Either self-hosted or cloud, I assume many of you keep a server around for personal things. And I’m curious about the cool stuff you’ve got running on your personal servers.
What services do you host? Any unique stuff? Do you interact with it through ssh, termux, web server?
- HomeAssistant and a bunch of scripts and helpers.
- A number of websites, some that I agreed to host for someone who was dying.
- Jellyfin and a bunch of media
- A lot of docker containers (Adguard, *arrs)
- Zoneminder
- Some routing and failover to provide this between main main server and a much smaller secondary (keepalived, haproxy, some of the docker containers)
- Some development environments for my own stuff.
- A personal diary that I wrote and keep track of personal stats for 15 years
- Backup server for a couple of laptops and a desktop (plus automated backup archiving)
Main server is a ML110 G9 running Debian. 48G/ram. 256 ssd x2 in raid1 as root. 4tb backup drive. 4tb cctv drive. 4x4tb raid 10 data drive. (Separating cctv and backup to separate drives lowers overall iowait a lot). 2nd server is a baby thinkcentre. 2gb ram, 1x 128gb ssd.
Homework worth of TBs
On my Raspberry Pi 4 4gb with encrypted sd is:
- pihole
- wireguard server
- vaultwarden
- cloudflare ddns
- nginx proxy manager
- my website
- ntfy server
- findmydevice server
- watchtower
Pi is overkill for this kind of job. Load average is only 0.7% and ram usage is only 400M
can you tell us how you got this running with an encrypted SD card?
That was really hard to do. I created a note for myself and I will also publish it on my website. You can also decrypt the sd using fido2 hardware key (I have a nitrokey). If you don’t need that just skip steps that are for fido2.
The note:
Download the image.
Format SD card to new DOS table:
- Boot: 512M 0c W95 FAT32 (LBA)
- Root: 83 Linux
As root:
xz -d 2023-12-11-raspios-bookworm-arm64-lite.img.xz losetup -fP 2023-12-11-raspios-bookworm-arm64-lite.img dd if=/dev/loop0p1 of=/dev/mmcblk0p1 bs=1M cryptsetup luksFormat --type=luks2 --cipher=xchacha20,aes-adiantum-plain64 /dev/mmcblk0p2 systemd-cryptenroll --fido2-device=auto /dev/mmcblk0p2 cryptsetup open /dev/mmcblk0p2 root dd if=/dev/loop0p2 of=/dev/mapper/root bs=1M e2fsck -f /dev/mapper/root resize2fs -f /dev/mapper/root mount /dev/mapper/root /mnt mount /dev/mmcblk0p1 /mnt/boot/firmware arch-chroot /mnt
In chroot:
apt update && apt full-upgrade -y && apt autoremove -y && apt install cryptsetup-initramfs fido2-tools jq debhelper git vim -y git clone https://github.com/bertogg/fido2luks && cd fido2luks fakeroot debian/rules binary && sudo apt install ../fido2luks*.deb cd .. && rm -rf fido2luks*
Edit
/etc/crypttab
:root /dev/mmcblk0p2 none luks,keyscript=/lib/fido2luks/keyscript.sh
Edit
/etc/fstab
:/dev/mmcblk0p1 /boot/firmware vfat defaults 0 2 /dev/mapper/root / ext4 defaults,noatime 0 1
Change
root
to/dev/mapper/root
and addcryptdevice=/dev/mmcblk0p2:root
to/boot/firmware/cmdline.txt
.PATH="$PATH:/sbin" update-initramfs -u
Exit chroot and finish!
umount -R /mnt
Thank you so much! will make a note of this
findmydevice server
What server are you running for this?
ATM I have the following running:
- Caddy
- NextCloud
- Webpress
- Plex
- Actual Budget
- Portainer
- Vaultwarden
- Grafana
- Stable Diffusion
- QBT
- *arr stack
- 4 Debian instances with differing bits and bobs on
- MIT Scratch
- Neon KDE (Drives lounge TV)
- Win10 and 11 vms
- TrueNAS
- OpnSense
- Homepage
- Navidrome
- SoulSeek
Curious about the specs of your machine.
it’s an i5 13xxx with 64GB ram and a HBA passed through to TrueNAS with 7 disks on it and a second network card passed through to OpnSense for WAN/LAN
All the above runs in Proxmox and has a bit of room for expansion still ;) This was a 50th to myself to replace an IBM M4 space heater
- OrangePi with HomeAssistant and PiHole.
- Old gaming PC turned 24/7 server with Jellyfin, V-Rising server
- Hetzner cloud with Matrix server for Messenger and Discord bridging.
- Synology NAS for SMB and sharing stuff with others through Synology Drive, which also serves as a seedbox for Redacted.ch, with Headphones and Transmission.
A lemmy server, and my experimental Tenfingers sharing protocol nodes.
How come you don’t post from your own lemmy
Because I had lots of problems with my lemmy.mindoki.com server, so I shamefully uses an accunt on lemmy.world.
