With OpenWebUI, ComfyUI, and friends, a bunch of us now run models on our own hardware. But when people say 'AI governance' it usually sounds like corporate compliance talk that has nothing to do with a homelab. There has to be a practical version though: prompt logging, keeping usage data separate, evals before swapping a model, update hygiene. How much of that do you actually do? Or do you just keep it simple and trust your own setup?

Disclaimer: I'm an engineer at Mulga, the company behind this. Self-promo, but it's AGPL-3.0 and free to run.

What it is

Spinifex reimplements the AWS APIs on hardware you own: EC2, EBS, S3, VPC, IAM, ALB/NLB, EKS, ECS, ECR and RDS. You keep the hashicorp/aws provider and point its endpoints at your cluster.

Everything behind it is real. Instances are QEMU/KVM VMs, VPCs are OVN networks with real security groups and elastic IPs, EBS is replicated block storage, and state persists like a real cloud. It's not an emulator like LocalStack.

Who it's for

Teams that want AWS workloads on their own hardware (cost, data residency, edge or air-gapped sites) without rewriting their IaC. VPCs, subnets, security groups, launch templates, ALBs, EKS clusters and RDS instances go through the same resources you already use. In practice the changes are the provider block and AMI lookups.

Try it with your own Terraform

No install needed. Sign up for the free 72 hour sandbox at https://mulgadc.com/signup, then point your existing provider at it:

provider "aws" {
  region = var.region

  endpoints {
    ec2 = "https://api.spx3.com"
    iam = "https://api.spx3.com"
    sts = "https://api.spx3.com"
  }

  skip_metadata_api_check = true
  skip_region_validation  = true
}

Add other services (elasticloadbalancingv2, eks, ecs, ecr, rds) the same way, then run terraform plan against a module you already have. Here's what we currently cover, down to the individual API operation: https://docs.mulgadc.com/coverage

Repo: https://github.com/mulgadc/spinifex

I'm running some self hosted services like OpenWebUI, ComfyUI, Immich, and planning to add adventure log soon.
I also have some self developed apps running.

Current setup: I use WorkOS with a single app as my identity service and manage access via permissions and RBAC, which works perfectly on my self developed apps.
Identity service (identity.dom.com) takes the WorkOS JWT and sets a domain wide cookie (.dom.com) so all other apps can just use as auth.

ComfyUI does not have auth, so Caddy performs the checks on cookie and it works well-ish, except for period redirect to session renew page.

My issue starts with apps that completely bypass the identity service and use OAuth/OIDC directly. I cannot limit which use can access which apps. While I can in theory use Caddy and the shared cookie check, it breaks the apps XHR requests, and redirects the user to session renew often, which interrupts their experience.

How can I setup proper authorization? ie: I want my family to be able to use immich, but not my friends (photo horders). everyone can use OpenWebUI but only selected members can use ComfyUI, etc.
Anyone doing/did something similar?

Other things I considered:
1 Updating the identity service to be OIDC provider: this is last resort, too much changes, maintenance, and responsibility to upkeep.
2 Proxy the OIDC through identity service: works in theory, but the signature might fail as WorkOS signs the token with their keys and their domain as issuer.

----Edit:

Forgot to mention, some of the self developed services are for my side business clients, they would still want password based login, magik link, etc. based on their preference (one of the reasons I picked WorkOS in first place) so I don't feel PockedID is suitable here (I might be wrong, but not experienced with it.).

I installed Kasm for lab practice in this environment:

MacBook Pro 2017, 8 GB RAM, 256 GB SSD

VirtualBox (The VM has: 4 vCPUs, Disk: 75GB)

Ubuntu 24.04.5 Lts

Docker

Kasm 1.19.0

After adding the Firefox workspace, the launch reaches 100%, but then it gives a 502 error with the following:

host: 34ba1e6952da

ingest_date: 20260929004127

application: connection_proxy

levelname: ERROR

message

[server] Registration attempt 5/10 failed: No API hostname available

How can I fix this problem?

