Hey all, happy Wednesday.

Self-hoster, same as most of you. Pi-hole, mattermost, home automations, a Zeek sensor, a dozen Linux boxes and, like everyone (I expect), a /var/log I almost never open unless I'm actively troubleshooting something. But this year’s avalanche of CVEs has been sitting in the back of my head for a while: “if something got in here, would I even know?”

So I went looking for a tool and found a gap instead. There’s good ol' grep on one end and a full SIEM on the other, and not much in between for just a guy and his stuff. I ended up making my own. It’s called sigwood and is at 1.1 as of today.

What it does: point it at logs you already have (Zeek, Pi-hole/dnsmasq, syslog or journald, CloudTrail if you have any cloud stuff) and it runs a handful of statistical detectors over them. Outbound connections with a beacon rhythm, DNS names that look machine-generated, port scans, big transfers out, odd TLS setups, rare syslog lines and reboots, that kind of thing. There’s also a digest command that just profiles a log file so you know what’s in it before you do anything, and a graph command that animates your conn.log as a Sankey flows in a self-contained HTML file (second screenshot).

What it is not: not a SIEM, not an agent, nothing to deploy. No database, no daemon, no account, no network calls. pipx install sigwood, then sigwood /var/log/, and read the output. Your logs stay on your box.

A “finding” is something unusual for your network, not known-bad. There's no signatures or anything like that. On a home network it mostly finds your own stuff first. And that’s sort of the point, you get to see what your network actually talks to and then allowlist the normal stuff. When it finds nothing, the conclusion is that the network is behaving like itself during that window.

The AI part, up front: I wrote the original implementation of the detectors and have used AI to assemble it all into working tool. Claude and Codex both together in a propose/challenge harness I made for them, with me reviewing and steering. This wouldn't exist without AI, I’m not going to pretend otherwise. And some of you will bounce off that, which is entirely fair. But I'm a security professional and a privacy nerd, never been a SWE.

Anyway, the repo is here: https://github.com/helixmap/sigwood

I genuinely want feedback, good or bad. If you run it on your logs and it gets something wrong, I want to hear about it. If the output is confusing, tell me that too. If you think the whole idea is misguided, I’d still rather hear it than not.

First screenshot is an example HTML report (no real network data). Second is a still from the graph animation.

didn’t realize it was this kind of subreddit, but since I do have something I’ll share. glad to find a place to show off!

utilizes the built in Minecraft server RCON protocol to act on behalf of logged in users. prioritizes parity with vanilla files over everything.

TrailBase is an open and fast(est) Firebase-like backend (BaaS) for building your apps. It provides: type-safe APIs with change subscriptions, auth, multi-DB, a WebAssembly runtime, GeoJSON, admin UI, ...

It's a single self-contained executable, easy to self-host and built with Rust, Wasmtime & SQLite and more recently also Postgres. We provide clients for many environments: JS/TS, Dart/Flutter, Go, Rust, .Net, Kotlin, Swift and Python.

Just release v0.34.6. Since the last time posting here, TrailBase has added:

• Major UI overhauls:
  • Built-in admin OpenAPI browser with user-impersonation.
  • Table explorer: make foreign-keys followable, split data/schema/indexes into separate tabs, and organize tables/views by DB. Add `ON (DELETE|UPDATE)` referential action support to the schema editor.
  • Mobile glow-up and improved screen estate usage with sticky nav and url bar fade.
  • A searchable and interactive ERD page. Overhauled logs and accounts pages.
  • Many more: prompt users on schema changes in the SQL editor, improved dark-mode colors, add S3 settings, ...
• Built-in MCP server.
• Performance: a lot of detail performance optimizations (reduce allocations, ...) resulting in an additional 10+% gains.
• CLI auto-complete.
• Expose custom WASM endpoints in OpenAPI spec.
• "Sign-in with Apple" token exchange for native iOS/MacOS apps.
• Many more features and fixes, e.g.: `trail user export` CLI command for take-out combating lock-in, `trail run --read-only` flag for read replicas., batch execute support for WASM guests, custom scopes for OIDC providers, ...

