, and thanks to your comments, I now learn this thing has a name called mTLS.)
  • Maybe using a WAF is a good idea.

By u/Unhappy-Tangelo5790 ⬆️ 1277


Recommend me more "useful", nice looking, lightweight things to selfhost? :)

Looking for more things to discover. Looks like this is indeed addicting...

By u/hbacelar8 ⬆️ 966


Helmarr is now available on the Apple AppStore!

Hey r/selfhosted,

I'm insanely happy to announce that Helmarr is now available on the Apple AppStore! 🎉

What is this?

Helmarr is my attempt at giving your whole media management stack a single, native home on Apple devices. It is built for iOS and iPadOS (optimized for both), and also available on macOS, so you can browse, manage, and keep track of everything in one place without bouncing between separate apps and web UIs.

Currently supported:

Sonarr, Radarr, Lidarr, Bazarr, Seerr (Overseerr & Jellyseerr), Tautulli, Jellystat, SABnzbd, NZBGet, qBittorrent, Unraid, SSH, Wizarr, Transmission (coming soon).

Feature highlights:

  • Unified library browsing and management
  • Requests (Overseerr, Jellyseerr, Seerr)
  • Calendar for upcoming releases
  • Activities like downloads, history, and status
  • Release filters for video, audio quality and formats
  • Add and manage media directly
  • Release picker / release browser for better control over what gets grabbed
  • Download management for SABnzbd, NZBGet and qBittorrent (pause, resume, reorder, speed limits, etc.)
  • Push notifications for Sonarr, Radarr, Lidarr, Seerr and Tautulli
  • Home screen widgets (queue, upcoming, stats, more are coming)
  • Deep customization (accent colors, layout, tab bar, custom headers, etc.)
  • Smart connectivity with multi-network support (primary + fallback hosts, auto switching LAN/WAN)
  • Unraid monitoring + control (shares, parity, disks, warnings, Docker containers, VMs)
  • SSH terminal access with live resource monitoring (CPU/RAM/Net)
  • and so much more, try it out!

Pricing:

I see Helmarr as a paid app that you buy once and be done forever, but I still wanted it to be easy to try, so every service has a free mode that lets you explore most of its features.

  • Lifetime unlocks: Purchase individual services, or get the “All Services” lifetime option (best value). Family Sharing is included on all lifetime purchases, and the full unlock also covers any services added in the future.
  • Ultra subscription: Unlocks everything as well. It doesn’t add features beyond cosmetics, it’s mainly for anyone who wants to support continued development. 🫶

Beta and a huge thank you ❤️

The beta honestly went way beyond what I expected. We had over 3,000 people in TestFlight, with about 800 to 1,000 active every day and over 300 in the Discord. The amount of feedback, bug reports, and suggestions I got was insane, and it directly shaped the app into what it is now.

Thank you to everyone who took the time to test, send screenshots, report issues, and point out the little details. I read everything, and I am not slowing down on feature development and bug fixing.

Links:

App Store: https://apps.apple.com/us/app/helmarr/id1638624921

Website: https://helmarr.com

Discord: https://discord.gg/sJRqaXNtxs

By u/0xmort3m ⬆️ 925


Media server for adult content

Wife and I have been trying to watch adult content in the bedroom. Trouble is that tv, like most in my house, uses a Roku. We’ve been casting to it from our phones but that’s really less than ideal. I know Stash is the go to recommendation but that won’t work with the Roku. I have Jellyfin running now but the sorting is driving me crazy. What media server do you use for self hosting?

Edit: Amazing how I’m getting downvoted for replying to people who did nothing but read the title and are providing zero value added.

Edit 2: This is amazing! Lol. Now I’m getting downvoted for being disabled and using Spanish while Hispanic. Man Reddit is awesome.

By u/Sea-Long3574 ⬆️ 656


GitHub Self Hosted action COSTS NOW.

0.002 EUR x minute

GITHUB? We just got the email today in the company and I am looping.

It is not about the price but it is self-hosted, it is like paying a license to GitHub for using GitHub. It is the start of paywalled FOSS

By u/Basic-Bobcat3482 ⬆️ 653


A diary about self hosting

dear diary:

I always were a tech savy dude, but rarely got in touch with linux or self hosting before 2024.

Early 2024 I started experimenting with a pihole + unbound on a rasperry 4, because I could'nt stand the amount of brainshrinking ads on the internet anymore.

Mid 2024, after Microsoft announced the end of W10, I completly migrated to Linux within a month (Using PoP!_OS as my beloved daily driver since then), because W11 is the biggest fraud that could have been brought among humans.

Then most streaming services raised there subscription prices like... monthly? This was the time I found out something named jellyfin existed. I bought a bunch of second hand media, some big HDDs and hosted everything on my main pc to tinker with. Shortly after I built a nice library. I cancelled all my subscriptions afterwards.

All what followed explains itself - bought a NAS, more HDDs, more media, imported all my audiobooks, worked out some plans to safely backup my stuff. It became an addiction to own my data, and I understood its worth the work and the cost.

Soon it became complicated and kinda unsecure hosting everything on my main pc, so I went to the next step and bought a mini PC to host my stuff in a better and convinient way. I learned about Proxmox and containerization.

