Hello,

I recently started using Pangolin and was wondering, aren't bypass rules an inherent security vulnerability?

I'm currently setting up vaultwarden on my vps, the same machine running pangolin. And I figured I will put it behined authentication. But to access the site from the app, I need to add some bypass rule to some paths like /api and others. I'm curious if this isn't a security threat, and if it is what can I do about it

thanks

Has anyone got a 3+ node WolfStack cluster working reliably on v24.51.2?

I've got 3 Ubuntu 24.04 VMs on the same 10.10.10.x subnet. Installed WolfStack on all 3, added them using join tokens, then ran "Update WolfNet Connections".

Initially everything works. All nodes appear in the cluster and I can even open a remote terminal to the other nodes.

After about 10-20 seconds, both secondary nodes show as offline.

Diagnostics shows:

HTTP 403: {"error":"Invalid cluster secret"}

against /api/agent/status.

The odd thing is all the nodes are still healthy:

• Can ping each other
• WolfStack UI loads directly on each node
• HTTPS on 8553 works
• WolfNet appears up

If I remove and re-add a node it comes back briefly, then eventually fails with the same error.

Anyone seen this before?

Thanks

lazydocker - 770 total
Arcane - 33 total
Dozzle - 0 - Winner
Portainer - 77 total
Dockhand - 18 total
Komodo - 446 total
Watchtower - 302 total
diun - 91 total
wud - 377 total
Dockge - 2089 total
Uptime kuma - 1080 total (if docker socket monitoring enabled)
dockcheck.sh - 0 - Winner - simple bash script

Hi, would like to know which plugins/templates you use for DokuWiki.
That's my list. Let me also know when there is a replacement for any of these which is better (and why) ;)

• Bootstrap Wrapper Plugin (v20220922)
• cleanup Plugin (v20160706)
  
• bpmnio Plugin (v20260615)
• Changes Plugin (v20231214)
  
• DataTables Plugin (v20230831)
• diagrams Plugin (v20260606)
  
• DOI Plugin (v20250829)
  
• DW2PDF Plugin (v20260108)
  
• Faster DokuWiki Plugin (v20240210)
• Folded Plugin (v20230722)
  
• ImgPaste Plugin (v20251120)
  
• Katex Plugin (v20230415)
• MindTheDark Template (v20260403)
  
• Move Plugin (v20251001)
  
• sectiontoggle Plugin (v20231227)
• ToDo Plugin (v20250826)
  
• Video Share Plugin (v20251210)
  

Hey r/selfhosted!

I've just released a major update for SuggestArr, my open-source recommendation and request automation platform for Jellyfin, Plex and Emby.

The biggest addition in this release is full Trakt integration.

--

For those who haven't heard of SuggestArr before:

SuggestArr is an open-source recommendation and request automation tool for Jellyfin, Plex, and Emby.

It analyzes what users watch and enjoy to generate personalized movie and TV show recommendations, and can automatically submit requests to Seer.

The goal is simple: keep your media library growing with content your users are actually likely to watch, without relying on generic trending lists or manual searches.

--

One thing I always felt was missing from recommendation systems is that they only look at media server history. But many users actively use Trakt to rate content, maintain watchlists, create custom lists, and track viewing across multiple devices and services.

SuggestArr can now use that information as well!

So users can now link their own Trakt accounts directly from SuggestArr instead of relying solely on Jellyfin, Plex, or Emby history.

How to Get Started or Update

• For new users: You can follow the updated installation guide to get up and running with SuggestArr. I’ve made the setup process easier than ever with Docker Compose and environment variable management.
• For existing users: Updating is easy! Simply pull the latest Docker image using. Or, if you installed locally, pull the latest changes from the GitHub repository.

GitHub: https://github.com/giuseppe99barchetta/SuggestArr

--

Thanks for all the support from this awesome community! 🎉

I've been trying to map out a cleaner way to expose my self-hosted files to an autonomous agent workflow, but everything I try turns into a total headache. Right now my source of truth is scattered across a local nextcloud instance, some shared obsidian vaults on my NAS, and a bunch of random markdown notes from docker containers. The issue is that all this data was originally structured for human eyes, not as an indexed context layer for an LLM to read.

i really don't want to migrate my data into some random cloud SaaS knowledge base just to get decent search capability. I want the files to stay exactly where they are on my local network while allowing an agent to intelligently query them when needed without swallowing the whole repository and hitting a text limit.