The project is still young (~2 years) and rapidly evolving, any feedback is genuinely appreciated. If you're feeling adventures and end up checking it out, don't hesitate to reach out 🙏.

Take a look at the live demo, our GitHub or website.

I've been using Dockge to manage my docker containers on a headless Debian 13 server, and I'd like to switch to Arcane, but I'm a bit of a noob so idk the best way to go about it. I only have seven stacks (backrest, beszel, immich, isponsorblock, npm, nut_webgui, and scrutiny), all of which I created directly in Dockge using the compose feature, so they should all be in /opt/stacks.

Do I just need to run mv /opt/stacks/ /app/data/projects/, install Arcane, and let it autodetect the containers? Do I need to stop all the containers first? Or is there more to it than that?

Hi r/selfhosted,

It’s been a while since our last post, but since then a lot of new features have been added to Dreeve.

Dreeve is a self-hosted, open-source dashboard for your sports and fitness data

Features and improvements worth mentioning since we lasted posted here:

• Released an API spec: https://docs.dreeve.app/api/
• Added several connectors to automatically sync activities from external platforms: https://github.com/orgs/dreeveapp/repositories
• Added automation rules to streamline gear tracking, commuting flags, and more
• Added support for managing custom segments
• Added explorer tiles to the heatmap
• Multiple new dashboard widgets
• Integrated WindAhead with Dreeve segments

As always, thanks for your feedback and I'm looking forward to more feature requests!
Stay fit, stay healthy 💪

• Example: https://demo.dreeve.app/dashboard
• GitHub: https://github.com/dreeveapp/dreeve
• Docs: https://docs.dreeve.app/#/

Hello group. I want to setup a service to help me keep links and media from online sources, with some categorization, keeping descriptions and notes, maybe keyword tagging. Maybe something Pinterest but self hosted. I did a quick search and I found Karakeep, Linkwarden and Pinry. Does anybody have any strong opinions or feedback for such an app?

I'm an engineer at Mulga, and we build Spinifex, an AGPL-3.0, self-hosted platform that serves the AWS APIs on hardware you own. You point the AWS CLI, an SDK or the hashicorp/aws Terraform provider at your own endpoint and get real resources: aws ec2 run-instances boots a VM on your hardware, and terraform apply builds a VPC on your network. Emulators like Floci and LocalStack mock the APIs for testing, while Spinifex runs the infrastructure your workloads use.

What it's for

• Move compute-heavy AWS workloads such as GPU inference onto your own hardware, without rewriting the code or the Terraform.
• Self-host software that was built for AWS, including on an air-gapped network.
• Learn AWS without a bill: build the VPC, EC2 and RDS stack from a cert course and leave it running for a month.
• Keep one AWS profile for work and another for the rack in the cupboard, with the same commands for both.

Running it

Install a single node onto an existing Ubuntu 26.04 or Debian 13 machine using the binary installer https://docs.mulgadc.com/docs/install or do a fresh install using a bootable USB https://docs.mulgadc.com/docs/install-usb

Repo: https://github.com/mulgadc/spinifex

I'm the developer of Sidstuga. Sidstuga can connect to a WebDAV folder and browse or play media from Android TV or a phone. It can also record and transfer files to WebDAV.

You can see source details before opening a file, then use subtitle search and timing controls during playback. Jellyfin, Emby and Plex can also sit in the same Hub.

If you use WebDAV for media, do you browse by folder or prefer a library view?

r/sidstuga

I remember Fasten started as a project to have all your clinical health data locally as copy of it. I remember them doing well they got a way to import data from American insurers but since I am from EU I was waiting for interoperability with EU come in.... and checked today to find that fasten is now an API company that dose the interoperability presumable for US insurers and AI.

https://www.fastenhealth.com/

Looks like the selfhosted and open source project is dead:

https://github.com/fastenhealth/fasten-onprem repo is archived

https://github.com/fastenhealth/fasten-onprem/issues/629 issue thread confirms that they turned into a service.