Thanks to llms I was able to vibe code a cool looking Dashboard where I can access all my services from, integrated Caldav, and my most visited sites. It legit became the startpage of my browser (I'm a Vivaldi enjoyer).

Then my own documentation followed because my homenet grew and grew. I hosted Bookstack to keep tracks of my configurations, chasing the goal to keep track of what I did and learned the previous year.

Thanks to great documentation and llms I ended up securing all my services behind Nginx and proper ufw roles (I never touched a firewall or proxy in my live before), I learned so much about this cool topic! Network security even became my favourite topic about self hosting.

After my services were properly secured (hoping that at least) I looked at wireguard. I bought a linux tablet running ubuntu to stay in my ecosystem, and since then I was able to safely access all my data, my servers and everything I need from anywhere.

My next step is to self host paperlessngx, which should lead me to the world of docker. I never used it, but I am very curious if this will work inside proxmox.

Here I am now, asking myself weekly what I should host next. The itch is strong...

Tldr: Began self hosting as an act of self-defense, got addicted by the feel of digital independence, and stayed because its funny and interesting.

By u/dannyk96 ⬆️ 559



Issue Tue, Dec 16 06:15 AM

RenderCV v2.5: Open-source, local CV generator — no cloud, no accounts, just YAML → PDF

TLDR: Check out github.com/rendercv/rendercv

It's been a while since the last update here. RenderCV has gotten much better, much more robust, and it's still actively maintained.

What it replaces

Overleaf, Google Docs, online CV builders, Word. All of them require you to trust a third party with your personal data.

RenderCV is just an open-source Python CLI application which takes your YAML and gives you a PDF. Your CV is a YAML file. You own it.

The idea

Separate your content from how it looks. Write what you've done, and let the tool handle typography.

yaml cv: name: John Doe email: john@example.com sections: experience: - company: Anthropic position: ML Engineer start_date: 2023-01 highlights: - Built large language models - Deployed inference pipelines at scale

Run rendercv render John_Doe_CV.yaml, get a pixel-perfect PDF. Consistent spacing. Aligned columns. Nothing out of place.

Why engineers love it

Your data stays yours. No cloud. No accounts. No uploading your personal history to someone else's servers.

Open source Python. Read the code, fork it, modify it. MIT licensed.

Your CV is a text file. Store it in your git repo, your backup system. Grep it. Diff it. Version control it. Use LLMs to help write and refine your content.

Full control over every design detail. Margins, fonts, colors, spacing, alignment; all configurable in YAML.

Real-time preview. Set up live preview in VS Code and watch your PDF update as you type.

JSON Schema autocomplete. Editors lights up with suggestions and inline docs as you type. No guessing field names. No checking documentation.

Any language. Built-in locale support, write your CV in any language.

The output

One YAML file gives you:

  • PDF with perfect typography
  • PNG images of each page
  • Markdown version
  • HTML version

Installation

bash pip install "rendercv[full]" rendercv new "Your Name" rendercv render "Your_Name_CV.yaml"

Or with Docker, uv, pipx, whatever you prefer.

Not a toy

  • 100% test coverage
  • 2+ years of development
  • Battle-tested by thousands of users
  • Actively maintained

Links: - GitHub: https://github.com/rendercv/rendercv - Docs: https://docs.rendercv.com - Docker: ghcr.io/rendercv/rendercv

Happy to answer any questions.

By u/egehancry ⬆️ 904


My Favorite Self-Hosted Apps Launched in 2025 (selfh.st)

Hey, r/selfhosted! Continuing a tradition started last year, I recently published a list of my favorite self-hosted software released in 2025 and thought everyone here might find it interesting.

As usual, the article itself includes screenshots and brief descriptions, but I've also provided a list below with links for those who'd prefer not to click through.

Additionally, these apps can also be viewed directly in my app directory using the following shortcut: slfh.st/2025

My Favorite Apps Launched in 2025

By u/shol-ly ⬆️ 865


Over 10,000 Docker Hub images found leaking credentials, auth keys

After scanning container images uploaded to Docker Hub in November, security researchers at threat intelligence company Flare found that 10,456 of them exposed one or more keys.

The most frequent secrets were access tokens for various AI models (OpenAI, HuggingFace, Anthropic, Gemini, Groq). In total, the researchers found 4,000 such keys.

When examining the scanned images, the researchers discovered that 42% of them exposed at least five sensitive values.

https://www.bleepingcomputer.com/news/security/over-10-000-docker-hub-images-found-leaking-credentials-auth-keys/

By u/Slow-Efficiency1134 ⬆️ 481


Pangolin 1.13.0: We built a zero-trust VPN! The open-source alternative to Twingate.

Hello everyone, we are back with a BIG update!

TLDR; We built private VPN-based remote access into Pangolin with apps for Windows, Mac, and Linux. This functions similarly to Twingate and Cloudflare ZTNA – drop the Pangolin site connector in any network, define resources, give users and roles access, then connect privately.

Pangolin is an identity aware remote access platform. It enables access to resources anywhere via a web browser or privately with remote clients. Read about how it works and more in the docs.

NEW Private resources page of Pangolin showing resources for hosts with magic DNS aliases and CIDRs.

What's New?

We've built a zero-trust remote access VPN that lets you access private resources on sites running Pangolin’s network connector, Newt. Define specific hosts, or entire network ranges for users to access. Optionally set friendly “magic” DNS aliases for specific hosts.