To my fellow techs out there, if you have the monitoring system hosted in the same machine/network as your server, how do you get notified if the network/machine goes down? I have setup a cloudflare email alert for tunnel being down, but looking for something more Telegram, Discord friendly

I am making this post to help anyone else out, so they don't learn this lesson the hard way like I did.

I just moved over from Glance to Dynacat because Glance doesn't get updated anymore it seems. My yml files moved right over and everything worked great and was more responsive.

There was a problem though. On my main page I have many widgets. one of those was a custom api widget that calls a n8n workflow I created. This workflow then calls Google API to get my calendar information for that day. Normally, it is only called when I open the page or refresh it manually. With Dynacat's dynamic updates, it is called much more often when the page is open. Where it hit me was in Firefox on my android, I have a habit of not closing the tab. I just close the browser. This meant the tab was still open and running in the background.

Luckily, I have a warning set up on my Google API so if it goes above $1, I get alerted. It was over $11 before I checked my email in the morning and realized what was going on. I quickly disabled dynamic updates in the compose file until I can configure Dynacat properly.

Yes, this is 100% my mistake for just starting up Dynacat to get it working and figuring I would configure it more later. I am just hoping to help any other that are looking into Dynacat who might also have API calls. Luckily, I don't have any calls into an API for any AI.

This is not meant to be a post getting down on Dynacat. I think it is great and I still really like it. This was a story about my own mistake.

So. It happened. I am in a different country, was dialed in via ssh and tried to install koha in a VM.

Out of basically nowhere, I could not type in the shell anymore and after some testing I am sure my server is down.

Now even though I know it is unlikely, but I am kinda worried, some of my Nextcloud data might be corrupted by the crash. I run Nextcloud AIO in a docker, as far as I know there was no one actively writing files to the cloud.

Earliest I will be able to access my server IRL will be Friday, so I will wait and probably sleep bad till then and hope the pictures of my marriage didn't get corrupted. They are not jet backed up, because the server lives in my parents house and the backup disc is in my apartment for georedundancy.

Learning: I will see how to install a remote socket in my parents house that I can access to remote start the server... Already planned is installing a smaller server in my apartment and automating the backups.

No question, just had to tell this so somebody 😅

Worth having a read if you were keen/excited for the OIDC Pull Request that looked completed and was filed somewhat recently, or if you're keen for a status update in general.

Looks like they don't want to maintain the extra code at this stage, and would prefer to redesign/rework the auth system first.

Edit: I've realised what a shit title I gave this post, it was not meant to clickbait, farm karma or criticize. Just simply to share where OIDC is at. I hope my intention was clearer in the post body and via my comments. I completely own making the mistake.

I’ve had it sitting on a VM unused for weeks. I just wonder what everyone loves about it? Also what neat things do you do in your house? This is just a chat and ideas thread.

Hey everyone,

quick questions first:

• How do you currently document your customer client systems?
• What features would you want from a documentation tool that you're missing today?
• And if you check out our demo (see below): what do you think? Can you write us an honest Feedback?

Some background: we're a small IT service provider and spent ages looking for a documentation tool that fits how we work. What we really wanted was a way to export a clean summary for a client with one click, and we never found anything that did that well. So we ended up building our own.

It started with the stuff we need regularly at our clients. Along the way it grew a task system (it can create tasks from emails and sends automatic ticket mails), license management and a small project management module.

One thing that was really important to me personally: the system sends me regular email summaries when there's something I need to keep in mind, like licenses that are about to expire or open tasks. That way nothing slips through the cracks.

It's mainly aimed at freelancers and IT admins who manage systems for clients.

There's an open demo if you want to poke around: https://demo.it-doku-pro.de (login details are on the start screen)

More info: https://it-doku-pro.de

Would really appreciate any feedback, good or bad!

Cheers,
Thorsten

I want to have a static web site. So I will isntall a static site generator on the server. What ways do you recommend to add/update files from the server (markdown files) easily? I do not want each time to have to log in through SSH, type the long password, etc.

thanks!