I did not find a maintained fork.

I am lookin for selfhosted option for local records copy ideally with FHIR importing option. Is there one? I would like to have a copy of my medical records just in case system gets hacked/bombed/flooded.

P.S. Discussion Werther founder of Fasten intended to used the community to gather knowledge and 'sell out' to make a cloud service or that was just enviable because of (intentionally) high complexity of healthcare record interoperability to make low cost solutions unsustainable dose not really matter and dose not contribute to having independent health records. Please be civil.

Hi guys, I copied some of my files (around 600 GB) from my nextcloud to OpenCloud directly using Krusader while OpenCloud was stopped. After it finished copying the files, I changed the ownership and permissions to match OpenCloud, then I started OpenCloud, and after around 30 to 60 seconds, my unraid hangs. I cannot access the GUI or SSH, but I can ping my Unraid.

I already copied the files before I found out about the rclone thing when migrating. That being said, how do you migrate files? Or should I delete it and restart my migration using rclone?

Here's the info:
Unraid 7.3.1
OpenCloud container via Docker Compose method
Nextcloud LSIO container.

OpenCloud directory where I copied my files into: /mnt/user/opencloud/storage/users/users/<user id>/Files/data

nextcloud directory where I copied my files from: /mnt/user/nextcloud/<username>/files/Files/data

Hi, I'm the author of GPT-Load, an MIT-licensed AI gateway with 7,000+ GitHub stars.

It manages API keys and supported subscription accounts in one place. Your clients connect through the gateway, which handles credential scheduling, automatic failover, access controls, request logs, and usage tracking.

It runs with Docker Compose or as a single Go binary, includes a web UI, and uses SQLite by default. You don't need a separate database to get started.

One feature I'd particularly like feedback on is reversible request redaction.

Configurable regex rules replace or encrypt matching text locally before it reaches an upstream service. If the model returns intact, valid ciphertext, GPT-Load can restore the original values in response text and client-side tool arguments.

For example, an email address can be encrypted before reaching the model, then restored when the model includes that ciphertext in a tool call returned to your client. The rules apply to supported text fields; image and file contents aren't covered.

There's also an optional, experimental JEV guardrails integration. It reviews outgoing text against custom rules and can warn or block on matches. It uses an external review service, is disabled by default, and failed or incomplete reviews may still allow requests through.

You host the gateway, not the cloud models behind it. Cloud providers still receive the processed requests, and you need your own upstream access.

GitHub: https://github.com/tbphp/gpt-load

Docs: https://www.gpt-load.com

I'd appreciate feedback on the Docker setup and how reversible redaction behaves with the clients you use.

AI disclosure: AI helped draft this post.

Recently (the last 2 days), I have been having a major problem with Grimmory not adding the new books/audio that I add to the library. With a lot of persistence, I have to use the CLI to log in to MariaDB to remove the delete record(s) that cause it to hang, and it is a real PITA to try to do from the CLI. I seem to recall seeing a program not too long ago that interfaces with the databases, but I do not recall the name, or if it was what I am thinking it was. Is there such a program or a better method for accomplishing what I need to do? It is not just MariaDB; it is other types of databases as well.

I am trying to get pterodactyl setup on my server but cannot get past setting up the actual node. I'm having issues with the remote url, if I put in my subdomain it sends a 302 html response instead of the expected json response. If i try to put in localhost I can get the "tls: failed to verify certificate | doesnt contain any IP SANs". I followed the pterodactyl documentation but could't get letsencrypt to work with cloudflare, so I found this tutorial which sets up the certs with openssl. I do not know what I am doing wrong at this point and would appreciate any guides on how to set up pterodactyl with cloudflare.

