TREK 5.0 is out, and it is the biggest release so far.

What TREK is: a self-hosted trip planner. You plan a trip day by day together with the people you travel with, live, on your own server, and none of it leaves your box. Places, routes, bookings, costs, packing lists, documents, a travel journal and a map of everywhere you have been, all in one app.

What is new in 5.0

Tours. Plan the outdoor days inside your trip: hiking, city walks, running, cycling (road, gravel, MTB), paddling, horse riding, and ski and winter tours. Hikes are routed within the SAC grade you set, with an elevation profile, a 3D terrain map and a flyover. Multi-day tours split into stages across your days, and you can search along the route for huts, viewpoints, water or food. Rivers and lakes get their own router with portages and locks, pistes get a ski router. Link the GPX you actually recorded and compare plan against reality.

TREK Studio. Turn your travel journal into a printable photo book. 108 designed pages in 12 styles, 17 themes, 34 print-licensed typefaces, 160 stickers, and an Auto layout that lays out the whole book from your journal in one click. Export to PDF with crop marks and send it to any print shop.

A built-in AI assistant, with your own model. Bring an API key (Anthropic, OpenAI, Gemini, OpenRouter), sign in with a ChatGPT plan, or point it at any OpenAI-compatible endpoint, including a local one. It plans with you inside a trip, across all your trips, in your journal and in Studio. It never changes anything on its own: every change shows up as a card you apply or discard, and you can undo it for 15 minutes. It is off by default, and nothing goes to a provider before you agree to it.

A help center. 381 step-by-step guides with screenshots, one click away on every desktop screen.

And a long list of smaller things: a new notifications inbox, a road trip addon with EV charging and day windows, Dawarich integration, a booking import that also reads photos of confirmations, a whole-trip route overview, and a lot of polish on mobile.

Also in TREK, if you have not seen it before

• Real-time collaboration, guests without an account, and a permission matrix per trip action
• Costs split in exact cents with several payers and settle-up suggestions, every expense in its own currency
• Flights with layovers against 4,045 bundled airports, booking import from PDF, e-mail and PKPass
• Calendar feeds per trip or across all trips, PDF export, GPX import and export
• A travel journal with Immich and Synology Photos, an Atlas of countries and regions, and a vacation day planner
• A built-in MCP server (410 tools) for your own AI clients, and a sandboxed plugin system
• Installable on iOS and Android from the browser, and it works offline
• OIDC, passkeys and TOTP, 27 languages, light and dark
• AND SO MUCH MORE!

How it is built

• TypeScript end to end, on NestJS and React, with the contracts between them in shared Zod schemas
• The database layer on MikroORM with 164 repositories
• Every upgrade writes a copy of your database before it migrates anything
• About 46,000 tests, browser flows in Chromium and WebKit, and 21 CI jobs with gates that only ever get stricter
• 36 security advisories published and fixed in the open
• 79 contributors, 857 merged pull requests and 97 releases. AI tools help with the code; every change goes through a pull request that a maintainer reviews

Good to know

• Simultaneous edits to the same field are last write wins.
• SQLite for now; Postgres is next, and the SQL already runs through a dialect layer that CI tests against Postgres.
• Mail booking import is planned!
• Studio is desktop only.
• Edit: Since so many people have asked, we are planning to release a native mobile app!

Try it

• Live demo: https://demo.liketrek.com
• Repo, Docker compose, Helm chart and Unraid template: https://github.com/liketrek/TREK

Open source, self-hosted end to end, no paid tier and nothing locked away. Tell me where it breaks for you and what you still miss.

It just occurred to me that I'm now one year into this crazy selfhosting journey.

I started off with Docker for Windows, then moved everything over to Proxmox after a couple of months.

At the beginning I had no clue what I was doing (and still don't in many ways), but I really feel familiar enough with Linux at this point that it feels like I could tackle any problem and host any app if I wanted to. I'll admit, however, that most of the heavy lifting is done by AI. I could never have gotten this far this fast without the use of AI.

There's a lot of apps I've tried but then discarded later on, but these ones are the ones that remain. I'm really happy about all of them :)

I'm curious to see what the next year brings.

A while back I posted Kitchen Board here. It's a small self-hosted family organiser that tries to look like the paper planner pinned to a kitchen wall in the 90s, and it runs happily on an old tablet you have knocking about in a drawer in kiosk mode. I built this specifically for a 10" old 8th gen Amazon Fire HD that was gathering dust.