Platform Support:

Once you install the client, log in with your Pangolin account and you'll get remote network access to resources you configure in the dashboard UI. Authentication uses Pangolin's existing infrastructure, so you can connect to your IdP and use your familiar login flow.

Android, iOS, and native Linux GUI apps are in the works and will probably be released early next year (2026).

Key Features

While still early (and in beta), we packed a lot into this feature. Here are some of the highlights:

  • User and role based access: Control which users and groups have access to each individual IP or subnet containing private resources.
  • Whole network access: Access anything on the site of the network without setting up individual forwarding rules - everything is proxied out! You can even be connected to multiple CIDR at the same time!
  • DNS aliases: Assign an internal domain name to a private IP address and access it using the alias when connected to the tunnel, like my-database.server1.internal.
  • Desktop clients: Native Windows and MacOS GUI clients. Pangolin CLI for Linux (for now).
  • NAT traversal (holepunch): Under the right conditions, clients will connect directly to the Newt site without relaying through your Pangolin server.

How is this different from Tailscale/Netbird/ZeroTier/Netmaker?

These are great tools for building complex mesh overlay networks and doing remote access! Fundamentally, every node in the network can talk to every other node. This means you use ACLs to control this cross talk, and you address each peer by its overlay-IP on the network. They also require every node to run node software to be joined into the network.

With Pangolin, we have a more traditional hub-and-spoke VPN model where each site represents an entire network of resources clients can connect to. Clients don't talk to each other and there are no ACLs; rather, you give specific users and roles access to resources on the site’s network. Since Pangolin sites are also an intelligent relay, clients use familiar LAN-style addresses and can access any host in the addressable range of the connector.

Both tools provide various levels of identity-based remote access, but Pangolin focuses on removing network complexity and simplifying remote access down to users, sites, and resources, instead of building out large mesh networks with ACLs.

More New Features

  • Analytics dashboard with graphs, charts, and world maps
  • Site credentials regeneration and rotation
  • Ability for server admins to generate password reset codes for users
  • Many UI enhancements

Release notes: https://github.com/fosrl/pangolin/releases/tag/1.13.0

⚠️ Security Notice

CVE-2025-55182 React2Shell: Please update to Pangolin 1.12.3+ to avoid critical RCE vulnerabilities in older versions!

By u/jsiwks ⬆️ 462


Do Not Ghost Me: an open source, privacy first platform to report recruitment ghosting and build a public dataset

Home Screen

A lot of us are job hunting, and during that process we can end up getting ghosted by companies and recruiters. It’s frustrating, it’s demoralizing, and as candidates there’s usually nothing we can do about it. At least, that’s how it’s been until now.

Do Not Ghost Me is built to address exactly this. It’s a place where candidates can anonymously share negative hiring experiences, and where those reports become meaningful over time as the dataset grows. As more entries accumulate, applicants can set better expectations before applying, understand how much value a company seems to place on candidates, and align their time and energy accordingly.

If you want to try it quickly and contribute to the shared dataset, the live instance is here: https://www.donotghostme.com

The source code and setup docs are on GitHub. You can self-host it in your own environment, and with very small tweaks you can also repurpose it as a general self-hosted anonymous reporting app for any topic, not just hiring: https://github.com/necdetsanli/do-not-ghost-me

By u/nec06 ⬆️ 452


Anyone else get sudden waves of motivation to improve their setup… at the worst possible times?

I’ll be lying in bed or in the middle of work and suddenly think, “I should totally reorganize my entire homelab tonight.” Does this happen to everyone, or is my self-hosting brain just wired weirdly?

By u/Fab_Terminator ⬆️ 405


Built a tiny tool for myself, suddenly thousands of people use it - open-source is wild.

I built a small tool to automate my own Windows setup. Nothing fancy, just a personal script turned into a simple web generator. Then it unexpectedly took off. Thousands of people started using it; issues and feature requests poured in, and I had to learn quickly how to manage feedback, set boundaries, and manage expectations.
I wrote a short breakdown of what happens behind the scenes when a side project suddenly gets real — the excitement, the pressure, and the lessons about scope, clarity, and sustainability.

Here is the full link for the tool: https://kaic.me/win-post-install

By u/kaicbento ⬆️ 382


Announcing Linkwarden for iOS & Android

Hello everyone,

Before we talk about today’s announcement, let's take a moment to appreciate what this community has built together. What started as a project to preserve webpages and articles has quietly grown into Linkwarden, a tool used by researchers, journalists, and knowledge collectors all over the world.

As we’ve grown, the Linkwarden community has helped us reach:

  • 16,000+ GitHub stars
  • 11M+ Docker downloads
  • Thousands of self-hosted instances running in different companies, universities, agencies, and homelabs
  • A thriving ecosystem of contributors, donors, and Cloud subscribers keeping the project sustainable

None of this would've happened without you. Thank you! 🚀

Today, we’re excited to launch something you’ve been asking for since the very beginning: the official Linkwarden mobile app, now available on iOS and Android.