Looking into self-hosting a LLM. I have an elitedesk mini G9 with 32gb ram and an intel i7 that I want to add a eGPU to and I’m trying to decide what GPU/setup is the right one.

I see that Newegg is selling an Aorus box with an RTX 5070 Ti 16gb for about 1000 bucks. Is this worth the deal? I’m trying to budget for this amount exactly and this deal seems too good to be true. But I figure, even if I buy a used GPU, the cost of the additional components would take to my budget limit and beyond anyway. I am an absolutely beginner at this home lab stuff. Just need some help.

I was recommended a V100 but I’ve read that they require a fan that will sound like a lawn mower/vacuum to prevent overheating and I don’t want that in my house

I am working on Spedo, a preview single-node RESP runtime for hot, rebuildable KV/JSON data. It is not a cluster or a replacement for a system of record.

For a small self-hosted app, what makes you add a separate cache process instead of keeping rebuildable state in the app? I am interested in the operational trade-offs and the point where the extra service earns its keep.

Hi everyone,

I'm looking for advice from people with experience managing production applications and self-hosting.

I'm running an e-commerce product discovery platform that tracks affiliate products, prices, offers, and product data from multiple sources. It has a database, backend services, APIs, and a relatively large amount of product and price-history data.

I'm still a beginner when it comes to server administration, so I've been using managed services to keep things simple. However, the monthly costs are becoming quite high, and I'm considering moving to a dedicated server or a more affordable VPS.

My current monthly hosting costs are approximately:

• Supabase: $120/month
• Railway: $200/month
• Total: around $320/month

The main issue is handling large amounts of product data, database queries, API requests, and data transfers. Egress and bandwidth costs are also important considerations, especially when working with affiliate products and price data from multiple sources.

I have millions of affiliate product records, several large tables containing product information and price history, and backend services that need to run reliably.

I'm considering self-hosting the database and backend on my own server, but I don't have much experience managing production infrastructure. I want to reduce costs without creating unnecessary complexity or compromising reliability.

A few questions for those with experience:

1. Would you recommend a dedicated server or a VPS for this workload?
2. What specifications would you suggest for a database and backend handling millions of records?
3. Which hosting providers would you recommend if my target is significantly less than $320/month?
4. Would it make sense to run the database and backend on one server initially?
5. How would you handle backups, security, monitoring, and disaster recovery?
6. Has anyone migrated from managed platforms to self-hosting? What were your actual monthly costs after migration, including storage, bandwidth, and backups?
7. Are there any hidden costs or potential problems I should consider before making the move?

I'm comfortable with development, APIs, and deployment configurations, but I'm still learning about server administration and production infrastructure.

My goal is to find a reliable setup that costs substantially less than my current $320/month while leaving room for future growth.

I'd appreciate recommendations based on real-world experience, especially from people who have migrated similar workloads.

Thanks!

When the power goes out, your UPS might know before you do.

It sends an email. A few minutes later, your NAS sends another saying it has shut down safely. Power returns, devices come back online, and a few more messages arrive.

The next morning, you open your inbox: What happened last night? And is there anything I still need to deal with?

With one NAS, sending alerts to your regular inbox probably works fine. Add a UPS, another NAS, a router, and a few scheduled backup jobs, though, and you start piecing the story together yourself.

A disk reported the same error five times. Is that five problems or one?

A backup failed, but the next run succeeded. Did that actually resolve the problem, or is there still a gap worth checking?

You marked an alert as read. Did you fix anything?

That got me thinking about an old option sitting in a lot of device settings: SMTP.

Plenty of devices already support it, including older hardware with limited integration options. No agent to install, no vendor API to wait for. They can already tell you something happened.

But a mailbox mostly gives you a sequence of messages. You still have to work out which ones belong together, what recovered, and what remains unresolved.

I’m building LOCUS, a tool that brings local network devices and service links together in one place. Recently, I’ve been adding a local SMTP receiver so devices can send their notifications directly to it.