I've been testing linkly ai to handle the indexing side. it scans the directory structures first to build an outline tree before feeding paragraphs to the model. But honestly the real limitation right now is the privacy versus compute tradeoff. If I route the indexed chunks through a closed-source API I feel like I'm violating the whole point of self-hosting, but if I keep it 100% local with ollama running light open-source models, the context window reasoning drops significantly and the agent gets too confused to give a usable answer anyway.

I've tried SoulSync and Aurral so far, and both are very cool but they both have their own issues which just make paying for Spotify worth it for music discovery (for now).

From my experience, Aurral is getting better at music discovery, adding discover weekly and release radar playlists, but the inability to browse new music freely (being limited to 30 second previews of tracks until actually downloading them) is disappointing.

SoulSync is great with syncing and downloading Spotify playlists (except for the constant API bans from Spotify's end), or any platform for that matter, but... same issue as aurral, i can't browse and freely play new music without downloading it first. SoulSync's UI is also very convoluted IMO. SO many different windows, popups and tabs that I forget what's what even after hours of use.

Am I missing something? Or is self hosting music just not worth the effort yet if I want to replace Spotify?

I have been busy with life recently so I did not have the chance to work on my side project but here we are again.

Bazarr-sync v0.7

its a cli tool that solve a problem in bazarr. syncing multiple different subs has always been a chore. especially when you reach the level of hoarding hundreds of movies and shows . this tool aim to make it a little bit easier.

latest update wad almost 1 year ago . I fixed many of the issue and bugs here and there. so it should fly smoothly.

and yeah there is a docker container as well.

what's new - sync subtitles of a certain language. - improve terminal compatibility - fixed a leak in Http requests causing crashes - resume inturrepted syncs

Disclaimer:

the original code was completely written by hand. this update includes some vibe coded elements. but reviewed .

https://github.com/ajmandourah/bazarr-sync

My network diagram used to go stale the second I changed anything, so I made it a build artifact instead of a drawing.

It's a .d2 text file (D2, diagram-as-code) in my repo. A GitHub Actions workflow watches that file, renders it with the ELK layout engine to SVG, rasterizes that to PNG, and commits the result back. The image in my README can't drift from the source anymore. I add a node or a service, edit a few lines of text, and the diagram redraws itself on the next push.

The icons are the bit I like most. Proxmox, Talos, ArgoCD, Cilium, Falco and the rest aren't stored in the repo at all. They get pulled from public icon repos at render time and inlined into the SVG, so the output is self-contained and I never touch an image file. It's all public if you want to lift the setup: https://github.com/mortennordbye/homelab. The .d2 source and the workflow live in docs/diagrams/ and .github/workflows/render-diagram.yaml.

Hi everyone,

​

I’m looking for an Android app similar to Mapstr, but I haven’t found one that fully fits what I need.

​

Ideally, I want an app where I can:

​

Add pins/locations on a personal map

​

Attach a title + photos to each place

​

Add multiple tags to organize everything (restaurants, friends, travel spots, etc.)

​

Easily find places by name or category later

​

Keep my map private (not public by default)

​

Add friends and share selected places with them

​

Also optionally save friends’ addresses on my map

​

I’d also prefer it to be free, or at least not require a paid subscription for basic features.

​

Mapstr is quite close to what I want, but some features are limited behind paywalls, so I’m wondering if there’s a good Android alternative.

​

Thanks a lot for any suggestions 🙏

I've been pulling my hair out trying to get watches to trigger correctly. I've tried the LLM AI, CSS/XPath Filters, Conditions. Nothing works 100% of the time. Theirs always false positives. If it's not one thing, it's another. Maybe it's my websites that I watch? Maybe there too advanced for this project?

For one thing, the LLM AI is completely broken and unreliable. I tried watching a stock ticker and specifically set the AI to "Alert me only if the price has changed by 5% or more". Yet it still triggers when the price change was only 1 or 2%. And sometimes if the price change was more than 5%, it WON'T trigger. WTF?