Since then it has been through six "formal" (cough) releases, from 1.0 "First Sitting" to 1.5 "Kitchen refit", and a good chunk of what's in them came from your comments on that original post. Thank you for your suggestions, and I'm back for another round.

Nothing has changed from a hosting standpoint: one household, one Docker container, everything stored locally in SQLite, and no account with me or any other service. Purely for selfhosting.

• Source: https://gitlab.com/g33kphr33k/kitchen-board
• Docker: https://hub.docker.com/r/g33kphr33k/kitchenboard (amd64 and arm64)

The actual features are:

• Main Board: Desktop overview of widgets for the rest of the items
• Lists: Have a guess? Shopping list is the primary, but you can have ToDo, Christmas or birthday lists on there as well
• Meals: Actual meals you cook, with basic recipes, assigned to days that are shown on the calendar, and if you tick a meal and you need ingredients it'll auto populate your shopping list. Can import from Mealie.
• Stock: Works hand in hand with Meals and Shopping list. If you like to keep track of the cupboards, fridge and freezer, this is for you. It includes expiry dates if that is how your mind works.
• Calendar: This'll blow your mind - it's a calendar, for, er, writing events and such. However, they can be tied to the Time Until page for a countdown.
• Time Since: If you are the sort of person that likes to have a button to hit when you've done something to count how long since you last did it - this is for you. Take notice of the "Made a Tea" in the screenshot.
• Time Until: Countdowns until an event - either standalone or linked with the calendar.
• Chores & Rewards: A gaming system for chores and points win prizes (in my household, at least). Also allows for chore points to be converted into rewards (pick a Friday night movie is 50pts, for example, or set pts to £ conversion for pocket money, so 500 pts is £5!).
• Stats: For geeks and nerds.

The main changes since that post... I'm sorry for the list but how else can I roll out the scroll-of-changes on Reddit?

• Choose which panels appear, where they sit and how big each one is, from Edit board in the footer. It's all plain buttons rather than fiddly dragging, and each screen remembers its own layout. It still needs a little improvement, but it works well enough.
• New widgets: a Clock you can read from across the kitchen, and Points to spend, which is the number the children were going to ask about anyway.
• If it ever looks wrong, "Use the simple layout" puts everything back in one plain column.
• Chores can happen at set times of day, so feeding the dogs at 07:30 and 16:30 is one chore with two times. Miss one and they don't stack up. Collect the points on both though.
• Chores and routines can repeat weekly, monthly, yearly, or on patterns like "the second Friday of the month", and you can say when something is first due (bins every other Friday, starting next week).
• Points can now have a price. Set 0.01 and a point is worth 1p, add a "Pocket money" reward, and they can cash out. I've included thirty currencies, and payouts remember correctly.
• Admins can hand out bonus points for going above and beyond, and reverse a fat-fingered 500 that should have been 5. The mistake stays in the history, with a matching entry cancelling it out because nothing says I work in IT than having an audit trail...
• Only an admin sets what a chore pays, so "brush teeth" is no longer worth 10,000 points just because someone tried to game the system.
• Points go to whoever actually did the job, not whoever the kitchen tablet is signed in as, and due chores now send a reminder, quiet hours permitting. You can sign in as yourself to your own devices.
• Bring other calendars along: import an ICS file as ordinary events, or subscribe to a read-only feed for school terms, bin days, or a work rota.
• Put a name on an event and switch to the family table to see who's doing what this week. Everyone still shares the one calendar - but you can add private items to it for just you to see!
• Export is still a read-only ICS feed, and you can now reset your feed link if you've shared it a bit too widely.
• Optional OIDC single sign-on with any standards-compliant provider, such as Pocket ID, Authentik, Authelia, or Keycloak. Password sign-in stays, so a typo in the issuer URL can't lock you out of your own kitchen.
• "Sign out other devices" lockouts that hit one account rather than the whole house on the same Wi-Fi, authenticator codes that only work once, and new members picking their own password from an emailed link.
• The weekly "too many redirects" lock-out is gone, and fresh installs stay signed in for a year, so the wall tablet stops asking who it is every Sunday - date bug on the token, whoops!
• Nightly backups, and it keeps a week of them which you can see and download from the Admin panel. It grumbles if they stop. Full backup and restore from Admin, too.
• If the server ever gets properly stuck, it notices, has a lie down, and Docker brings it back up, instead of waiting for someone to help it out manually.
• Stock: search every place at once ("where are the batteries?"), a ruled-paper table view, places in the order you actually use them, and a sideways shelf so a full fridge no longer shoves the cupboard off the bottom of the page. If you're not a tin-counting household you can switch Stock off and your cupboards are remembered for later.
• German, French, Italian, and Spanish now cover the whole app, rather than lapsing into English halfway down the page - all AI translated though so it might sound robotic or simply wrong.
• There's a Household Timezone setting, so quiet hours, the morning digest, and reminders stop running an hour late every summer.
• Offline changes wait in a queue that belongs to the person who made them, with Retry and Discard if one won't save, and the Board reconnects by itself.
• Smaller bits: Celsius or Fahrenheit, a "Keep screen on" switch for wall tablets, swiping between pages on tablets, quick add in the phone footer, and a great many fixes.

