I host:

Fedi servers

• lemmy.world
• mastodon.world
• calckey.world
• pool.social
• musicworld.social
• akkoma.nl
• ruud.social
• fotofed.nl
• fediland.nl
• blog.mastodon.world
• play-my.video

Software I use

• Nginx Proxy Manager
• Portainer
• Kimai
• Xwiki (3 of them)
• Cryptpad
• Grafana
• Hedgedoc
• Matrix/Synapse
• Thelounge
• Vaultwarden
• Gitea
• Nextcloud
• Paperless-ngx
• Zabbix
• Zammad

Probably forgot some…

My long and mostly complete list:

• Audiobookshelf (GH)
  • Using for audiobooks. Ebooks, comics, and podcast support in early stages.
• Authelia (GH)
  • Using for two-factor authentication in front of all of my services. Critical infrastructure.
• Bazarr (GH)
  • Using for automated subtitle management. Have not needed to rely on it much.
• Code-Server (GH)
  • Using for a plethora of things. I could write an entire post on this alone.
• Courier
  • Using (occasionally) for package-tracking from various carriers.
• EmulatorJS
  • Using for retro-emulation.
• Gitea (GH) x2
  • Using as a git repo server, package repository, and for CI/CD automation. Is critical infrastructure in my lab. Could also write an entire post on this one.
• Headscale with Headscale-UI. Tailscale clients on various VMs LXCs, etc.
  • Using to securely network with my remote servers.
• Homepage
  • Using as a “single-pane-of-glass” to get an overview of service health with links to the various services.
• Invidious
  • Using in-place of YouTube.
• IT-Tools (GH)
  • Using for the myriad of various useful tools it offers.
• Jellyfin (GH)
  • My media player of choice. Using for movies and television, but supports music, ebooks, and photos in addition.
• Kopia Server (GH)
  • Using for data backups to my Minio instance on local NAS and Wasabi. Simple, fast, and reliable.
• Librespeed (GH)
  • Using for the occasional speedtest to my remote servers.
• Matrix stack using Conduit back end and Element-Web front end
  • Federated Discord essentially. Using as a private instance for friends and family.
• Minio
  • Using primarily as a gateway to storing backups, also serves git-lfs for Gitea.
• N8N (GH)
  • Using for home-automation, backing up my Reddit saved posts to a database, deal-alerts, and part of a CI/CD pipeline.
• NTFY (GH)
  • Using for infrastructure notifications mostly. Very simple and versatile alerting solution.
• NZBGet
  • Using for getting “usenet articles”.
• Paperless-NGX
  • Using for document archival. Important receipts, documentation, letters, etc. live here.
• Portainer (GH) with multiple agents on VM’s LXCs and VPSs
  • High level management of my various docker containers.
• Prowlarr
  • Using to provide torznab API to websites that dont natively have it. Integrates with Radarr and Sonarr
• Radarr (GH)
  • Using for movie management.
• Radicale
  • Using for contacts and calendar server.
• Raneto (GH)
  • Using as a knowledge base. Lab documentation, lists, recipes, lots of things live here. Using with with code-server and Gitea.
• Readarr (GH)
  • Using for book management
• Recyclarr (GH)
  • Using for Radar and Sonarr to sync search terms for their automations. Very useful, hard to summarize.
• Requestrr
  • Using (very rarely) as a requests bot for Radarr and Sonarr.
• SFTP-Go
  • Using mostly in-place of Nextcloud. Used to back up phones mostly.
• Shaarli (GH)
  • Using as a read-it-later service. Went through lots of these, and Shaarli has been good enough.
• Singlefile-Archive
  • A hacky way of presenting pages saved with the singlefile browser extension. Not exactly happy with the solution, but for my ocasional use it does work.
• Sonarr (GH)
  • Using as TV series manager
• Speedtest-Tracker (GH)
  • Using to get periodic speedtests. Plan to automate results to blast my ISP if my service speed gets too low.
• Traefik (GH) on each seperate host
  • Using as a web proxy in front of my various services. Critical infrastructure.
• Transmission (GH)
  • Using to get “Linux ISOs”
• Uptime Kuma (GH)
  • Using to monitor site and services status along with a few others. Integrated with NTFY for alerts.
• Vaultwarden
  • Using as my password manager. Have been using for years, cannot recommend enough.
• A handful of static websites served with NGINX
  • The old standby, its been reliable as a webserver.

These services are the result of years of development and administrating my lab and while there is still some cruft, it’s mostly services that I think have real utility.

As far as hardware:

• Running pfsense on a toughbook laptop as a router-firewall.