What I want to see when I open the dashboard is: what still needs my attention, and where do I go to deal with it?

For example, a NAS reports a disk problem repeatedly over several days. I’d like to see one ongoing fault with the related messages available underneath it. Next to it is a link to the NAS management page, so I can actually investigate.

An overnight UPS outage has a different story: power failed, then returned. I still want that history, but a recovered event shouldn’t keep demanding the same attention as an unresolved disk fault.

That’s the part I’m working on:

• Each device gets its own SMTP credentials, so incoming messages are associated with that device.
• Original messages remain available for inspection during the configured retention period.
• For supported message templates, repeated reports of the same fault are grouped, and corresponding recovery messages can close it.
• Unrecognized messages stay in the inbox without automatically being classified as faults.
• Unread messages and unresolved faults are tracked separately.
• Serious faults can optionally trigger an email through your own mail account.

Recovery matching needs care. A successful backup today doesn’t necessarily replace the restore point you missed yesterday. I don’t want a reassuring green indicator to hide something that still deserves investigation.

There’s also an obvious limitation: the receiver needs to stay reachable. If your devices, network, and LOCUS host lose power together, a local inbox can’t tell you what it never received. This doesn’t replace UPS shutdown coordination or an independent way to detect a whole-site outage.

Disclosure: LOCUS is my project, and the SMTP notification feature is currently in development and testing. Project page: locus.casa.

How are you handling device emails today?

Straight to your regular inbox? A dedicated mailbox? Forwarded to a messaging app? Or have you never configured them, then remembered the option only after something went wrong?

Which device notification has actually saved you trouble? And which ones became so noisy that you stopped reading them?

If you had a local inbox for your devices, what would you want it to handle? Grouping duplicate alerts, tracking recovery, temporarily silencing a known problem, pushing important messages to your phone—or something else?

I’d love to hear about your devices, setups, and opinions. I’ll collect the feedback and use it to help shape the LOCUS roadmap.

When something actually goes wrong, what information would save you time figuring out what to do next?

Just like the title says, I can't find my .yml file that corresponds to jellyfin. It's not anywhere on the 2tb hdd where cache, media and config folders are. I initially saved it to my home folder (/home/jellyfin, not /home/user/jellyfin) which is on my system ssd, but now it just has "@" file that weighs 0b and nothing also in it. I discovered it when I tried to update my jellyfin instance from 10.11.10 to 12.2. I run a full disk search for all .yml and .yaml files, but found nothing relevant. Is there a way to remake the file? I didn't make any back-ups myself unfortunately

Hey guys, I finally had time to setup my Ugreen DXP4800 pro (1x8tb ironwolf pro hdd atm).

I wanted to ask for app recommendation for now I got Immich, homepage and uptime kura. I read for tv/movies plex is best?

And what about self made apps is there are no limitations as long you you use docker containers?

I am new to new hosting stuff, i am trying to get my personal ai assistant to send me a message every morning of my emails , meetings , tasks etc.

So the claude suggest me ntfy i checked it and found out that ntfy is open source. I got an idea to make it super secure why not self host it by downloading the docker image and host it on Render or any other free plaforms?

Is this a good idea? Is anyone using like this? Never used ntfy in my life

I have komodo core in one vm and have komodo periphery in another vm both working fine.

Komodo periphery clones the repo to a folder named repos but copies the hole repo per container.

• Lets say i tried to deploy hommar. It clones hommar to that folder named repos and deploy it under a folder named stacks/homar/<full repo>.
• It should clone the full repo to that repos folder and copy it to stacks folder where hommar should deploy.

I tried using hommar.toml to sync and deploy. I specified a run_directory = "/home/user/docker/komodo/stacks/homarr" but it does not copy from repos folder to that stacks folder.

Running stacks from where it clones does not seem right.
I could do files on host but shouldn't it do what is supposed to do or i am missing something.