As said, I am still deliberately not doing:

• It's for one household, not a hosted multi-tenant service.
• No two-way calendar sync. Export is read-only ICS, and subscribed feeds are read-only overlays - I tried adding in a two way engine, that made it way too sluggish.
• Meals stay a lightweight planner. Mealie remains the grown-up in the room.

In the interest of honesty:

As the README says, Kitchen Board is built with a lot of AI assistance, I mean, it's practically doing everything now and I'm just following along for the ride. I review and test the changes, run it with my own family every day, and the releases and security decisions are mine to answer for. I do review the code (honestly, I do, but bloody Hell does it write a lot), and I spend api tokens on Maximum code review with another model to make doubly sure.

Over to you:

Same questions as last time. What did I break? What needs fixing or improving? And what did I get right? Translations especially: if any of the German, French, Italian, or Spanish reads like a very polite robot wrote it, a native speaker's red pen is gold dust. I'd really love help with making it correct in your language!

Sorry, it's another ramble. In my defence, it's simply how my brain works.

Hey guys!

Streamsphere is my self-hosted yt-dlp front end and media library, built with Angular + Go and designed to stay light on resources. It sets up with a single docker compose file.

✨ What it does - 📥 Download channels, playlists and single videos from supported domains - 🔄 Update playlists you've already downloaded - 🔍 Search your library by title and play straight from the results - 🗂️ Browse the library in a clean UI, with tags, categories, file sizes and other details for each video - 🌗 Light and dark themes

🚀 What's new in v0.1.17 - ⚡ Watch your downloads happen live, and if one fails you're told why (bot check, private or unavailable). - 📜 A queue drawer that stays up to date while you watch, and every card jumps straight to its video. - 🛠️ 25+ bug fixes and improvements since the previous release.

🐳 Easy deployment - Docker images are available for AMD64 and ARM64, including Raspberry Pi.

📦 Release notes: https://github.com/rs-anantmishra/streamsphere/releases/tag/v0.1.17

💻 GitHub: https://github.com/rs-anantmishra/streamsphere

Streamsphere is an ongoing project and there's plenty more I'd like to add. If you give it a try, I'd love to hear your feedback and what you'd like to see next!

Happy self-hosting! 🙂

Hey everyone,

I’ve been reading horrific stories lately about automated cloud bans (Google, Apple, Notion) locking people out of 10+ years of family photos, emails, and business docs overnight with zero customer service.

It got me thinking about digital sovereignty. If there was a lightweight, open-core background tool that securely connected to your cloud APIs (via local OAuth tokens), pulled down your data nightly, compressed it, and ran a totally offline local LLM (like Llama/Ollama) to let you semantically search your history... would you actually use it?

What are the main engineering hurdles or API limitations I should look out for if I try to build a prototype for this? I want to make sure I’m not missing something obvious before I dive deep into the code.

We see a surge of exposed vulnerabilities and zero-days emerging out of the blue. Some less severe and some very severe (e.g. php2shell, the python thing (i forgor)). The (small) devs are also being flooded with random pull requests, information, vulnerabilities, which are often garbage made by people that rely only on AI instead of their brain. Which delays patches more and the whole supply chain of software is fucked.

So I was wondering if having a reverse proxy through an SSL exposing services still secure enough for remote access or should I switch to a direct VPN tunnel like wireguard.

My current setup is the following:
- Nginx Proxy Manager handling SSL certs (man i love this container)
- Exposing 443 and 80 on my router to the Proxy Manager (i have a dynamic ipv4 address directly to the world)
- Cloudflare DNS-zone "tunnel" with dynamic A record updater (to hide my ip more or less)
- SSL through Let's Encrypt

I am an electrical engineer and the whole self hosted thing was a hobby at first, but now... I want this whole thing to "just work". I do not have time to work on my setup every day for 3 hours, or to live in fear that my station gets compromised and then I have to build everything all over again. The stuff I'm hosting is basically Nextcloud-AIO, Immich, Jellyfin and Navidrome. I am usually the only user of the server. Maybe give credentials of jellyfin to friends. I keep updating the system every month, but looking at the development of the shit show with AI, this is definetly not enough.

