Skip Navigation

User banner

nfreak

@ nfreak @lemmy.ml

Posts
1
Comments
94
Joined
1 yr. ago

  • Deleted

    Permanently Deleted

    Jump

  • I'm in the middle of writing up a novel about my music stack since I've just about gotten it exactly where I want it. There's no one-size-fits-all answer here and it's difficult to really replicate the behavior of major streaming services.

    The short version of what I have set up:

    • Backend: Navidrome
    • Frontends: Feishin (both desktop and hosted) and Symfonium
    • Remote access: Pangolin (this does involve keeping a Navidrome rest endpoint totally exposed so Tailscale/Netbird/Wireguard are fine too, but I wanted to be sure my wife can access it from her work PC in the office)
    • Library and metadata management: Lidarr, beets, and metadata-remote. Lidarr does the bulk (one instance per user/library), beets handles manual imports, and MDRM is for fine-tuning and really obscure stuff
    • Searching/Downloading: Lidarr + Tubifarry + slskd. Also support smaller artists as much as possible, bandcamp purchases and merch and whatever go a long way.
    • Discovery: Explo

    I'll have a full beginning to end writeup pretty soon hopefully. It's still not perfect, and juggling multiple users adds a huge layer of complexity, but I'm happy with where it's at.

  • Started hosting my own Nextcloud and its awesome!

    Jump

  • Oh this is the first I'm hearing of this one. I'm liking OpenCloud so far but the setup process and bizarre OIDC implementation don't leave me too confident in it. I'll keep an eye on this one.

  • Started hosting my own Nextcloud and its awesome!

    Jump

  • It's definitely a bit of a behemoth, and the dated php codebase doesn't really help either. I set up OpenCloud last week and aside from the struggle getting it working with a single compose and Authentik for OIDC, it's been exactly what I've been looking for. Simpler, faster, and only does the things I need it to do.

  • Your fav guide/method for securing Jellyfin?

    Jump

  • Pangolin with an Authentik login required. Jellyfin's set up with OIDC too but that's more for convenience than security (especially since password auth doesn't seem possible to disable, so it's just hidden with CSS which does jack shit for security).

    I'm paranoid so I only expose 3 services total without Pangolin/Authentik in front of them: Authentik itself, headscale, and navidrome's rest endpoint (the last one skeeves me a bit but it's mandatory for it to work remotely in the situations I want it, like a web player on work machines). Anything else I personally need remote access to, I can get through tailscale - Pangolin for me covers friends and family usage and a few niche situations.

  • Selfhosting Sunday - What's up to date, selfhosters?

    Jump

  • I've mostly got this working but no matter what I do I can't get UDP and direct connections working if the embedded derp server is enabled (and the only accessible relay).

    Speeds were slow at first but it's been fine lately so I'm not sweating over it too much, but it'd be nice to get that last piece working.

  • Anyone tried cloud gaming?

    Jump

  • It's better than it used to be but sunshine/moonlight still blows it out of the water

  • What are your VPN recommendations for accessing self-hosted applications from the outside?

    Jump

  • Getting it up and running was pretty easy but admittedly I'm starting to hit some snags with split DNS and Authentik. Totally doable but taking a lot of work for sure.

    In the process I'm also moving my entire domain to a different name and got timed out by letsencrypt lmao so I guess I'll try some more tomorrow.

  • What are your VPN recommendations for accessing self-hosted applications from the outside?

    Jump

  • I went with a Racknerd debian 12 box, DigitalOcean is a bit overpriced for what you get. There's a whole list of recommendations in Pangolin's wiki iirc

  • What are your VPN recommendations for accessing self-hosted applications from the outside?

    Jump

  • The variant version of number 2, which is more work to set up of course, is Pangolin on a VPS. Basically serves the same purpose but skips Cloudflare entirely.

    I'm in the process of setting up Pangolin and Headscale on a VPS to expose a small handful of services and to replace my wg-easy setup. Currently chaining wg-easy through a gluetun container, so with a single VPN connection I get LAN access and protect my outbound traffic, but I can't for the life of me get the same setup working on wg-easy v15, so I'm going to give tailscale/headscale a try with a gluetun exit node.

  • Custom remote backup

    Jump

  • Depends on how much you use it. Since I don't use mine for media, mostly for configs and service data folders, I barely scratch 120GB and I'm literally paying under a dollar a month for it right now.

  • Custom remote backup

    Jump

  • This scenario is why my offsite backup is primarily a backblaze b2 bucket, while also running a large media backup to an external HDD once a month which I keep in a storage unit. Janky but effective

    Realistically I could coordinate with my brother to set up a backup system at my family's place but it feels like a hassle

  • What are the advantages/disadvantages of the different backup solutions?

    Jump

  • Not sure about other options but Backrest has worked wonderfully for me since day 1. Basically just a GUI for Restic. My only complaints are that jobs can't be assigned to multiple repos and you can't edit a job's name or repo once created. Aside from those quirks, it works fine - I have daily, weekly, monthly, and manual jobs set up across both servers and my desktop, basically just set it and forget it.

  • What else should I self-host?

    Jump

  • I just recently started routing mine through a gluetun container, but now I'm hitting timeouts pretty consistently. Not sure if there's a solution to that or just deal with it.

  • How to combat large amounts of Ai scrapers

    Jump

  • Yeah I'd consider blocking out both the bots and AI-users a win-win lmao

  • Jellyfin over the internet

    Jump

  • I started my homelab with a couple exposed services, but frankly the security upkeep and networking headaches weren't worth the effort when 99% of this server's usage is at home anyway.

    I've considered going the Pangolin route to expose a handful of things for family but even that's just way too much effort for very little added value (plus moving my reverse proxy to a VPS doesn't sound ideal in case the internet here goes down).

    Getting 2 or 3 extra folks on to wireguard as necessary is just much easier.

  • PewDiePie: I'm DONE with Google

    Jump

  • Yeah this is why it's so offputting seeing so much praise for him here. I don't believe he's ever outright apologized and owned up to what he's said and done in the past (I could be wrong though?). Last I checked the dude was literally a neo nazi.

  • Access homeserver through VPN + route traffic with mullvad?

    Jump

  • Yeah I feel like v15 released a bit too early outside of preview builds. It's a substantial improvement but doesn't feel quite ready.

  • Access homeserver through VPN + route traffic with mullvad?

    Jump

  • I've done exactly this with wg-easy so I can use my external VPN on my phone while still connecting to my home network without toggling VPNs.

    My config here is for v14, you'll want to pin the image version: https://github.com/qdm12/gluetun/discussions/1192#discussioncomment-12973135 Note there's a small typo in the local network Down rule I added, I'm on mobile right now else I'd copy my current config instead that cleans it up a bit since this post.

    In the same thread, someone posted a fantastic guide to get it working with v15. You'll need to add an iptables rule for full LAN access if you want to enable that: https://blog.bktus.com/en/archives/2918/

    V15 was giving me issues because it didn't allow you to disable ipv6, but apparently the latest edge builds do. I haven't tried that yet

  • Friendly reminder that Tailscale is VC-funded and driving towards IPO

    Jump

  • Nah, but personally I have no need to expose anything and would rather avoid the security headaches and such that come with it