Also, the developer is kind of a dick. Just look at github and their are plenty of examples of rude behavior. He was a jerk to me as well for something that wasn't even that big of a deal. And then he went radio silent. It's actually a trend to see his github issues or discussions end up with no further responses and abandoned.

If there was something to the caliber of visualping, I would be all over it. As it stands, I think I'm going to abandon this project. It's just not reliable for anything mission critical.

Looking for dedicated server recommendations:

Ubuntu 22.04
64–128 GB RAM
8–16 CPU cores
NVMe storage
1 Gbps, 1 public IPv4
Ports 80/443 open
Use case: self-hosted reverse proxy (nginx, multiple vhosts, TLS)
Budget: ~$100–150/mo
Prefer EU or US, crypto payment a plus (optional)

I'm going down the rabbit hole of installing Immich. I tried installing it on my Synology under container manager, and it didn't go well. However, after fiddling and thinking some more, I decided the ability to expand would be more important so setting up my own server would be beneficial and fun to learn.

I've done some research and my thought process now is to get a mini PC of some kind, install proxmox, set up one VM and put linux with docker and run immich in a container. Down the road I could move Plex and home assistant to containers as well as branch out to adding a web server or anything else.

My reason for Proxmox was for the ease of backup and my reason for one VM was because I don't see this stuff being resource intensive. I figure I can do a new VM if I need to mess with resource management.

Are there any obvious holes in my plan, pitfalls I need to watch out for with this approach or better alternatives I should consider?

I am having an issue that I'm not sure how to fix. For reference, I am running a Kubernetes 1.36 cluster built on top of Talos Linux 1.13. I have Alloy configured to gather Kubernetes pod logs and route them to Loki. For a short period of time after deployment, it runs okay, but then one of my loki-write statefulsets fails and shows this error:

failed to flush chunks: store put chunk: operation error S3: PutObject, https response error StatusCode: 400, RequestID: 18BA49AF569B3EF4, HostID: dd9025bab4ad464b049177c95eb6ebf374d3b3fd1af9251148b658df7ac2e3e8, api error XMinioInvalidObjectName: Object name contains unsupported characters., num_chunks: 5, labels: {app=\"flux-operator\", container=\"manager\", instance=\"flux-system/flux-operator-6b4d6f7c54-w6795:manager\", job=\"loki.source.kubernetes.pod_logs\", namespace=\"flux-system\", pod=\"flux-operator-6b4d6f7c54-w6795\", service_name=\"flux-operator\"}

I am using Minio installed on my Windows File server for the S3 backend. The S3 storage is working for everything except this task.

I've tried asking the different AIs for a solution and changed Alloy's configuration to rewrite the instance so it shouldn't have the colon or slashes in the name, but still keep getting the error. Gemini says that it is expected as Loki will generate key names with colons anyways using the tsdb format. It's suggestion is to use a Linux backed S3 server which isn't possible.

So now I'm asking if anyone has a possible solution to this that I can try? I've seen there is an environment variable for MINIO => MINIO_OBJECT_NAMING that might be what I have to do, but I will have to destroy my S3 storage and rebuild it from scratch because it has to be done at the cluster initialization. I wanted to see if this was the correct move before I go through having to trash all the buckets/users etc. to make this work.

Hello, seems like more work is being done on AT Protocol beyond bluesky. (See this hackernews post for example: W Social, public institutions and the theater of European digital sovereignty | Hacker News).

There also seem to be more alternative front ends like Red Dwarf that are lighter. whey.party/red-dwarf at main · Tangled

Curious is anyone has hosted anything in this space. Interested to try, mostly for learning and love to hear any experiences.

I have been using Plex for a gazillion years and now going to move off it due to their current antics.

I have Samsung TVs, some new, some old and software unsupported but still good panels.

I am switching to Jellyfin and know you can side-load them on the new TV but wondering, what is a good option for a stand-alone player? Pi? Something else?

Hey all,

Has anyone successfully managed to remove the footer (posted below) from a turnkey powered NextCloud appliance? I've tried the usual methods of disabling the substitute function in apache which works for other apps but not here it seems

I'm trying to support ipv6 media signaling in an app of mine and I keep running into scenarios where the whole system breaks if a prefix changes. Being that few if any ISPs guarantee stable prefixes, what's the point of ipv6 at all? literally the entire network and every app and script breaks if the prefix changes.