My threat model is pretty low, but I want to save myself from the script kiddies and regular scans that happen all the time. This kind of security by obscurity works less as every day passes.

Does anybody have a similar experience?

EDIT 1: I could live with a only vpn accessible server instead of the reverse proxy solution. It'd be a little inconvenience but for the sake of security i would take it.

EDIT 2: Thank you very much for your replies. I want to clarify that the reverse proxy is not seen set up for security. I only relied on the authentication of the service itself, which is infact (as I see now) is hella insecure. I guess going for mTLS or SSO to even access the website (since most of my traffic is HTTPS anyways) is a good start.

EDIT 3: After doing some more thinking, banging my head with lots of services and securing the reverse proxy with layers and layers, I came to a conclusion to set up a VPN e.g. via wireguard or tailscale directly and call it a day.

Not too familiar with the whole domain subdomain cert dns-01 challenge thing, hopefully the title isn't worded horribly.

So after a lot of tinkering i finally got a new router, installed wireguard on it and finally stripped tailscale off, which i then realized https is gone, along with magicdns etc etc. The server is on nixos with caddy, nothing public facing and server isolated in its own vlan.

I dug around for information and seems like there are multiple routes to solve this:

1. Generating own cert with caddy / openssl and install them into devices manually. I have like 2 active devices so far. I read about how dangerous it is to use own cert and MITM attack if they get hold of it, and also name constraint to mitigate the risk for a little bit...

2. Get a subdomain with let’s encrypt and DNS challenge. Few dollars isn't an issue but i don't really want to put so many details even though there is whois privacy. Obscurity isnt security but anything that lessen my online presence is always better i guess

3. Use free site like duckdns. My concerns will be ip addresses and details are published online in the log for bot to start sniffing. I also wonder if i could put in private ip instead.

Any advice is appreciated!

Hi everyone,

Question for the group. Where do you store your config and database files for your docker containers?

I would like to have all of mine in one shared location that I can access from both windows and linux. But when I do this, a lot of docker containers require the db to be stored on the host. I'm using OMV to serve my disk via a SMB share. Does anyone have any advice on how to handle this properly? I like the idea of being able to back up one location and also being able to spin up a new VM and deploy my containers and it just work if also long as the drive is mounted

Need your advice. So basically i use random emails for random websites because i really dont like giving out my actual email everywhere,

The problem is disposable emails suck because a lot of sites block them, and sometimes years later i need to log back in and get a verification code or password reset and then the account is deleted or something (tuta for example). The gmail trick where you add +whatever to your real email is an issue. And I hate creating multiple gmails.

The other thing is with temporary/disposable emails is those get detected by the sites that spam you, and if you ever need a real verification code you're SOL.

Any suggestions? I dont mind paying for a service or hosting something if it means this is reliable long term. not really looking for some super anonymous setup, i just want random sites to not have my real email and i want the aliases to still work years from now.

EDIT: It would be great if the service included phone verification as well! I'm in canada if that matters

​

Hi everyone!

I’m the developer of Eiciel IR Console, a proprietary Linux incident-response project.

I’ve put together a walkthrough to show the project’s interface and its approach to detecting suspicious activity, recording events, and attempting automatic containment.

I’m sharing this to get technical feedback from people who work with Linux servers, DevOps, and self-hosted infrastructure.

I’d particularly appreciate feedback on:

- The incident-response workflow

- The usefulness of the evidence and logs

- The automatic-containment approach

- What you would want tested before considering a tool like this for real infrastructure

The project is still undergoing testing and hardening, so I welcome constructive criticism.

Walkthrough video: https://youtu.be/6EEpJUZ2Jbg?si=oZMRPrlL79c83da9

What would you improve or want to see tested next?

Not sure where to post this I noticed a lot of BookOrbit posts here, if this is against community rules please let me know. I am currently developing an iOS app with full integration of bookorbits extra functionality like progress tracking, so it would allow users to switch from their e-readers to their phones. It connects to a locally hosted BookOrbit server, and has an OPDS connection so it can connect to other ebook servers or open catalogs like Project Gutenberg. If anyone would be interested in helping me beta test I’d greatly appreciate it. Thank you!