Just wiped the server a coupla of days ago (snif), so if everything works out well this time you’ll see valmond from mindoki the next time :-)
NUC 8i5, 32GB, 500GB NVMe (host), 8TB SSD (data), Akasa Turing fanless case, running Proxmox:
- samba
- syncthing
- pihole
- radicale
- jellyfin
- minidnla
I also have a Pi 4 running LibreElec for Kodi on the home theater. Nothing fancy yet and it more than meets our current needs. Most maintenance done over SSH.
Would like to eventually get a proper web and email server going (yes, I know).
I use my home server for everything. It’s an i5-13500 system, 48GB of RAM, an RX6650XT, and currently 14 drives all packed into a 4U case.
I virtualize my desktop on it, just passing through the GPU, P-Cores, and 16GB of RAM. That’s my primary dev workstation at home, and also my gaming machine (which runs sunshine for streaming games). I also have a Mac VM set up with OSX-KVM and minimal resources for Bluebubbles.
My drives are set up in several pools. I have two SSD pools: a boot pool running ZFS for the host server system (Debian), and a VM/Container ZFS pool for docker container images and configs as well as the Mac VM. I also have a whole NVMe SSD dedicated to the workstation VM. Finally, I have two large HDD pools: A mergerfs/snapraid setup for media storage (4 drives) and a large ZFS pool (5 drives) for important personal data like pictures and documents.
Services I run:
- Ente
- Jellyfin
- Navidrome
- Kavita
- Bluebubbles
- HomeAssistant
- MollySocket
- Searxng
- Piped
- Cockpit
- Samba
- Prometheus/grafana
- qBitTorrent
- Homarr
Always looking for new self hosted stuff to try! I’m thinking of getting into the *arr stuff soon but I’m a bit intimidated by it. Also I’ve got a Raspberry Pi 5 on the way that I’m gonna use for Jellyfin, moonlight, and music streaming to my living room TV
countless “read later” pdfs …and cat pictures
Cat pictures ? Definitely the best possible use of a server 😄
A random collection of stuff I host on my server(s):
Lemmy, Mastodon, Jellyfin, Deluge, a bunch of *arrs, Home Assistant (with an MQTT broker and Node-red), Szurubooru, Selfoss, Firefly III, Keycloak, Matrix Synapse, Matrix Element, Cinny, a bunch of Matrix bridges, PowerDNS + PDNS GUI, Mailcow, a few bots here and there, Photoprism, Wireguard, vlmcsd, Syncplay Server, Nextcloud, Seafile, Castblock, LanguageTool, ArchiveBox, Pi-Hole, Proxmox, and a few tools I wrote myself.
I’m halfway through moving a Gitlab install to Gitea but at the moment neither is usable.
At some point I’ve also run minio for S3 storage and pfSense but that server is no longer useful, really.
I manage most of it through SSH, but use the web services where available.
Have you integrated your matrix instance with keycloak? Ive been wanting to set it up to allow local matrix users the ability to SSO with other stuff like jellyfin with just their matrix ID.
Lenovo ThinkStation P330 Tiny. Debian + Podman systemd quadlets, running these services:
- Jellyfin
- Sonarr
- Radarr
- Qbittorrent w/ VPN
- Linkwarden
- Calibre Web
- Immich
- Lidare
- Postgres
- Prowlarr
- Vaultwarden
Do you have any tips (or examples) using quadlets? I tried using them but I couldn’t wrap my head around them.
I used this guide https://www.redhat.com/sysadmin/quadlet-podman
I have a folder on my in my home folder called
containers
symlinked to/etc/containers/systemd
with my .container files. This is my jellyfin.container for using the Nvidia Quadro on my server.[Unit] Description=Podman - Jellyfin Wants=network-online.target After=network-online.target Requires=nvidia-ctk-generate.service After=nvidia-ctk-generate.service [Container] Image=lscr.io/linuxserver/jellyfin:latest AutoUpdate=registry ContainerName=jellyfin Environment=PUID=1000 Environment=PGID=100 Environment=TZ=America/St_Johns Environment=DOCKER_MODS=ghcr.io/gilbn/theme.park:jellyfin Environment=TP_THEME=dracula Volume=/home/eric/services/jellyfin:/config Volume=/home/eric/movies:/movies Volume=/home/eric/tv:/tv Volume=/home/eric/music:/music PublishPort=8096:8096 PublishPort=8920:8920 PublishPort=7359:7359/udp PublishPort=1900:1900/udp AddDevice=nvidia.com/gpu=all SecurityLabelDisable=true [Service] Restart=always TimeoutStartSec=900 [Install] WantedBy=default.target
I use
sudo podman auto-update
to update the images to utilize theAutoUpdate=registry
option.
P330 tiny is so good I just wish there was a ryzen version with a pcie slot. Quicksync is great but I hate Intel.
I’ve been running my own nextcloud for around a decade now. I use it for my calendar, contacts, and file storage. It’s basically replaced all the google services for me, and has been effectively zero maintenance. It just works.
Nice try fed won’t get my ssh keys that easily
I managed to install Nextcloud (not the docker) and I called it a success since I find nginx, ports, firewalls and port forwarding a meta headache.
I’ve got servers all over the place. A sample of what I have running on all of them:
- YaCy
- SearxNG
- Kodi
- Shaarli
- Huginn
- Part-DB-server
- Bookstack
- Cyberchef
- Efflux