Selfhosted

60048 readers

722 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam.
Posts here are to be centered around self-hosting. Please ensure it is clear in your post how it relates to self-hosting.
Don't duplicate the full text of your blog or git here. Just post the link for folks to click.
Submission headline should match the article title.
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

219

I've written a series of blog posts about a "hands-off" self-hosting setup intended for relative beginners. (cyclicircuit.prose.sh)

submitted 11 months ago* (last edited 11 months ago) by cyclicircuit@lemmy.dbzer0.com to c/selfhosted@lemmy.world

45 comments fedilink hide all child comments

Recently, I've found myself walking several friends through what is essentially the same basic setup:

Install Ubuntu server
Install Docker
Configure Tailscale
Configure Dockge
Set up automatic updates on Ubuntu/Apt and Dockge/Docker
Self-host a few web apps, some publicly available, some on the Tailnet.

After realizing that this setup is generally pretty good for relative newcomers to self-hosting and is pretty stable (in the sense that it runs for a while and remains up-to-date without much human interference) I decided that I should write a few blog posts about how it works so that other people can set it up for themselves.

As of right now, there's:

Coming soon:

Immich
Backups with Syncthing
Jellyfin
Elementary monitoring with Homepage
Cloudflare Tunnels

Constructive feedback is always appreciated.

EDIT: Forgot to mention that I am planning a backups article

you are viewing a single comment's thread
view the rest of the comments

[–] hperrin@lemmy.ca 4 points 11 months ago (1 children)

Something really fun I found out recently, when my friend lost all access to his system except for a single WebDAV share by accidentally turning off all his remote admin access:

If you write “b” to /proc/sysrq-trigger, it will immediately reboot the system (like holding down the reset button, so inherently a bit dangerous).

He was running Nephele with / mounted as the share, so luckily he just uploaded that file with a single “b” in it, and all his remote admin stuff came back up after the reboot.

[–] WhyJiffie@sh.itjust.works 3 points 11 months ago (1 children)

that's horrible and funny at the same time.

I will assume they fixed that vuln later

[–] hperrin@lemmy.ca 1 points 11 months ago* (last edited 11 months ago) (1 children)

That’s not a vulnerability. That’s intended and desired behavior. It was really useful in this case too.

I should mention that the WebDAV share is password protected, so only he has access to do that.

[–] WhyJiffie@sh.itjust.works 1 points 11 months ago (1 children)

ok, a backdoor then. can they overwrite any file with it?

[–] hperrin@lemmy.ca 3 points 11 months ago

It’s their machine. It’s a front door.