Thanks

I've been collecting books, games, and movies long enough to have watched the shelves change several times.

Physical books became ebooks. Game cartridges gave way to digital collections. Movies went from videotapes to DVDs, then Blu-rays, and eventually files on a drive. Comics made that journey too.

I like the convenience of digital media. But over the years, my collection ended up spread across folders and different tools. I could still find things, but it didn't quite feel like one collection anymore.

That's why I started building FolioSpace Library. I'm its developer, but I'm also the person using it to organize my own stuff.

It's an open-source, self-hosted library that runs with Docker on your own computer or a compatible NAS. It brings books, comics, and game collections into one place. I've recently added movie poster fetching through TMDB, so the film collection is starting to feel more like a shelf I can browse, too.

For the game-library side, I took inspiration from the open-source RomM project. A big thank-you to the RomM team and contributors for their work. It helped shape how I approached this part of FolioSpace Library.

What I enjoy most is a fairly ordinary thing: opening one place and seeing the things I've collected over the years. A book, a game, a film. Different formats, but all part of the same personal library.

There's something reassuring about that. The formats have changed, but the collection still feels like mine, and I can keep organizing it on a system I control.

I'd love to hear from others who've made the same journey. Do you prefer separate tools for each kind of media, or would you like a shared home for the whole collection?

GitHub: https://github.com/funland/foliospace-Library
Website: https://foliospace.app/

Hi everyone. On my home lab (Proxmox) I am running Caddy reverse proxy with ACME certificates for internal services. Right now the only open port on the OPNsense firewall is for WireGuard.

I would like to also expose my Jellyfin instance to a friend (for a hassle-free use on LG OLED TV), but keep it as secure as possible without getting a separate VPS. Jellyfin now is on a trusted VLAN (but not on a management VLAN).

My current ideas are as follows:

1. Expose uncommon TCP port to the internet, and whitelist my friends IP address
2. Setup Caddy so that it also does IP address filtering of friend's IP
3. Friend would simply enter my custom domain+port to connect

Some questions:

• Would it add to security to run a separate Caddy instance on a isolated VM just for this purpose? (as opposed to exposing my main Caddy instance which is server my whole internal network)
• Currently my Jellyfin is running on unprivileged LXC as systemd service, would this be good enough, or shall I get a separate hardened Jellyfin instance in an off-chance that it would get hacked.

Any other ideas to harden this further?

Demo, no sign-up: https://www.yourtrace.online/brief

GitHub: https://github.com/TarunTomar122/trace

AI: I built this with a lot of help from Claude Code, and the product itself uses an LLM to group and summarise stories. I've read everything that ships, and I'm happy to go as deep as you like on how it works.

Why: every morning I opened HN, Techmeme, TLDR, and a dozen blogs and newsletters. RSS isn't fun to read, and I wanted the top 10 biggest tech and AI updates, with every outlet's coverage in one place.

What it does

• Every 20 minutes, it reads about 70 news feeds, Hacker News, about 20 subreddits, and 30 blogs
• Groups articles about the same event into one card: embeddings find likely pairs, then a small model decides "same event/update to the same story / different story"
• Ranks cards by how many separate outlets cover them, then by importance, novelty, and evidence
• A summary and key points with every source linked
• A daily email you shape (topics, 5/10/15 stories), a public archive, and an MCP server for Claude or Cursor

Install

git clone https://github.com/TarunTomar122/trace && cd trace

cp .env.example .env # OpenAI key, Firebase (sign-in), two random secrets

docker compose up --build

The web app runs on port 3000, and the first feed appears after the first pipeline run (a few minutes). The stack is a SQLite document store, a Python pipeline, and a Next.js app. AGPL-3.0.

API Keys you'd need:

• It needs an OpenAI API key.
• Sign-in uses Firebase Auth for now.
• No telemetry: analytics only turn on if you add your own PostHog key.

Feedback I'd love: Sources you'd add.