r/selfhosted

▲ 158 r/selfhosted+1 crossposts

How I Organized, Culled, and Backed Up 60,000 Family Photos from iCloud

[deleted]

u/[deleted] — 4 days ago
▲ 6 r/selfhosted+1 crossposts

thoughts on cloud photo storage

Basically people are using cloud photo storage nowadays to avoid expensive device storage, but the idea of storing my data on non-encrypted cloud is disturbing. So I did some research on privacy focused solutions. I think they can basically sort into 4 types.

encrypted cloud self-host
photo library iCloud/ente
cloud storage Proton/dropbox

As you can see there's something missing. Basically I don't think everyone need a feature-rich photo library. For years people are focusing on docker based photo libraries like immich. Of course we have universal network transfer protocol but what’s missing is a multi-platform lightweight photo viewer optimized for smb. Huge file list loading could be a problem but can be solved with separate folders by month/album. Most photo viewer I checked on both mobile/desktop platform are just having outdated functions and design. Seems like it's something need to be done. Do you guys think this should be an option? Glad for any ideas.

reddit.com
u/OKVnDa_ — 3 days ago
▲ 14 r/selfhosted+3 crossposts

cronstable: highly-available cron with a web UI, durable state, DAGs, clustering, MCP server, and way more

cronstable is a cron replacement that runs as a single foreground daemon that I've spent an inordinate amount of time on. It will run on basically anything because its been precompiled for basically any compute architecture that people still use. If there's a feature that another cron has that you need, I want to know about it. Beginner friendly, expert friendly. Container friendly, production ready, highly available. You get it.

From orchestrating web-scrapes, data processing, and storage to coordinating Minecraft server snapshots and upgrades. Possibilities are literally endless.

  • Scheduling: modern jobs defined in YAML; classic crontab files run unmodified; per-job timezone; optional second-level granularity
  • Failure handling: define what failed means to you; retries with exponential backoff; reports to Slack-compatible webhooks, email, Sentry, or a shell command.
  • Web dashboard (opt-in): one self-contained page served by the daemon, with live log tailing, run history, DAG graphs, cluster and fleet views, a TV wallboard, and a command palette. A REST API alongside. not sure if I'm competing with other cron solutions or DataDog at this point. But at least you don't need to SSH in to see what's going on.
  • Observability (opt-in): native Prometheus metrics; opt-in per-job CPU and peak-memory monitoring.
  • Durable state (opt-in): run history, retries, and missed-run catch-up survive restarts; job commands get key/value, cursors, fleet-wide locks, idempotency keys, artifacts, and run-scoped secrets through the CLI.
  • DAGs (opt-in): task dependencies, data hand-off between tasks, dynamic fan-out, sensors, human approval gates, backfill, crash-resume.
  • Clustering (opt-in): leader election via gossip over mutual TLS for best effort attempts at gating your jobs. Your self hosted replicas in one network can also bridge to speak to another set of self hosted replicas. Go one step further and harden it via any shared filesystem, a Kubernetes Lease, or etcd, so replicas can share one config without double-running jobs with absolute guarantee. Each job picks its own point on the liveness-vs-duplication trade-off with clusterPolicy: Leader (default) runs on the elected leader and fails closed. No quorum? Nobody runs. For jobs where a duplicate is worse than a skip (like billing, or outbound email); PreferLeader is never-skip and runs anyway when the cluster can't agree. You accept a possible double-run, for idempotent jobs that matter; EveryNode runs everywhere, for genuinely per-node work like local log rotation. No option is true exactly-once. Leader may skip, PreferLeader may double-run. But hey, at least you get to pick which way it breaks. By default the leader runs every job, but distribution: spread assigns each job to an owner by rendezvous hashing so the work fans out and can be more load balanced.
  • MCP server (opt-in): AI agents (Claude, Cursor, Copilot) can inspect jobs, DAGs, the cluster, and metrics; read-only by default, control only if enabled.
  • Packaging: pip/pipx/Homebrew; multi-arch Docker images on GHCR and Docker Hub in eight distro variants; standalone binaries for Linux, macOS, and Windows. Runs non-root with a read-only root filesystem and all capabilities dropped.