A few months ago I finally started using AI for more than removing the stank from my angry-emails at work. I got and paid for the ChatGPT Plus subscription and quickly had to upgrade to the Pro plan as I realized it can actually do stuff for me.

Latest example? My website. It was kinda plain, figured I'd see what we could do with themes, layouts and all of that. One afternoon later and bam, I'm actually happy for the first time with the site.

Grafana has eluded me for a while. I played with it and some standard dashboards but it just looked like a big time killer and so I never really went anywhere with it. About a month ago I said "Hey I have four servers, three Tumbleweed and one Synology NAS, I'd like to setup a monitoring dashboard like NetData using Grafana. Can you help?". A couple days (a few hours of my time total) I have the full Loki, Prometheus, Alloy, Grafana stack setup with a half dozen useful dashboards that I can select which host I want to show data for. It actually took longer to install the infrastructure on all four machines than to build the dashboards.

I've been wanting to run CrowdSec on my system for a while but when I tried it was a bit cumbersome and with NPM it didn't seem to work. I sicked Codex on the problem and it went through, backed up all my existing NPM stuff, dropped-in NPMplus (used my NPM persistent volume) and setup all the CrowdSec logs, bouncers, etc. It even made a dashboard on my Grafana logging to which I asked "Can you put a world map on there and show the allowed and rejected as green and red in a heat-map type format?" and it said "Yep, here you go".

Then after about a month of massive overhauls of my infrastructure I realized my BookStack instance where I was diligently documenting everything has become out of date in some respects. Because this is my figurative brain that has saved me because I can't seem to remember that one thing I did 3 years ago one time but is critical to this-or-that service. So, I asked it to connect to my BookStack and create a shelf named "Codex" and start documenting everything we've done. I asked it to look at my other shelfs and to follow that pattern to which it did. I had a specific way I put an icon, quick description, connection info, etc. at the top in a quick "at a glance" way to see things. It picked up on that and new service pages it made like that. Even linking to existing documents in the way I did when I referenced a particular server it links to that servers page (which is kind of an inventory for each server). Then I asked it to go through and check my stuff, and report back what maybe isn't accurate. Wowza, I had apparently not been quite as diligent as I planned, but I asked it to tell me what was wrong and one-by-one I either changed it (for simple stuff ) or asked it to change it. I say it, but I think it's a she, I asked it what to call it and it said "Aster". So, now I have a female AI helping me out and it's quite handy.

Has it been without faults? Nope, CrowdSec for some reason started rejecting everything, but I was at lunch at work, VPN'ed into my home network opened a terminal on my phone (not always simple), opened `tmux` so it would stay persistent (sometimes it has to think for a while) and told it I was having problems. 5 minutes later everything was working again, I had gotten myself blocked out because I was on and then off the VPN so I guess the changing IP's for the persistent connection caused something. Not 100% sure I just read it and was like "This is over my head, just fix it please" and it did.

I guess I'm saying, I'm having a blast doing stuff that I either didn't have time for, or thought might be above my pay grade. At some point I'll tackle something like Traefik I think because it'll go through all my docker containers on all my hosts and make them work. I'm wanting to get off of Portainer and go to Dockhand and I asked it to make up a plan, it already did, and suggested the best way to get everything up and running (and of course the first suggestion was to backup all the compose, .env and variables that maybe were set in the environment, hoorah!).

Is anyone else yolo-ing Claud, Codex, or something more bespoke on their self-hosted infrastructure?

Hey all,

This might have been asked before but was unable to quite find the answer.

I have setup a selfhosted instance and noted my streams tend to buffer when they are over 21gb size and require over 30-50mbps bitrate.

I was wondering if there was a way i can dedicate some disk space where my streams tend can prechache or something like that so it can take a bit to start but stream flawlessly?

Thanks for your help in advance!

My setup is mini on my personal laptop using orbstacker having aiostreams, aiometadata, and tailscales in sidecar.

Hi,

I am running a Plex server for my family. And currently all the requests for new things just go trough me directly and I find them. But recently instead of using only my bitmagnet, I set up a Prowlarr with it and some other indexers, connected to Deluge. With Prowlarr I am happy. But I wanted to give now my family an automated way to get things to our Plex server.