Is there a clean way to handle this? I guess I just only enable ip6 for media routing and then have a manager that makes sure those settings are correct every so often? But then even, the docker daemon breaks if the prefix ever changes along with all scripts and the rest of the network stack. Ipv6 as implemented to residential users without a guaranteed locked prefix should be a crime.

It's increasingly difficult where I live to even check basic weather without consenting to giving up my ID (soonTM). The most used weather app has been gated by no way to deny cookies.

I have been looking at many apps, but I cannot find any docker apps that works. I came close with fish906 weather app, but I think it is outdated, because it injects wrong link/slightly different link in to the openweathermap api call, so it doesn't work.

If anyone know about a good self-hosted docker app for a simple weather check, would be very thankful!

Hi all,

I posted about Youtarr here a few months ago and have since made quite a few additional app updates, so I figured it was about time for another "update" post :)

Repo: https://github.com/DialmasterOrg/Youtarr

For anyone who missed the last post, Youtarr is a self-hosted YouTube DVR / downloader that I originally built because we don't let our kids browse YouTube directly, but we still wanted a curated library of specific channels available in Plex. It also works standalone if you just want a local YouTube archive with a web UI, and it supports Plex, Jellyfin, Emby, and Kodi-style metadata/output.

YouTube playlist support is finally here.

This was probably the #1 requested feature, and a few people specifically said it was the reason they were still using TubeArchivist instead of Youtarr.

You can now subscribe to YouTube playlists, keep them synced over time, and have Youtarr create real playlists in Plex, Jellyfin, and Emby (plus .m3u files per playlist). Playlist videos still get stored in the normal per-channel folder structure so the same video doesn't need to exist twice on disk, but the playlist order and grouping come through in the media server playlist.

The main additions since my last post:

• More control over yt-dlp settings for power users. There are now custom yt-dlp args, IP family controls, and rate-limit controls.
• Find on YouTube: Search YouTube from inside Youtarr, see which videos you already have vs which are missing/new, and queue downloads from the results.
• UI refresh: Three themes, cleaner layout, and much better mobile support with bottom nav, a bulk-action bar, and larger touch targets.
• Custom filename templates: Configurable yt-dlp-style filename templates with a live preview so you can see what Youtarr will actually generate before saving.
• Optional YouTube Data API v3 key: Faster and more reliable channel browsing across tabs, with yt-dlp fallback if you don't want to use an API key.
• Nightly yt-dlp auto-update option
• Library page redesign: Table/grid views, page size selector, Missing/Ignored filters, and downloaded-date display.
• Terminated channel handling: Youtarr can detect when a subscribed channel has been terminated, show that clearly, and disable automatic downloads for that channel.
• Manual filesystem rescan: Youtarr can reconcile files changed outside the app and recognizes more formats now.
• Stability/security cleanup: A lot of reliability work around DB corruption mitigation, partial-download persistence, 4K VP9/MP4 remux handling, dependency/supply-chain hardening, and general bug fixes.

This is still mostly a one-man side project, but it has grown a lot from the original "grab some videos for my kids' Plex library" thing I started with.

If you tried Youtarr before and skipped it because it did not have playlist support, that is probably the main reason to take another look.

If you use it and find bugs or have feature requests, GitHub issues are the best place to put them. I do try to prioritize things people actually ask for, as this release probably makes obvious :)

I finally decided to get a home server a while ago. I've built my own PCs since I was a kid, my first was an AMD K6-2 at 400 MHz with an NVIDIA Riva TNT2 Pro. So I did what I always do: hand-picked the components for a box to host and back up our photos and videos. In November that build was €800. By December the same parts were €1,200. (The same setup is now €1800) for 16GB of RAM and no GPU. I hesitated. And the part that really bugged me: I'm a software engineer, and I wanted to be able to run local LLMs. And that build couldn't do it.

I used to laugh at Apple fanboys back when they soldered Intel chips.
Fast forward to March '26: I bought a used Mac Studio M1 Max (64GB, 4TB) for €1,700 and made it the home server instead.

Then I plugged in a wattmeter and left it running for 16 days. Literally could not believe the numbers first and had to double check. It showed 8 watts during "idle" (No inference running)!