Live demo of the control panel UI with a stubbed backend (pretty cool I promise - if anything at least play with the logo cuz I spent a lot of time on it): https://html-preview.github.io/?url=https://github.com/ptweezy/cronstable/blob/develop/docs/demo/index.html ^(you might need to change the theme on your screen because on one of my screens the default theme is just way too dark. Will fix this soon. by play with the logo I mean swipe your mouse across it) 🙂

Feature Comparison chart: https://github.com/ptweezy/cronstable/blob/develop/docs/comparison.md

Source: https://github.com/ptweezy/cronstable

This is under active development, would appreciate any and all feedback. Thanks y'all!

github.com
u/ptweezy — 3 days ago

Do you selfhost bitwarden lite or vaultwarden?

I want to selfhost a password manager. I wanted to go with vaultwarden. But now i read about bitwarden lite, which is the official lite version.

How likely/how often did in the past happend that bitwarden released a breaking change to the app/clients so that vaultwarden needed first an update?

Did you swap to bitwarden lite after the release?

Im using pangolin to tunnel to my local machine. If this matters in anyway or form

reddit.com
u/Tollpatsch93 — 9 days ago
▲ 64 r/selfhosted+1 crossposts

What I run on my Unraid HomeServer Oct/2026

Feel free to comment, ask any questions, share your opinion, or criticize me for my choices. I like these posts and videos where people showcase their home labs and show what they’ve got set up.I think that as a community of “non-professionals,” we can learn a lot here.

Feel free to suggest alternatives or share what you do differently. Where do you see the benefits of doing things a little differently?

I’ll try to answer every question about my setup!

Most asked question: The container folder view are done by the folderview3 plugin. The specs on the bottom are done in paint.net afterwards for the purpose of this post.

(AI was used for translation purposes. )

u/f1uffyducky — 8 days ago

UPS recommendation for TP-Link TL-SG105E switch,need at least 6 hours backup

I’m looking for a UPS/power backup solution for my TP-Link TL-SG105E 5-Port Gigabit Easy Smart Switch.

I need the switch to stay powered during power cuts for at least 6 hours, preferably longer if possible. The switch uses a small DC adapter, so I’m wondering whether a mini DC UPS/router UPS helps it

Edit : I’m running a Raspberry Pi server, and both my router and Raspberry Pi already have UPS backup. The only device that doesn’t have a UPS is this network switch.

I’m also a student, so I can’t really afford a large or expensive power backup solution. I’m looking for something affordable that can keep just this switch running for at least 6 hours during a power cut.

u/Tutyfruiity — 9 days ago

Quartermaster: a client only app for running your self hosted stack from iPhone, iPad and Mac (60+ services, no account, no backend)

Quartermaster is an app for controlling your self hosted stack from your iPhone, iPad or Mac. Browse your library, request films and shows, watch what's downloading, play from Jellyfin, Emby or Plex, read your books and keep an eye on your servers, all in one place.

QM talks straight to the services you already run on your own hardware. Your API keys live in your device's keychain and are only ever sent to the server they belong to. There's no Quartermaster account, no analytics and no crash reporter backdoor or whatever

A few features need something outside your network, and each one is off until you switch it on:

Push notifications- Apple only accepts pushes from the app developer, so this goes through a small relay on Cloudflare. It stores a random install ID. No server addresses, no API keys, nothing that identifies you.

Instant alerts via ntfy: straight from your services to the ntfy server you choose. I'm not in the path at all.

iCloud sync: your config is encrypted on your device with a passphrase only you know, then stored in your own iCloud.

Companion alerts (Pro): sent from your own Companion through Expo's and Apple's push services.