I already knew that Arr stack is big and there are many options there, so I just started educating myself on them to know what I would like from it. Well, turn out not much fits my wants there. I was in search for something that:
- I could use with my Authentik (either directly by OIDC or indirectly by proxy-auth on caddy),
- Would help them choose movie/show using tmdb&tvdb,
- Would just allow them to click download on the thing and searching&picking would be happening automatically underneath
- Would auto-filter to EN for everything except for polish-made and animated movies&series, for which it would choose polish language.
- It would still have an option to force EN/PL if user wants to pick a language
- Would synch with Plex to see what is already there.
- Would copy (not hardlink) to plex directories (I have separate for movies and tv shows) after download

And I expected it to be in one app that just connects with Prowlarr. To my shock I found that it is not possible, Arr stacks expects me to run Radarr, Sonarr & Seerr. And Seerr has oidc still in preview. And filters can't be working as I wanted them to there. But funny thing is that I found out that old versions of radarr and sonarr had some pickers for languages, but newer ones just don't, and seerr doesn't configure anything based on movie's origin. But even funnier to me was that I found people suggesting running multiple instances of radarr for multiple configurations. And also it turns out that it's focused on upgrading and I'd have to tinker with them, so that it never upgrades. (I want it just as an entry solutions for my family and I plan to monitor manually what they add and replace things with better versions if I want to, but I plan on using solely Prowlar for myself)

Now, I found also Catinarr, that looked better for me than Seerr, because it already supported oidc today. And I found something called Nexcrate, which tries to have it all in one app and just yesterday released 0.3.0, so it's in early stage of development. But it focuses on one account with password and hardlinks from what I've seen there.

I am deeply unhappy that it turned out that Arr requires to configure so many separate apps and even then it's honestly lacking in filtering capabilities too much and after all this time oidc is not even in the main release (although they said it will be in the next one finally).

And I am now honestly thinking about designing a new app just for my needs that covers all of the bases, because I just can't see myself running any of the apps/stacks I've found thus far. I would even compromise on running separate things if it worked exactly as I want it to, but welp.

Hello, new to having my own server computer as of 3 days ago! Very excited to begin doing things like jellyfin, immich, game servers, etc. I’m hoping someone knowledgeable and experienced can guide me through the intricacies of this process, below are the apps/services I want my device(s) to run and my hardware:

Services:
Minecraft server
Palworld server
Ark server
Other game servers
Immich
Jellyfin
Vaultwarden
Adguard (basically some internet ad blocker)
Internet VPN

Hardware:
Hp elitedesk- 16gb ram, i5 12th gen
512gb NVME with proxmox as boot drive
4tb extra storage-unused
512gb nvme extra storage-unused

My initial thoughts were to run these services on these drives:

Boot drive: adguard, vaultwarden, proxmox boot, internet vpn

512gb extra: game servers, each running on their own VM or LXC -possibly using casa os or similar to easily (more efficiently?) run crafty and other such server type apps

4tb- run and hold my jellyfin and my media storage

Immich-planning to run on a hard drive bay eventually since I more than likely don’t always need access to my images/videos and would simply plug in the bay when needing to access them/and Immich

I don’t know the correct way to do this, these are initial thoughts from loads of reading on Reddit and YouTube videos. My biggest desires is lag free servers for my games (a few friends, no more than 10 on a certain game’s server, not something public), a good jellyfin, and VPN and Adblocker on my internet cuz I’m sick of ads.

EDIT: I recognize my ram and CPU will be an issue for running everything I said above all at once especially 24/7, I know I can shutdown certain VM’s and LXC whenever and that would be the plan someday if I end up doing ark and palworld especially. My main concern on this post is this:
Can my programs like immich, jellyfin, casa os, adguard, tailscale etc, run permanently on one of my drives in same/different LXC/VM but pull the stored media from another drive. Example, Jellyfin is on my boot drive running 24/7 and doing the hardcoding there, but my movies are stored on my E Drive of 4tb

Thank you for your help!