Different screens (iPad, Pixel, and iPhone)

Here are the highlights so far:

  • 🧩 Create, organize, and browse your links: A native, mobile-first experience with collections, tags, and powerful search.
  • 📤 Save links directly from the share sheet: Send interesting articles from the browser or any other app straight into Linkwarden, no copy-paste required.
  • 📚 Cached data for offline reading: Catch up on long reads, articles, or saved blog posts when you’re away from Wi-Fi.
  • ☁️ Works with Linkwarden Cloud and self-hosted: Use the same app whether you’re on Linkwarden Cloud or your own self-hosted instance, just point it at your server and sign in.
  • 📱 Built for different screen sizes: Supports iOS / iPadOS, and Android (phones and tablets).
  • 🔜 And more coming soon: This first release is just the foundation, expect many improvements and new features soon.

Get the app

To use the app you’ll first need a Linkwarden account (version v2.13+ recommended).

You can choose between:

  • Linkwarden Cloud – instant setup, and your subscription directly supports ongoing development.
  • Self-hosted Linkwarden – free, but you’ll need to deploy and maintain a Linkwarden instance on a server.

After creating an account, download the app from your preferred store:

App Store

Google Play

How you can support Linkwarden

Linkwarden exists because of people like you. Other than using our official Cloud offering and dontations, here are the other ways to help us grow and stay sustainable:

Thank you for being part of this community. 💫

By u/Daniel31X13 ⬆️ 353



Issue Tue, Dec 09 06:15 AM

Plex submits $35 bid for Warner Brothers

https://theonion.com/plex-submits-35-bid-for-warner-bros/

I thought you all would enjoy this bit of satire.

By u/compromised_roomba ⬆️ 1162


Hello, my name is value, and I am a recovering homelab addict

A year into self-hosting and somehow I ended up wanting to build a full Kubernetes setup.
Posting this as a lighthearted joke for others on the same path.
“Hi, I’m value, and I may have lost control of my homelab.”

By u/value1338 ⬆️ 1105


MediaManager v1.10.0 - A replacement for Sonarr and Radarr

Hi, I'm currently developing an alternative to Sonarr/Radarr/Jellyseer that I called MediaManager.

Since I last posted here, I added the ability to import media from an existing library!

Why you might want to use MediaManager:

  • OAuth/OIDC support for authentication
  • movie AND tv show management
  • multiple qualities of the same Show/Movie (i.e. you can have a 720p and a 4K version)
  • you can select if you want the metadata from TMDB or TVDB on a per show/movie basis
  • Built-in media requests (kinda like Jellyserr)
  • support for torrents containing multiple seasons of a tv show (Season packs)
  • Support for multiple users
  • config file support (.toml)
  • addition of Scoring Rules, they kinda mimic the functionality of Quality/Release/Custom format profiles
  • addition of media libraries, i.e. multiple library sources not just /data/tv and /data/movies
  • addition of Usenet/Sabnzbd support
  • addition of Transmission support

MediaManager also doesn't completely rely on a central service for metadata, you can self host the MetadataRelay or use the public instance that is hosted by me.

Notable changes since I last posted:

  • Added the ability to import media from an existing library!

Features like these are a lot of work, please consider supporting my work ❤️

Github Repo Link: https://github.com/maxdorninger/MediaManager

Main dashboard

TV Show Details View

By u/cookiedude25 ⬆️ 610


Favorite Self-Hosted Tools in 2025 (Looking for More Suggestions!)

I use Docker containers and a cloud server to host services mainly for my personal workflow. Here are my favorite self-hosted projects in 2025 — all of them have been extremely useful to me!

  1. Blinko – A self-hosted AI-powered knowledge base and note-taking app
  2. Ollama – Works perfectly with Blinko for local embedding models
  3. Gitea – Where I host the source code of my Hugo blog
  4. Woodpecker – My CI/CD tool paired with Gitea (e.g., automatically builds my blog)
  5. wakapi – Self-hosted API for tracking my coding time
  6. Plausible CE – My favorite privacy-friendly web analytics with zero bloat
  7. nahpet – A simple and clean URL shortener
  8. Twikoo – A self-hosted comment system I use on my Hugo blog
  9. immich – The best Google Photos alternative — powerful and impressive
  10. IT Tools – A collection of simple web utilities running entirely in the browser
  11. bark server – Sends APNs notifications to iOS/iPadOS
  12. Uptime Kuma – Monitors the uptime and health of all my sites and containers
  13. Cloudreve Pro – My private cloud storage solution
  14. Stirling PDF – A powerful PDF toolkit, though the commercialization is getting heavy… I’m looking for alternatives

For domains, I purchase from Porkbun because Cloudflare doesn’t support my TLD. DNS and CDN are provided by Cloudflare, and my server uses Nginx as a reverse proxy with Cloudflare-only access to the origin. Cloudflare Zero Trust adds another layer of protection for secure access to my services.

If you have more recommendations, please share them! I’d love to discover more awesome self-hosted tools. Thanks, everyone!

By u/DejavuMoe ⬆️ 556


Password-manager gang called me a masochist for going full OIDC in my homelab. I’m one good argument away from burning it all down and going back to 1Password. Change my mind (again).

Round 1 recap of my last post:
I counted 68 different credentials across my lab (23 Docker admin users, 18 static API keys, 27 human accounts). Got so fed up that I migrated everything possible to:

  • Single OIDC provider (Authentik, because I like pain)
  • Workload identities + short-lived certs via Spike (formerly Smallstep)
  • Forward auth on Traefik for anything that doesn’t speak OIDC natively Result: literally one master password + certs that auto-expire every 4–8 h. Felt like ascending.