Since launch I've built a companion: a self hosted web app Node.js/Docker that runs on your own server alongside the rest of your stack. Add your services once, scan a one time code, and QM picks everything up. No more copying API keys service by service. Pair it and you can also watch your containers, stacks and updates live. It talks to your phone directly over your LAN or Tailscale, with no relay. It's MIT-licensed and on GitHub as qm_companion

What it connects to: 64 services

Entertainment: Radarr, Sonarr, Lidarr, SABnzbd, NZBGet, qBittorrent, Transmission, Deluge, Prowlarr, Bazarr, NZBHydra2, Jackett, Jellyseerr / Overseerr / Seerr, DroppedNeedle, Shelfmark, Plex, Jellyfin, Emby, Wizarr, Tautulli, Tracearr, Jellystat, Streamystats, Komga, Kavita, Immich, AudioBookshelf, Maintainerr, BookOrbit, Dispatcharr, ReadMeABook, Shelfarr

Command Centre: Portainer, Unraid, Proxmox VE, Synology DSM, Dozzle, Dockhand, Komodo, AdGuard Home, Pi-hole, Cloudflare, CrowdSec, Technitium, UniFi, Gluetun, Glances, Scrutiny, TrueNAS, Beszel, Home Assistant, Tdarr, qui, Coolify, Arcane, Control D, NextDNS, UGREEN NAS, SSH

New in 1.3: Grafana, PeaNUT, Uptime Kuma, Pulsarr, Grimmory

AI disclaimer - No AI has been used - I have nothing against AI at all but there are too many one shot apps built over a weekend and pushed out, slop season :D, without care or consideration for the stacks they are actually meant to be serving and or protecting. The QM companion is open source, so you are more than free to take a look! I come from a security background as well so you can sort to see what features I have purposely implemented. I am a dev for a living :)

selfh.st has featured it twice, including in Self-Hosted Apps Worth Running Right Now

This sub deserves a straight answer before the download, not after so onto pricing

Free: one fully working service connection, so you can properly try it against your own stack

Pro: £4.99/month, £19.99/year or £29.99 one-off. Every option unlocks everything. No tiers, nothing held back, no ads

7 day free trial: if QM isn't for you, cancel before it ends and you won't be charged

The Apple TV app needs Pro because it relies on iCloud sync - https://testflight.apple.com/join/VTW6JAqN

QM has passed over 10k downloads since launching on 3 July and the Discord has grown past 700 people who are actively requesting features and shaping where it goes. A big chunk of the app came straight from that feedback, and it's still the fastest way to get something added.

It's on iPhone, iPad and Mac today, with Apple TV in closed beta running my own playback engine, Oracle.

App Store: https://apps.apple.com/gb/app/quartermaster-homelab-stack/id6779994284

Discord: https://discord.gg/Ce9yc9CS8M

BTW - if you're already a user, please say hi! lol

Also, it is Wednesday UK time, I hope that is okay

u/Swityyyy — 8 days ago

Recommendations for Self-Hosted Productivity Tools?

I've been hunting for self-hostable productivity tools because, frankly, I can't afford to pay a monthly subscription anymore. I'm not looking for anything too special, but I mainly want a product that lets me visualize my tasks in a list, Kanban, or timeline format.

It doesn't need to be anything special; I know desktop-mobile sync is unlikely given the self-hosted nature, but honestly, that doesn't bother me much.

Any recommendations for what's out there? I have already tried:
- ClickUp (paid, online)
- Notion (paid, online)
- Linear (paid, online)
- Appflowy (self-hostable)

Thanks! :)

reddit.com
u/AtlasLVI — 9 days ago

What to do with ipv6 in homelab?

What to do with ipv6 in homelab?

Recently upgraded my router from my ISP. Seems like now I have both v4 and v6. I am hosting couple of services on spare laptops and raspberry pi. All exposed only through tailscale. Now I have ipv6, is there anything new I can try? Any services that can make use of this?

reddit.com
u/DigitalThrift — 9 days ago

Holm – a self-hosted start page for the whole household/org, with SSO and Raycast-style search inside your apps

Most dashboards I tried are built for the person who runs the server. I wanted something I could hand to my family: they sign in with the SSO I already run, and each person gets their own start page with their apps, bookmarks and wallpaper.