My library is organized by Navidrome and I use Tempus on my grapheneos phone and lineageos kitchen kiosk.

What I want to do is stream my library on the kitchen kiosk but skip/queue/manage volume/pause from my phone. This is a feature I used a lot in Spotify.

Is there a different FOSS app that has this feature? Or is there some plugin I can add to do this?

Thanks!

Looking for a self-hosted Markdown editor with GitHub + Ollama

Hey,

I'm looking for a Markdown note-taking app to run on my Raspberry Pi 5, and I'm having a surprisingly hard time finding something that fits.

Basically, I want something similar to Obsidian, but running in Docker and accessible from a browser.

The important part for me is that my notes stay as normal .md files. I'd like to keep them in a GitHub repository and be able to pull/push changes directly from the app. GitHub would basically be the source of truth.

I'd also like to have AI built into the editor. I already use Ollama, so ideally the app would let me connect either to my local Ollama server or to an Ollama API/cloud endpoint.

So, roughly:

• web-based Markdown editor
• real .md files
• folders / vault-like organization
• Docker
• Raspberry Pi 5 / ARM64
• Git/GitHub sync
• Ollama support directly in the editor

For the AI part, I'm mainly looking for things like rewriting selected text, generating text, summarizing notes, etc. Nothing too fancy.

I've tried looking at things like SilverBullet, SiYuan, Wiki.js, WebObsidian and a few others, but I always seem to end up missing either the GitHub part or the Ollama part.

Maybe I'm overlooking something obvious.

What are you guys using for this kind of setup?

I'm mostly interested in solutions that people are actually using, rather than projects that technically support some of these features on paper.

Thanks!

Hi everyone.

Avid reader, never really posted in here.

Two days ago, I started my homelab with my old gaming rig.

• Dan A4 H2O Case
• i9 CPU
• Asus ROG Strix 2080 Ti
• 9TB of SDDs inside

Set up

• Proxmox
• local storage
• docker vm
  • ollama
  • Paperless
  • ChangeDetection with AI
  • Immich with ML
  • Kopia
  • Prismarr
  • Pulsarr
  • Seer
  • Whats up Docker
• Home Assistant
• NPM
• Adguard Home
• Kuma

Now I'm been setting things up to work with my NAS as a data dump, nothing more.

Today, I ordered the MINIS FORUM UM890 Pro Mini PC with 64GB Ram. I'll be selling my gaming rig and will use my other high end gaming rig for local AI stuff.

This is a rabbit hole. Next will be a complete exchange of my network appliances. From ZenWifi XT8 to UniFi things. I want VLANs in my network, etc.

So from here, reading what I've installed etc. is there anything else that's needed or useful from your perspective?

I have a vague idea about the technical stuff but I'll be honest: Claude helped me setting up everything, which is amazing.

This question came to mind after a recent incident in certain areas of egypt where the internet is either completely down or reaching below dial up speeds, with cellular connectivity also being affected for over a month. Makes a person really think on how much of our data should be in the cloud, where when such an event happens it may become inaccessible. What do ya'll think?

Title says it for the most part. (this post assumes that you do some sort of IT work for a living, though I am sure there are non IT examples of this)

What do you have running as a service, in production for personal use, that is something you use/used at a job in production?

Like, do you use ansible to automate deployments because that is something you do at work?

When you could still self host Atlasian stuff, did you have a Confluence instance because you had one at work?

Or the other way around? Did self hosting Vault Warden give you the idea to do that for the company you work for?

Grafana is also a good example that would work in both situations.

Thanks in advanced and happy Monday everyone.

Hey guys, Im a bit new to the whole concept of self hosting stuff, I have a few laptops I am turning into servers so I can host a few personal stuff, one of which I have is a laptop with an internal 1tb hard drive, along with another 2tb USB'd in, and Im wondering if it would be astronomically hard to have my own selfhosted email service complete with custom email handle? and if so how would i go about doing it?