Then y’all showed up with the war crimes:

  • “1Password/KeePassXC master race. You never forget a password if it’s in the vault.”
  • “Local logins just work. Family accounts change once every five years.”
  • “The only thing your fancy OIDC setup guarantees is that YOU will break it at 3 a.m.”
  • “Half the *arrs and paperless and immich still don’t support OIDC without a paywall or a 400-line proxy hack.”
  • “If you’re offboarding family that often you need therapy, not Keycloak.”

…okay, that last one was fair.

So here’s the actual challenge for the password-manager maximalists and the “static credentials are fine” crowd:

Give me the killer argument why I should rip out Authentik + Spike + all the forward-auth nonsense and go back to:

  1. One shared 1Password/KeePassXC family vault (or separate vaults + emergency kit drama)
  2. Long-lived random passwords for every service
  3. Static API keys that never rotate because “if it ain’t broke”

Specific things I’m currently enjoying that you have to beat:

  • Family member creates their own account once, logs in with Google/Microsoft from phone/TV/browser, never asks me for a password again
  • In case someone’s phone gets stolen(that has happened once) I just revoke their OIDC session in Authentik, no password changes anywhere
  • API keys are gone; everything uses mTLS certs that expire before breakfast
  • New service gets added → one line in Traefik middleware → done, no new credential
  • I can see exactly who logged into what and when (yes I’m that guy)

Your move. Convince me the complexity budget isn’t worth it for a homelab that’s literally just me + wife + parents + sister. Make it technical, make it brutal, make it real.

Best argument gets gold and I’ll make a full “I was wrong” post with screenshots if I actually revert.

Current mental scoreboard:
Password manager gang — 1
OIDC cult — 0.5 (I’m coping)

(Paperless-ngx password reset PTSD still haunts me. Don’t @ me unless you’ve been there.)

By u/BookHost ⬆️ 406


Technitium DNS just crushed it

Not paid, not involved with the project other than using it at home (I'm a part-time Infoblox engineer at my day job). I had been running nebula-sync to keep two pihole servers running and had switched over to Technitium a couple of months ago because #big_kid_dns and/or more challenging or something.

Technitium does DNS blacklists just fine, so that's covered. And?

Technitium just released clustering. Yes, I had been doing primary/seconday zones and serials and all that between the two dns servers. But now I'm managing the cluster from one spot and not relying on a 3rd-party service to sync records and settings between two DNS servers.

Astounding project for DNS. Truly deserves way more attention in /selfhosting and anywhere else IMHO.

EDIT: I run these on two Dell 3040 Wyse thin clients with minimal Debian, which takes up about 40% of the local storage. Installing the OS just takes one tweak using advanced install mode.

By u/Appropriate_Monk1552 ⬆️ 394


Norish - A realtime, self-hosted recipe app for families & friends

Hey r/selfhosted

For the last couple of months I’ve been working on Norish, a self-hosted, realtime recipe keeper built to be used together with friends and family.

We’ve tried Mealie and Tandoor. Both are great projects but my girlfriend and I never quite clicked with their UI/UX. So I started building something that matched how we wanted to cook, plan, and shop together.

My girlfriend and I do groceries together, and Norish completely removed the constant “Did you already grab this?”. With realtime syncing, we can roam the store separately but still stay in sync. This is the sole reason why I made the app mostly realtime.

Also, the name comes from our dog: Nora + dish => Norish. And yes, she’s hidden somewhere in the app.

You can see a demo video on imgur or YouTube.

What Norish is about

The core vision is a recipe keeper you can share with others to build one big collective library.

  • Realtime syncing (via WebSockets): When we’re doing groceries together, updates instantly show up for both of us; no more “did you grab this already?”
  • Collaborative meal planning: The calendar clearly shows what is planned on which day, making the weekly overview super easy.
  • Clean and simple UI: Norish is simplistic by nature. I'm not sure if I will ever introduce things like cookbooks, inventory management(not sure on this yet) etc.. If you require this take a look at either Mealie or Tandoor.

Core features

  • Easy import via website URL
    • Will fallback to using AI if we can't reliably parse the page
    • Can parse Instagram, TikTok and YouTube videos. *
  • Unit conversion: Easily convert from metric <=> US. *
  • Recurring groceries: Groceries can be marked as recurring using either the interface or NLP.
  • Households: Recipes are shared across the instance, but grocery lists + calendars can be scoped to a household for privacy and organization. calendar.
  • SSO: Norish only login via SSO. This can either be your custom instance such as Authentik or PocketId. Preconfigured the App accepts GitHub and Google.**
  • Basic permission policies: So you can change who can delete/edit and view Recipes by default:
    • Delete/edit: Household members
    • View: Everyone
  • Import: it supports importing your catalogue from Mealie, Tandoor and Mela. (tested lightly on the first two).

\ requires AI settings to be enabled. The app is fully functional without AI enabled. In theory any OpenAI API spec compliant api works. But this is untseted*

\*If no SSO or OIDC provider is configured the instance will fallback to basic auth.*

Looking ahead

Looking into the future of Norish I have the following planned in order of importance:

  • Redis for the event sourcing. (currently just Node’s EventEmitter)
  • Mobile apps for both iOS and Android.
  • Recipe linking and possibly a rating system.
  • Basic markdown support

I look forward to your feedback. Feel free to create an issue on GitHub if you come across any issues and or have feature requests.