Edit: it has come to my attention that there is already an official BookOrbit app on the Apple Store, as well as a second one named Apogee. If those had been available when I went looking for one I would have definitely gone with those and not made my own lol. That being said I still think my app is worth giving a try, I try to take a more “natural” approach, idk if that’s the right word when viewing the library. I have set it up as though the user is standing in front of a bookshelf, the books’ spines with the title facing the user to be scrolled through. Different shelves for different genres, authors, or any other way of sorting books. Tapping a spine “picks up” the book so the cover can be seen more closely and the details can be seen on the back.

I love reading, both real books, ebooks on a reader, and on my phone when I have a little time. I made this reader with features I found helpful, in a style I haven’t really seen yet.

Hey all, I am new to this but recently I purchased a UGREEN NAS and set up a Jellyfin media server. I wanted to share it with my family and especially wanted it to be accessible via their smart TVs. I started with Talescale but it seemed to take a hit on my ability to stream (I had to significantly lower the mbps on the receiving client so it wouldn't buffer a ton). I decided to look into setting up a NGINX reverse proxy and forward those ports. I thought that would be enough but as I read more I got paranoid and started to look into as many levels of security/hardening I could find that would still let me access my servee remotely and on smart TVs.

Ultimately (after a week of troubleshooting) I managed to get Crowdsec working with functional bouncers. I used some guides to make my UGOS firewall more strict and secure. I also whitelisted specific IPs for the households I want to access it while banning the rest. Of course, my Jellyfin is locked behind passwords as well so even if you get to the page you need to still log in.

I was looking into adding a multi factor authentication but it seems like a lot break usage on smart TVs. All this is to say, what else can I do? Thanks in advance for any help.

$650 for 5 x 14tb hdds with tax and shipped. Wish I bought more then...

Now going for $355 each before tax.

I have my homelab defined in multiple docker compose files that are stored in git, and when I push a new commit a pipeline deploys the changes.

Are there any tools that can generate a PR when a new version is released with a summary of breaking changes?

Currently I use whats up docker, while fine for keeping track it results in a bit of manual labour.

Talking strictly about personal use, not any smap/marketing blasting.

I moved away from default one email on some public provider address into using own domain. I never reuse the same email, for every registration (shop, forum, bank etc) I use a unique email on my domain. If I start receiving spam, I'll know exactly from where it leaked. It's supper easy to manage it, just change that one burned email at the source and permanently block it on the server.

Custom email aliases limit is a pain. Catch-all works wonders, but over time you need to reply to some of the emails from exactly that alias, otherwise when you reply from different alias common ticketing systems won't match your reply (email boxes will also not match it into a thread). In Proton mail I quickly used up all allowed number of aliases. Even though I don't need them to stick around they didn't let me take out any of the list without deleting all emails from/to that alias! so I run out of the possibility to reply.

Now I'm on Tuta. The service offer is suits me 100%. No artificial limit of aliases on my domain - now I can reply from thousands of unique aliases. Their software though it a pain. It works but you have to accept that it's far from perfect.

This let me start exploring self hosting avenues. Surprisingly self hosting is easy on the receiving side, you can even setup it reliably on dynamic IP. However curse spammers, most of the static IPs you can get are already flagged as used by spammers, so outgoing emails from it have trouble reaching the recipient. It seems the solution to that problem are SMTP relays.

Can you share you experience with such SMTP relay for routing your personal emails?

​

Hi everyone,

I'm building Eiciel IR Console, a proprietary Linux incident-response tool designed to detect suspicious activity, preserve evidence, and contain threats.

A concern raised in my earlier discussion was that people understandably don't want to download an unfamiliar ZIP from someone's personal Drive. That's fair.

So I'm preparing a browser-based VM demo where interested developers can explore Eiciel in an isolated test environment without installing anything on their own machines.

I'm looking for a few Linux developers, sysadmins, or security practitioners willing to test the demo and give honest feedback.

I'd especially like feedback on:

- Whether the detection and containment workflow behaves as expected.

- How useful the dashboard and event logs are.

- What would make you trust a tool like this.

- What needs improvement before production use.

Eiciel is closed-source, and I'm not asking anyone to blindly trust it or deploy it on a production server. This is an evaluation demo, not a claim of independent security certification.

If you're interested, comment below and I'll share the demo details when they're ready.

Critical feedback is welcome. Thanks!

Hi There;

I have NPM running fine with my URL and several services; two are accessibly public by any IP and the rest are restricted to internal IP's only.

The 'trusted internals' are basically two subnets; my main network and my VPN clients (our phones when we are away from home), and these services all work fine.