So I built Holm.

What it does

  • Per-user pages. I publish a catalog of apps once, and everyone builds their own page from it. Layouts are stored server-side, so they follow you across devices.
  • Uses your existing login. OIDC with Authelia, Authentik, Keycloak, Zitadel and others. Admins are decided by group or username.
  • A launcher. Press Ctrl/⌘K to find apps and run commands. It also searches inside Immich, Paperless, Nextcloud, Jellyfin, Planka and Karakeep, each with the person's own login. The integrations are still alpha.
  • Onboarding for non-technical people. Welcome slides, plus a setup guide for each app with App Store and Play links and the server URL to copy.
  • One YAML file, hot-reloaded. Single container (amd64 and arm64), SQLite, no telemetry.

What it leaves out: server stats, container health and uptime widgets. Homepage, Glance and Homarr already do that well. Holm is the page you hand to everyone else.

Try the demo (login turned off, keep it on your own machine):

docker run --rm -p 3000:3000 -e CONFIG_PATH=/app/config.demo.yml ghcr.io/man15h/holm:latest

Repo and screenshots: https://github.com/man15h/holm

AI disclosure: I built Holm with help from Claude Fable and Claude Opus 5.5, which wrote much of the code under my direction and review. I've built and maintained open-source projects before, and I review and test every change before it ships.

It's early and I'd love feedback, especially from anyone running it for people who'll never touch a YAML file.

u/manish9461 — 8 days ago
▲ 4 r/selfhosted+2 crossposts

Neorg-supported notes mobile app, started as a side project, looking for feedback

I've been working on a mobile note-taking app (iOS/Android) that has native Neorg support(.md and .org supported also). Started it as a weekend side project to scratch my own itch — wanted to read/write my .md files on the go without fiddling.

What it does:

- Full Neorg, .md or Orgmode document parsing and rendering

- Syncs with your existing workspace (git-backed)

- Offline-first — works without internet, pushes when connected

It's not some massive commercial thing. Just a solo dev & made like 70$

The ask: Is this something you'd actually use? Would love honest feedback before I clean it up for release/marketing, any more feature that you would like?

GitNotes

ps - its open source

u/Professional-Tap-186 — 8 days ago

ScreenTinker v2.4 - open-source digital signage, now with one-click updates and HQ/store playlist control

ScreenTinker v2.4 - open-source digital signage, now with one-click updates and HQ/store playlist control

Dev here. ScreenTinker is a self-hostable signage CMS (Node/Express/SQLite, MIT, Docker image on ghcr). v2.4 is out:

- Update Now from the dashboard - a separate root-owned updater backs up and integrity-checks the DB, installs, restarts, verifies the new version answers, and rolls back (DB included) if it doesn't. Works for git installs (systemd path unit) and Docker (docker:cli sidecar). Never automatic.

- Head office playlists - mandate content org/workspace/group/screen-wide, with local slots store managers can fill.

- Smart playlists - rule-based, self-updating from your content library.

- Interactive kiosk mode for web pages - idle timeout wipes cookies/storage/history between visitors.

- Fixes from an internal security audit: tenant isolation, stored XSS in the dashboard, CSP sandboxing for HTML bundles, upload/deletion integrity.

- Native Pi installer fixes (Lite vs Desktop detection).

Players: Android/Fire TV (now in the Amazon Appstore), Tizen, webOS, BrightSign, Pi, Windows, browser.

Shoutout to visimpres-glitch for the Android temp telemetry PR and a pile of well-diagnosed issues, and to bwcgn, r00ks and JackyL for the Pi reports.

https://github.com/screentinker/screentinker/ | https://discord.gg/utTdsrqq4Z

u/dw5304 — 9 days ago
▲ 236 r/selfhosted+1 crossposts

Pangolin 1.24: Exit Nodes and Improved Client Apps (New UI)

Hello everyone!