Note:

Given recent “vibe coding” discussions: I used AI for assistance, especially for writing repetitive code and tests, and reviewed everything myself. The architecture and core logic are made up by me.

In my day job I work as a software engineer although mainly as a .NET developer. I can't always bring up the motivation to code next to having coded 8hours a day already. This project was also used:

Get a better understanding of Next

Get a better understanding of a Node backend

Get familiar with tRPC

See how recent AI models perform with AI-assistent coding.

Also unit tests I was lazy on and did this mostly after coding almost everything - the tests are largely AI made.

I am not good at CSS, html and fancy animations and quite frankly I do not want to be good at it. So the HTMX might be messy as this is largely done using AI.

EDIT: SSO is no longer the any way to authenticate basic auth has been added.

By u/Drumstel97 ⬆️ 355


Slink v1.8.0 is out 🎉 - Self-Hosted Image Sharing Service

Hi r/selfhosted,

I’m the developer of Slink, a minimalistic self-hostable image-sharing platform. As a reminder, it lets you quickly drag-and-drop an image and then share or embed the link anywhere.

This update brings several quality-of-life improvements to make sharing even smoother, along with a few lightweight social features that can be useful for small communities and/or gamers running private servers, forums, or Discord groups.

New Features

  • URL Shortening: Added short link generation for easy image sharing with configurable settings.
  • Preview Mode: Implemented enhanced image viewing on the exploration page.
  • Bookmarks: Introduced ability to save favorite images for quick access with bookmark tracking.
  • Comments: Implemented comment functionality for images on the exploration page.
  • Notifications: Added notification support for user interactions like comments and bookmarks.
  • Real-time Image Feed: Integrated live feed updates for instant visibility of new uploads.
  • Formatted Link Copy: Added support for copying image links in various formats (HTML, Markdown, BBCode, etc.) for integration with forums and websites.

Why these changes?

Many self-hosters use Slink in small groups, gaming or modding communities, or as a drop-in replacement for Imgur-like sharing. The new features aim to keep things lightweight while making it easier to collaborate, organize content, or run Slink as a shared utility among friends.

What’s next?

I’m currently looking into the possible next features:

  • OIDC login for easier multi-user setups (highly requested);
  • improve performance by building a module which will support GPU acceleration;
  • optional storage drivers for S3-compatible backends;
  • decide on whether platform will benefit from short videos (animated images are already supported).

If any of these resonate with you  or if you have your own ideas, let me know. See the full list of feature requests.

Demo: https://demo.slinkapp.io
Docs: https://docs.slinkapp.io
Repository: https://github.com/andrii-kryvoviaz/slink

As always, thank you for your support, it truly means a lot. Any feedback or contributions are very welcome.
Happy self-hosting!

By u/redux_0x5 ⬆️ 334



Issue Tue, Dec 02 06:15 AM

I built a free Gmail cleanup tool that runs locally - no subscriptions, no data collection

Hey everyone!

So I built this today. I checked out some tools online like Clean Email and Unroll.me - they're good but most are paid or collect your data. I just wanted something simple that works locally on my machine.

What it does:

  • 🗑️ Bulk delete emails by sender (shows who's spamming your inbox the most)
  • 🚫 Bulk unsubscribe from newsletters
  • ✅ Mark thousands of emails as read

It uses the Gmail API and runs 100% on your computer - nothing gets sent anywhere.

GitHub: https://github.com/Gururagavendra/gmail-cleaner

This probably isn't needed by everyone, I mainly built it for myself. But putting it here in case someone finds it useful. It's free and open source

Update:
Been working nonstop on improving this little project after all the unexpected love it got!

  • Updated the README and added more filters
  • Migrated the whole project to FastAPI + uv
  • Added a full Docker image + compose files
  • Added bulk email batch processing (way faster + safer)
  • Added basic tests working on more + features
  • please add the new features u guys want here (https://github.com/Gururagavendra/gmail-cleaner/issues)

Also just to share — the very first version was something I made just for fun for myself, honestly thought no one else would ever use it. 😅 But after the crazy response, I’m now rewriting a lot of it, checking every file carefully, adding proper releases, testing everything locally for each PR, and improving the structure for better readability (the first version was literally one giant file lol).

Actively maintaining the repo, fixing issues, and reviewing PRs from others. This is my first time getting this much response and I just want to say thank you all! Super excited — the open-source energy is insane and I’m loving it. ❤️

Also, a small personal note:
As a junior dev I always wished I had good mentors so i can learn(i missed so much) — and honestly, you all have been that for me. The feedback, ideas, and discussions here have pushed me to level up fast. Super grateful for this community.

By u/Wonderful_Ruin_5436 ⬆️ 1166


Selfhosting is not a hobby anymore, it's a way of running a small business

I discovered the world of selfhosting about a year ago, at the beginning, it was just for having a NAS to store my files locally, and then to learn more about docker and kubernetes, but suddenly turns to be a way of running my small consulting business.

I started with hosting just Vaultwarden to be a replacement of Bitwarden, and then start extending the apps to covers more apps I use daily.