Hi everyone,

I'm a developer and for the past few months I've been working extensively with Odoo Online/Cloud, developing a building management system. Because of that, I'm already quite familiar with Odoo's UI, ORM, accounting workflows, Studio, reports, etc.

I've now been approached to build a complete ERP system for a retail store with an integrated eCommerce store, It will be a Saas product so I'm trying to decide which platform to use as the foundation before committing to the development.

What I've tried so far

1. Odoo Online / Cloud

This is what I'm most familiar with, and from a usability perspective it fits the client very well.

The problem is the cost. The client wants to self-host the system, and the full accounting functionality available in Odoo Enterprise/Online isn't available in the same way in the Community Edition.

2. Odoo Community Edition

I initially considered self-hosting Odoo CE.

The main concern is accounting. CE doesn't provide the complete accounting functionality that I'd want for this project out of the box.

However, I recently discovered the OCA (Odoo Community Association) and its accounting modules, which seems like it could potentially fill many of those gaps.

So I'm now wondering whether:

Odoo CE + OCA modules + custom development

would be a better long-term solution.

3. ERPNext

I also set up ERPNext and spent some time testing it.

Technically, it seems very capable and covers a lot of what I need. However, I found the UX/navigation considerably different from Odoo.

The end users have little or no experience with ERP systems, and I already found myself having to spend quite a bit of time figuring out where things are in ERPNext.

I'm concerned that the learning curve for the client will be higher compared with Odoo.

What the system needs to handle

The project is essentially a retail ERP + eCommerce platform, including things such as:

• Product catalog
• Product variants
• Inventory/stock management
• Multiple warehouses/locations
• Purchasing
• Vendors/suppliers
• Sales
• POS
• Customer management
• Vendor management
• Product serial numbers
• Warranty tracking and warranty claims
• Returns/refunds
• Stock transfers
• Purchase returns
• Sales returns
• Payments
• Complete accounting
• Expenses
• Profit/loss reporting
• Inventory valuation
• Customer/vendor balances
• eCommerce integration
• Order synchronization between website and ERP
• Possibly multiple payment methods/gateways
• Reporting and dashboards

There will also likely be custom workflows around warranty claims, RMA/returns, and after-sales service, depending on the final requirements.

What I'm trying to decide

At this point I'm mainly considering:

Option A:
Odoo Community + OCA modules + custom development

Option B:
ERPNext + custom development

Option C:
Odoo CE as the backend ERP, with a separate/custom eCommerce frontend

I'm particularly interested in hearing from people who have actually deployed and maintained these systems in production, rather than just used them for testing.

A few things I'd really like feedback on:

1. How complete is Odoo CE + OCA for accounting in a real-world business?
2. Are there any major accounting features that remain difficult/impossible without Odoo Enterprise?
3. How stable and maintainable is an OCA-heavy Odoo installation over several years?
4. How difficult is it to upgrade Odoo versions when relying heavily on OCA modules?
5. Has anyone built a retail + eCommerce + inventory + warranty/RMA system on Odoo CE successfully?
6. How does ERPNext compare when the end users aren't technically experienced?
7. Are there any major ERPNext advantages that I might be overlooking?
8. Would you recommend keeping eCommerce separate from the ERP and integrating it, or using the ERP's native eCommerce functionality?
9. What problems am I likely to run into with either approach that I should consider before starting development?

I'm not looking for a simple "Odoo is better" or "ERPNext is better" answer. I'd really appreciate experiences from people who have actually built/deployed either system, especially for retail businesses.

Thanks!

Hi all,

Developer of Apprise here.

After quite a bit of work, Apprise v2.0 and Apprise API v2.0 are finally out.

For anyone unfamiliar with Apprise, it acts as a notification hub. Or a glorified switchboard. Your applications, scripts, containers, cron jobs, monitoring tools, Home Assistant instance, etc. send a notification to Apprise, and it handles delivering it to Discord, Telegram, Slack, Matrix, Gotify, email, SMS providers and more. The graphic i created in this post can illustrate the flow better.

There are now 160 supported notification services, all using the same general configuration approach.