The headline feature is exit nodes: a device can now send its full internet traffic out through one or more sites you choose. The tunnel can also come up automatically instead of waiting for someone to open the app and connect. Windows and Mac got a major UI overhaul, and iOS and Android picked up a lot of new features.

Pangolin is an open-source, identity-aware remote access platform that simply and securely connects and authenticates your users to applications, infrastructure, and AI workloads.

GitHub: https://github.com/fosrl/pangolin

Exit Nodes

Pangolin is a split tunnel by default. Traffic between your sites and clients goes through Pangolin, and everything else stays on the device's normal internet connection. But now if you want a full tunnel, create a private resource, set the type to Exit Node, and attach one or more sites. A client that selects that resource sends its internet traffic out through one of those sites so the device appears to be on the site's network. If the resource has more than one site, the client picks the one with the lowest latency, highest throughput, and availability. This will finally let you build your own full-tunnel VPN!

Connect Automatically

Mac and iOS include on-demand support, so the system can bring the tunnel up when a network appears instead of waiting for you to open the app and tap Connect.

Windows has Start at Login plus Connect at Start, which together launch Pangolin and connect at sign-in. On Android, turn on Always-on VPN in the system VPN settings.

Improved Client Apps

Windows includes a major UI overhaul. It rebuilds the preferences window and system tray from scratch to match the Mac client. The Mac menu bar app also got a major UI overhaul and is more fluid and feature-rich.

iOS adds home screen widgets, a Control Center control, Shortcuts actions for connect, disconnect, and status (usable with Siri), and Dynamic Island and Lock Screen Live Activity status. Android brings a connection tile you can add to your quick actions to start the tunnel.

Subnet Router

A Linux machine client can now advertise a subnet, so devices on that network can reach Pangolin resources without running the client themselves. That is handy for a printer, a camera, or a VPC where you don't want to install software on every host.

Add --subnet-router when you start the machine client using Pangolin CLI.

Full Release Notes

Read the full article here: https://pangolin.net/news/1-24-release

Available for self-hosting via Community or Enterprise editions, or on Pangolin Cloud (Enterprise is free for personal use). If you haven't starred us on GitHub yet, it genuinely helps!

u/jsiwks — 14 days ago

Roast my private second-brain stack before I build it (Mac mini + Tailscale + FastAPI + SQLite)

I'm building a personal "second brain": a private dashboard plus long-term memory for an AI agent, both reading one shared store. Before I build, I want people who self-host to poke holes in it.

The design:

  • Source of truth: plain Markdown files (Obsidian-compatible) + JSON for structured data (tasks, decisions). Lives on a Mac mini at home.
  • Derived index: a Python indexer builds a SQLite DB with FTS5 full-text search + sqlite-vec embeddings. The DB is disposable, rebuildable from the Markdown/JSON anytime.
  • Serving: FastAPI + HTMX/Jinja2, single process, no JS build, no Docker. Tailscale-only, phone via PWA. Nothing exposed to the public internet.
  • AI: Ollama on the mini (local LLM for Q&A/summaries, local embeddings). Zero hosted API calls for private data.
  • Sync/backup: private git repo as transport; encrypted replica on a cloud VM.

The point is one brain with two faces: I browse it on the dashboard, the agent reads/writes it through a private API as its memory.

What I'm unsure about: SQLite write contention (single user + one agent, probably fine?), sqlite-vec at 100k+ chunks, Tailscale as the only remote access (lock-in?), and whether a home mini is actually sane as the primary vs a cheap VPS. Also whether I'm overcomplicating it — is there a simpler stack I'm missing for "private Markdown corpus + search + tiny dashboard"?

Tear it apart. What breaks first?

reddit.com
u/cjrittle1998 — 8 days ago