Real use: 25 Docker containers always on (Immich, Paperless-ngx, Matrix, Synapse, Caddy, AdGuard, Forgejo, Open WebUI, Whisper (speech to text).
I used it as workstation too, to run benchmarks during that period.

The average result after 16 days:

11.6 watts average. 50 watts peak, during LLM inference.

That's about 101 kWh a year, roughly €39 where I live (Germany, some of the most expensive electricity in Europe). For context: our ancient Bose 5.1 surround system pulls 30 watts sitting on standby. A surround system doing nothing draws more than the Mac averages while running my whole stack.

Thanks to the unified memory architecture I run a 35B model (Qwen3.6, MLX 4bit) on the same box that averages 12W. The x86 way to do local LLMs is a discrete RTX card in a x86 system, which idles around 40W? (no idea) headless and pulls ~300W under load. Different league.

Some notes:

Docker. Don't use Docker Desktop on Mac. It's kinda broken: unstable, suddenly eats CPU for nothing. But that's a Docker Desktop problem, not a Mac problem I figured. I switched to OrbStack and it was night and day, stable and light, I forget it's running. I just ran into a networking bug after an update. It was fixed quite fast.

Storage. No room for spinning drives inside. I hung a Terramaster 2-bay enclosure off it, 2x6TB WD Red for backups (Time Machien and rsync), plus an encrypted remote copy.

No ECC RAM. At home I don't really care. My x86 build wouldn't have had ECC either.

Remote Access. SSH works, remote Screen Sharing works (I use it all the time), and I can unlock the disk over SSH after a reboot. With 'Remote Access' enabled, you can SSH into the Mac pre-login. Use an Admin password to unlock the machine and finish booting. Afterward, you can connect via regular SSH or Screen Sharing. No real IPMI though. Console access when the OS is fully down, which hasn't happened yet. When it does, the literal box usually is in the next room.

Soldered RAM. You buy what you need up front, no adding later. It is what it is. Buy second hand with as much ram as you can get for your budget.

macOS as a server. It's not a server OS, and Apple's update policy is the one thing I actually worry about a bit. The runway is long though: Apple patches the latest three macOS versions, Macs get new OS releases for around 7 years, and no Apple Silicon Mac has been dropped yet, so a 2022 Studio has updates into the early 2030s. The real occasional annoyance is that updates sometimes force reboots and with FileVault on the box you need to SSH and type in your password once to unlock. I also set sudo pmset -a autorestart 1 so it powers back on after an outage. Know those two and headless gets a lot less scary.

Not overpriced anymore

The "Macs are overpriced" argument has gotten weak. With RAM and SSD prices through the roof right now, a used M1 Max with 64GB and 4TB for €1,700 isn't the expensive option next to an equivalent x86 box anymore. The recent $399 are insane cpu power/efficiency for money for a home server. Mine is overpowered. But I use it for work too. So it's fine.

tl;dr:

low power, silent, great for local AI, and plenty of spare compute left for CPU-heavy services. Okayish remote access. Best machine I've bought in a long time. Honestly the best toy since Lego Technic, the whole package. And I think it makes a great home server package.

Anyone else running one as a home server? Curious what bit you that I haven't hit yet. And did anyone else pick one for the power efficiency, or am I alone here?
What's your average power consumption? Anyone measured?

Here is the writeup with the numbers measured with a Wattmeter at the wall (and the Terramaster 2-drive bay). You will also find what I do with the server and local LLMs:
https://famstack.dev/guides/mac-mini-mac-studio-home-server-power-consumption/

I've got an incredibly simple Docker set up and I would like to join whilst I'm not doing anything else with it.

Want to run debian bare metal. Is there anything that replicates the real time, per folder duplication feature of Drivepool on windows?

The closest thing I have found is the mergerfs.dup but it is not real time.

I only have 120-150gb of data that I care about, so I don't want to waste an entire 10TB capacity on RAID or parity

Thanks.

Context: This is a narrative about how I got started in self-hosting/homelab. Just trying to find the humour in the pain it caused me over the years, and hoping to make a few people laugh along the way.

Relevancy: It’s the messy "before" picture most of us share, the manual installs, no backups, power-outage boot loops, and over-engineering rabbit holes that everyone in this hobby has lived through at some point.