

You have angered the helmsman Charon. Your misdeeds have been noted.


You have angered the helmsman Charon. Your misdeeds have been noted.


I used this guide to use traefik with a wildcard certificate from let’s encrypt that is internal only. So I have
And also
This allows something like vaultwarden to only be accessible on my internal LAN while something like immich is exposed so I can share albums with anyone I want.
If I want to connect to vaultwarden while away from home, I connect to wireguard first then access via the local URL.
In docker I don’t even close the app’s ports, so even locally everything has SSL everywhere.


If i remember correctly on my gitea (now forgejo) the default is open registration which really shouldn’t be the case for projects that are targeted towards self hosters.
My inital install was a long time ago so I don’t remember for sure


I don’t use tailscale but this doesn’t make sense.
If the only remote access is via tailscale then chromecast also has to be on tailscale, which isn’t easy to do.
To cast from your jellyfin to another tv, you need to setup a reverse proxy om your server to allow external access to jellyfin.
A lot of threads on jellyfin keep recommending tailscale which is easier to setup but more limiting.
I would recommend searching for tutorials about setting up a reverse proxy like caddy to NPM and then accessing jellyfin though a URL. That way you can give access to other people and also cast to a friends TV.
Same situation for things like immich if you ever want to share an album with a friend.


I ran nextcloud for years on good hardware and its always been the weakest self hosted app I have. I moved to seafile for a bit and then ultimately owncloud OCIS.
OCIS is a modern app that is massively better since its written with modern languages / frameworks
I don’t think this is the same thing.
Opencloud.eu seems to have been started so they could offer hosting services to EU clients and essentially compete with MS teams and others. You can download and run their version directly. This isn’t a fork the way that opencloud > nextcloud was a change in governance.
OCIS seems to have a great open source product that I’m also hoping to switch over to. I’ve been trying to get it connected to my authentik SSO (which I have) and just need to figure out how to get admin users on authentik to show up as admin users on ocis.
That’s the last thing I need to migrate over fully.
I used to be on owncloud then switched to nextcloud at the fork. In all that time through 3 different servers nextcloud has always been the most brittle app I’ve hosted


Please put this info on github issues for their to see


Unless its password protected apps like masterpdf and nitropdf for windows can edit anything in the pdf


Every foss pdf editor I’ve tried has been janky. Nothing gives true pdf editing capabilities.
Masterpdf is available on linux, its paid and not Foss but actually works


Borg backup runs every hour on all my docker folders


I definitely don’t need to but it also costs nothing and retention policy only keeps 5 minute backups for an hour. Then hourly back up for a day. Daily backups for a week, etc. Up to 2 years


Exactly this, I have hourly Borg backups and also since my install is entirely on a zfs array I have zfs autosnapshot every 5 mins with retention policy. Takes almost zero cpu or memory overhead extra and means and can do just about anything via command line and revert it back with ease.
That being said, I still don’t auto update. Unless having an issue, I just sit down every few months and update everything manually because if its already working why update. If you want the newest features, how will you even know what they are if you don’t at least glance at the release notes?


Traekif can reverse proxy just about anything include ssh.
That being said I don’t. For stuff like ssh I connect with wireguard first then ssh. For stuff like immich I directly expose that behind traefik so I can share images with others. For stuff like vaultwarden I have that behind traefik but internal only so you need wireguard first then you connect to vaultwarden.local.domain.com


FreshRSS self hosted. Just navigate to the website in your browser, install it to android via a browser ‘app’. Assign the app to a gesture.
Now i swipe from the left and my RSS opens. Fully self hosted with no tracking beyond the websites you visit.
I’m on version 1.143.1 I skipped all the beta timeline stages and updated from 1.135 I think.
About 30k photos and 2k videos
The web interface was great, the android app (pixel 8) was very slow. Even local assets were slow.
Since update, its way faster. Feels really good, responsive, low latency. Sync and backups have been no issue at all.
Sync on android turned itself off after updating, but I turned it back on, selected the same folders to watch and it processed for a few mins and then everything continued to work with no issues.
On the previous version, sync was pretty good. Sometimes it didn’t trigger as a background process and i had to manually open the app but it worked. New sync also works well though haven’t yet uploaded a large number of things.
The main feature I want is portion scaling. So I can type the number of servings and everything gets multiplied. Is that possible in obsidian via a plugin or with mkdocs?


This is great. Thanks!


Couldn’t the attacker just drop a dangerous binary into the data volume then?
Linux phone you can buy today and start using:
Borgmatic
You can self host the Borg server in docker (or bare metal) on another server if you have one (or a friends) and then borgbase offers very good paid backup storage
I use a second server locally, a friend and borgbase as backup locations.