Forgejo: as a mirror of my GitHub just in case.

Invoice Ninja: to handle anything related to payments, contracts, quote...

EspoCRM: managing leads

n8n: handles many automations I have between Invoice Ninja and EspoCRM. Also, it automates a flow of writing tweets on my X account when I made big updates on the SaaS I'm building.

Penpot: for doing designs.

Paperless-ngx: scanning all the letters I receive.

ActualBudget: It gives me a good overview of how I'm financially doing.

Postiz: scheduling all my social media posting flow.

Cap: It replaces my Loom perfectly.

NextCloud: It's now my Google Drive.

MiroTalk: No more Zoom or Google Meet bills.

All of these services I'm selfhosting helped me reduce the monthly cost of running my business to almost ZERO.

These are just the services I'm using for business. For personal use, I use Immich, Wakapi, Wger, Karakeep, Jellyfin, Home Assistant.

A BIG THANK FOR THE CUMMINITY.

By u/Hexacker ⬆️ 936


As an SRE, I stopped using Kubernetes for my homelab

I will keep it simple. Only reasons why you should consider using Kubernetes to selfhost your services are

  1. For learning and experimentation
  2. You really need high availability for your services

Don't get me wrong, these are excellent reasons, especially the first one. I would recommend that you give Kubernetes a shot if it interest you to learn and get familiar with, especially if you work in tech.

I am an SRE by profession and I do large scale Kubernetes at work for a living, and I initially set up a full-blown, fully automated Kubernetes cluster at home. I went all in:

  • ArgoCD for GitOps
  • Longhorn for distributed storage
  • CertManager, MetalLB, Traefik
  • Multiple physical nodes
  • Full monitoring stack (Prometheus/Grafana)

It was a lot of fun. Until it wasn't.

The Friction:

I want to add a new service to the list? Most of the services offer docker compose files. Now I gotta convert that into a deployment, service, ingress, pv, pvc etc. I’d git push, watch Argo sync, see the failures, debug the manifest, retry, and finally get it running. Even with tools to help convert Compose to Manifests, the complexity overhead compared to docker compose up -d was undeniable.

The dealbreaker : Wasted Resources

But none of this was the reason why I stopped using Kubernetes for homelab. It was resource usage. Yes, that is right!

I was using Longhorn for distributed storage. Distributed storage on a puny home network is... heavy. Between Longhorn, the K3s agent overhead, the monitoring stack, and the reconciliation loops of ArgoCD, my auxiliary services were using significantly more CPU than the actual apps I was hosting.

I dumped Kubernetes for Plain Docker

I created a new single VM and slapped docker on it and moved everything into it (with Proxmox backup of course). The whole thing idles at almost 0 CPU usage and no overhead

If I want to run a new service, all I have to do is download the docker-compose, modify the labels so my traefik can do service discovery, and `docker compose up -d`. How easy is that?

Life is good again!

Let me address some comments before they arrive

1. But no declarative IaaC / GitOps : Actually I have not had a single issue with manual docker compose yet. Worst case scenario, I will restore the whole VM from Proxmox backup

2. No high availability?: The whole thing hangs on thoughts and prayers. If it is down for a bit, it's fine. Sometimes I take my plex server down to let my friends know who's in charge (just kidding, mostly)

  1. Skill issue: Probably. But that is besides the point. Docker compose is significantly easier than anything Kubernetes has to offer for this specific situation

TL;DR: If you are fairly new to homelab/self-hosting and if you felt like you are missing out by NOT using Kubernetes, rest assured, you are not missing out. If you are interested in learning, I would 100% recommend that you play around with it though. Also distributed storage on homelab sucks

Edit:

  1. AI Slope accusations: I made sure to not include the `--` em dashes, still got accused of AI slope. Come on reddit

Edit 2 : Some valuable insights from the comments

For those who are in a similar situation with Docker, I think these comments are very helpful!

  1. GitOps with Docker: https://komo.do/ seems very helpful : Thanks @barelydreams. They have also shared their config HERE
  2. Use single node k3s - One could argue that this is not better than Docker Compose, but there are still benefits to running this way (Easier GitOps, Monitoring etc)
    1. Distributed storage such as longhorn adds a lot of overhead. Using a single node k3s cluster with hostPath for persistent volume can avoid that pain.
    2. Use Flux instead of ArgoCD (Flux seems much lighter)
    3. Use a custom helm template to convert docker compose into k8s manifests. For example https://github.com/bjw-s-labs/helm-charts (Thanks @ForsakeNtw and few others who mentioned it)
    4. Talos for Kubernetes node? Could be interesting to see how much overhead it removes

By u/m4nz ⬆️ 632


BentoPDF v1.9.0

Hello again folks,

First of all thank you very much for showing love to BentoPDF. We have crossed over 5000 stars on Github and I am grateful for it! 🥳❤️

I wanted to share an update on the features and fixes that have been added to BentoPDF since around v1.5.0.

New Features and Improvements

Create Fillable PDF Forms

This was by far the most requested feature.

  • You can build AcroForm based fillable PDFs from scratch or from an existing PDF.
  • Supports text fields, checkboxes, radio buttons, dropdowns, list boxes, buttons, signatures, date fields, and image fields.
  • Some fields require an advanced viewer to work properly.