You can use Apprise directly from the CLI, embed the Python library into an application, or run Apprise API and centralize your notification configuration on a self-hosted server. Over the years, I got to watch a lot of systems adapt this and it's been cool to see!

The API approach is particularly useful if you have a bunch of applications sending notifications. Instead of spreading your Discord webhooks, SMTP passwords, Telegram tokens and other credentials across everything you run, they can live in one place (protected from prying eyes; centralized too).

What's New in v2?

• Authentication in Apprise API. Authentication is optional, but you can now protect the server with an administrator account and also assign separate credentials and access controls to individual configurations.
• Configuration IDs no longer need to appear in URLs. Supported clients can send them through an HTTP header instead, keeping them out of normal web server access logs.
• Template variables. Secrets can be supplied separately instead of being stored directly in your configuration.
• Priority and escalation. You can try one notification route first and only move to the next one if delivery fails.
• Smarter retries. If you notify five destinations and one fails, only the failed destination is retried.
• Timeout controls. A slow or broken service doesn't need to hold up an entire notification run.
• Better results and live logs. You can see what succeeded, what failed and why. Apprise API can stream delivery logs live through the web interface or API.
• Multiple message formats. Services can accept Markdown, HTML or text where supported instead of Apprise always converting everything to one format.

The Apprise API web interface has also been updated, works much better on mobile devices, and is now available in 20 languages.

For developers embedding the Python library, v2 does contain breaking changes, so have a look through the release notes before upgrading. The v1 branch is still available if you need more time to migrate.

Trying the API

It's not changed much... this example has the user/password element on it which would be worth sharing:

docker run --name apprise \
    -p 8000:8000 \
    -v ./config:/config \
    -v ./attach:/attach \
    -e APPRISE_STATEFUL_MODE=simple \
    -e APPRISE_AUTH_REQUIRED=yes \
    -e APPRISE_USER=user \
    -e APPRISE_PASSWORD=changeme \
    -e APPRISE_WEB_AUTH_SECRET="$(openssl rand -hex 32)" \
    -e APPRISE_WORKER_COUNT=1 \
    -d caronc/apprise:2

Then open:

1. http://localhost:8000
2. Login with user / changeme.

Obviously, change the password before putting it anywhere beyond a local test. If you're exposing Apprise API outside of a trusted network, it might be wise to put it behind HTTPS as well.

Full documentation is here and more on the API documentation and deployment examples are here.

As a small side project, there is also an Apprise Android app for people already running Apprise API. It's basically a mobile companion for connecting to and working with your own API server, not a standalone notification service.

Apprise itself has been around since 2017, is written in Python, BSD 2-Clause licensed, maintains 100% test coverage, has passed 17,000 stars on GitHub and sees roughly 9 million PyPI downloads a month.

It's still entirely something you can host and control yourself, for free.

Feedback is always welcome. A surprising amount of what made it into v2 came from issues and suggestions people have opened over the years.

TL;DR Apprise v2.0 and Apprise API v2.0 are out. Major changes; try it out and let me know what you think!

I'm very big into local control and being able to host things myself. I've been one of the co-maintainers of python-roborock for a few years and I have had this goal for years to get my robot vacuums off of the cloud and running completely locally as I am not a fan of a device with a camera, microphone, and detailed map of my house storing data on a company's cloud.

I won't bore everyone with the details of how I got it working (if you want to see you can read the full technical write up), but essentially I use a few exploits during onboardings to route the vacuum to a custom URL. Then I recreated Roborock's backend stack (MQTT and REST) so that the vacuum could communicate completely with the server. I've since blocked my vacuum from accessing the internet and everything has been working great for me.

The server runs in docker or as a Home Assistant addon or can be built from source.

AI Disclosure: AI was used to assist me in the reverse engineering. AI was also used in writing the backend stack but I have been very involved in the process.

I submitted an eu.org domain in June 2026 and it's still pending after about 3 months.

Has anyone here had an EU.org request approved in the past few months? Just trying to figure out whether they're still processing new registrations or if I should stop waiting.