• A SuperMicro 24 bay disk-shelf with Proxmox and ZFS for NAS duties and a couple services.

• Lenovo Tiny boxes with a Proxmox cluster for the majority of my local services.

• Dell managed switch

• A few Raspberry-pi’s with Raspbian for various things.

• Linksys AP for wifi

Edit: Spelling is hard.

Currently all LAN only, still in the experimental stage finding out what’s useful/preferable to me and what I want to keep:

KEEPING
Pi-Hole - ad/malware/tracker blocking
Portainer - Easy Docker
Syncthing - Sync folders between devices
Planka - Kanban board
I.T. Tools - Handy I.T. Tools
Bookstack - Personal documentation
Mealie - Recipe manager/meal planner
Jellyfin + usual accompaniments - Media Management
Navidrome - Music library
Changedetection - Stock monitoring
Gotify - For push notifications from other apps
Filebrowser
That Word Game ;)

UNDECIDED (may swap for alternatives or just remove)
Organizr - Homepage
Jump - Homepage
Homepage - Yup, another homepage!
Linkding - Bookmarks
Shiori - Pocket replacement
Etebase - CalDAV & CardDAV
Whoogle - Google without the crap
Photoprism - Photo management
Libreddit (not being used now!)
QBittorrent - for Linux ISOs
Uptime-Kuma (for when I do open a few services to family)
Ryot (beta) “Roll Your Own Tracker” - Media Tracker

PLANNING TO ADD
Reverse-proxying (likely NPM) + Security (Fail2Ban, Autheilia?)
Audiobooks
Comic book management
Translation service
Document manager
Home Assistant on its own Pi4 when I can get hold of one

I’m actually not that into actual self-hosting (it feels too close to my day job). But i love the idea of it, and actually do host my own RSS Reader: It’s selfoss (PHP + SQLite, so, very simple) and i have been using ever since google reader shut down. It runs on my uberspace.de instance.

• Jellyfin - Media streaming type app - basically use it for movies/shows and pictures.
• Joplin - Note taking app
• Syncthing - Sync for phones to PC for backing up pictures
• Miniflux - RSS reader
• Minetest - FOSS Minecraft voxel engine
• Veloren - FOSS Cubeworld game written in Rust
• GoToSocial - Microblogging server - aka Twitter/Mastodon
• Semaphore - Frontend for GoToSocial
• SearXNG - Search engine
• Conduit - Matrix server - chat
• Libremdb - IMBD frontend
• Invidious - Youtube frontend
• Nitter - Twitter frontend
• Libreddit - Reddit frontend
• Rimgo - Imgur frontend
• Proxitok - TikTok frontend

Failed to get working:

• Mobilizon - FB groups type alternative
• Peertube - YT alternative on the Fediverse
• Lemmy - Tried for a day and just couldn’t get it working. Found out there are issues with Rocky Linux and Lemmy that broke about two months ago but no further work was done it. I’ll try again someday.

Oh my jesus, does this thread really have 400+ comments

Edit: respectfully as an atheist

• Plex and Jellyfin for movies and TV shows. I want to switch from Plex to Jellyfin but it is not quite there yet. It‘s very little effort to keep Jellyfin running in parallel though. I am keeping it around to regularly compare the two and re-evaluate.
• Tube Archivist for archiving and watching YouTube videos.
• Miniflux for reading feeds.
• Nextcloud, mainly for calendars and contacts; occasionally for sharing files with others.
• Syncthing for syncing files.
• Financier for budgeting.
• Paperless-ngx for managing documents.
• Qbittorrent for downloading and sharing Linux ISOs.
• Prowlarr for searching Linux ISOs.
• Copyparty for sharing Linux ISOs with friends.
• Shaarli for saving bookmarks.
• Jekyll for statically generating my personal blog.
• Caddy as HTTP server / reverse proxy for all of the above. Automatically provisions certificates from Let‘s Encrypt.
• PostgreSQL as database for Nextcloud and Miniflux.
• Simple Nixos Mailserver for emails with Postfix, Dovecot and rspamd.
• Dehydrated for getting certificates from Let‘s Encrypt for the mail server.
• Btrbk and Restic for backups.

Most of this stuff runs on my server at home (ASRock J4105-ITX, 8 GB RAM , 250 GB SSD, 18 TB HDD). The mail server and the blog run on a cheap VPS (1 vCPU, 2 GB RAM, 20 GB SSD). Both servers run NixOS.

As an offensive security worker… I can’t help but read people listing out their attack surface 😂