Extract and Edit Attachments

  • Extract all file attachments from a PDF at once as a ZIP file.
  • View and edit both document level and page level attachments.

Stamp Tool

  • A new Stamp tool is available.
  • You can use default stamps or create custom ones.

Updated Sign Tool

  • Rebuilt on PDF.js for better accuracy.
  • Signatures can be saved and are placed correctly.

Updated Fill Form Tool

  • Also moved to PDF.js.
  • Interactive filling of PDF forms including XFA forms.

Add Attachments

  • Attachments can be added at document level or page level.
  • Works best with PDF viewers that support advanced attachment features.

Performance Improvements

  • Faster loading across Merge, Split, Multi Tool, Organize, and Duplicate and Organize.
  • Initial page load is much quicker and scrolling is smoother.
  • Large PDFs (including 1000+ pages) load and respond more reliably.
  • Actions like rotate, delete, and duplicate in the Multi Tool now respond instantly.

Keyboard Shortcuts

  • All tools now support keyboard shortcuts.
  • Key bindings are customizable and can be imported or exported.
  • Shortcuts work across the entire app, even inside tools.

Preferences Tab

  • A new Preferences section is available on the homepage.
  • Includes options like full width mode.

Page Dimensions Tool

  • Now shows aspect ratio, area, and rotation.
  • Data can be exported as a CSV file.

Bookmarks Preserving Merge

  • Merge and Interleave Merge now preserve bookmarks, table of contents entries, and hyperlinks.
  • When merging selected page ranges, page level bookmarks are preserved.

Fixes

PDF Multi Tool Navigation

  • Fixed an issue where the Multi Tool redirected back to the homepage.

Form Field Rendering

  • Fixed issues with missing text fields, duplicate form fields, and placement problems.

UI Consistency

  • Minor improvements to the hero and search sections.
  • Footer is now consistent across simple mode and normal mode.

In the next update users can expect to be able to digitally sign PDFs using PKCS, PFX and PEM certificates and also verify it.

You would also be able to telepathically edit PDFs and upload them on the cloud.

Thank you very much once again, and please feel free to drop any suggestions or feature requests:

Github Link: https://github.com/alam00000/bentopdf

By u/paglaulta ⬆️ 483


Aside from mail server, what is the one service that you will not selfhost?

I've been wanting to have my own email server but after reading some threads regarding the hassle and pain of maintaining one (even from experienced and pro selfhoster), I was discouraged in pursuing it.
 

Now I'm wondering, what else you wont selfhost?

By u/dadidutdut ⬆️ 403


Nomad MK2: Open Source Pocket-sized offline media server

Howdy!

I’m excited to officially announce the Nomad MK2, a pocket-sized offline media server built on the ESP32-S3. It’s fully self-hosted and offline, serving Movies, Shows, Books, Music, Images, and Files over its own Wi-Fi hotspot, no internet required.

What’s new in the MK2:

  • Faster, more robust media indexing
  • Resume playback across sessions
  • Dark mode for the web interface
  • Admin console for real-time control and monitoring
  • Improved multi-user streaming and reliability

Open Source & Self-Hosted:
Nomad is fully open-source. Every part of its interface and server code is yours to inspect, tweak, and improve. I’m not a professional developer, so suggestions and contributions are always welcome!

Coming soon: Gallion
I’m also working on the next-gen version, Gallion, which will run in Docker/node.js and add features like:

  • Game emulation
  • Comic book and Webtoon reading
  • ZIM archive support
  • Even more powerful and unique self-hosted features that can run on a variety of devices, including Raspberry Pi

Links:

Whether you’re looking for a fun DIY project, a portable media server, or a fully offline self-hosted solution, Nomad MK2 has you covered.

I’d love to hear your feedback, feature suggestions, or just see who else is into tiny self-hosted setups like this! Feel Free to ask any questions you may have!

By u/JcorpTech ⬆️ 384


Released: Torrra v2 - a fast, modern terminal torrent search & download tool

Hey everyone!
I’ve just shipped Torrra v2, a big upgrade to my TUI torrent search/download tool built with Python & Textual.

What’s new in v2:

  • Faster UI + smoother navigation
  • Improved search experience
  • Better multi-torrent downloads
  • Cleaner indexer integration
  • Polished layout + quality-of-life tweaks

I cannot post the full intro video here, but I have added a GIF as a preview.
Full video: https://youtu.be/NzE9XagFBsY

Torrra lets you connect to your own indexer (Jackett/Prowlarr), browse results, and download either via libtorrent or your external client; all from a nice terminal interface.

If you want to try it or check out the code:
GitHub: github.com/stabldev/torrra

Feedback, ideas, and PRs are welcome!

By u/stabldev ⬆️ 361


I just counted: 68 different credentials across my homelab. Send help.

Did a quick audit tonight:

23 Docker containers with their own admin users 18 services still using static API keys 27 human logins (me + family) That’s sixty-eight ways this can break at 3 a.m.

Just migrated everything I could to workload identities + JIT certs + single OIDC provider for humans. Cut the list down to literally one master password + certs that expire before I wake up.

If you’ve ever cried while resetting a forgotten Paperless-ngx password at 2 a.m., you’ll get it. What’s your actual credential count right now? Be honest.

By u/BookHost ⬆️ 330