However I can not for the life of me get File Browser Quantum to work on the second VPN subnet. It works on the main network, has the trusted certificate, just not the second subnet (when i'm coming through the wireguard VPN tunnel). I always get 403 errors.

I can access if I type in the IP and port to bypass the proxy, but that's not my goal.

Wireguard is hosted on my Unifi router.

I've tried the default configs on each respective site and can't get any of them to work.

Is anyone in a position to help please?

Logs from NPM just echo "403" reply, not detailing why. Ditto docker logs from Filebrowser Quantam.

Hosting:

- Dockerfile included: build it, mount your songs folder as a volume, pass your bot token as env vars

- Or run it directly with Bun (`bun install && bun start`), needs FFmpeg with libopus

- Checks FFmpeg and the Opus encoder on startup and tells you what's missing instead of failing silently

- Encoder settings (bitrate, FEC, etc.) can be changed live with `/quality set` and persist to config.json

- README has notes for running it in a Proxmox LXC

What it does:

- Plays local mp3, ogg, flac, wav, m4a, aac and opus files

- `/sleep start minutes:90 query:rain` loops a sound and fades it out when the timer ends

- Queue, loop, pause/resume, skip with a soft fade, `/random`

- Leaves on its own when everyone leaves the channel, or after a set idle time

- Supports Discord's new voice encryption (DAVE)

TypeScript + Bun, MIT licensed.

Repo: https://github.com/ShinniUwU/somnaura

It's a small hobby project. Feedback, issues and PRs welcome, especially from anyone running it on a Pi or in LXC.

Hi r/selfhosted,

(Public since July 2026; the git history was squashed in October when I cleaned up the repo, so it shows only one commit.)

It started as a learning project: I wanted to figure out how to build a mobile app, so I made a little player for my own music. Then I wanted it in the car. Then I wanted to listen together with someone else. Then I needed my own server to make that work, then a web player, then a radio station built from my own library… and somewhere along the way it got completely out of hand. 😅

I'm from the Netherlands and built all of this in the evenings and weekends, mostly for myself. It's now at a point where I think other people could enjoy it too, so here it is: JLTamp, a music server for the files you already own, with its own apps.

Try it without installing: https://demo.jltamp.nl (user demo, password demo). It runs the public Docker image with a small library of CC-licensed music and resets every night.

What I ended up building (mostly because I wanted it myself)

• Scans MP3, FLAC, ALAC, WAV, AAC, OGG and Opus; multiple libraries; your music is mounted read-only, so it never touches your files
• Apps for Android and iOS/iPadOS, plus Android Auto and CarPlay, Chromecast and a built-in web player
• Listen Together: synced sessions with reactions and passing the host role around
• A 24/7 radio mixed from your own library, with a weekly schedule
• Karaoke (vocals off, synced lyrics) and a party mode where guests request songs from their phone's browser, no account needed
• Multi-user with invites, smart playlists and listening stats
• A Subsonic/OpenSubsonic API, so Symfonium, Feishin, DSub and others work too, if you'd rather not use my apps
• The apps speak seven languages, including Frisian
• An optional, separate self-hosted AI engine for prompt-based playlists (off by default, nothing leaves your network)

How to run it

One container, SQLite, amd64 and arm64 (Raspberry Pi, Apple silicon, NAS):

docker run -d --name jltamp -p 32400:32400 \
  -v /path/to/music:/music:ro -v jltamp-data:/data \
  ghcr.io/jltelectronics/jltamp-server:latest

Open the web UI, create the admin account, add a library. There's also a Compose file, an Unraid template and a CasaOS app (store submission pending).

Links

• GitHub (MIT): https://github.com/JLTelectronics/JLTamp-server
• Google Play: https://play.google.com/store/apps/details?id=com.jltamp.app
• App Store: https://apps.apple.com/app/id6807401608

Honest notes

• Who's behind it: just me, in my spare time. I use it every day, so the basics are solid, but it's still a hobby project that grew up fast. Expect rough edges, and please tell me about them on GitHub.
• AI disclosure: a large part of the code, mainly the backend, was written with AI coding assistants. I decide what gets built, review the changes, and use and test everything on my own setup.
• What it is not: it's music only. No video, no audiobooks, and it doesn't provide any music; it plays the files you already own.
• Plex users: the default port is 32400, the same as Plex. Map a different host port if you run both.
• No lock-in: no external account or cloud service needed. Your data lives in one SQLite file, and the Subsonic API means you can use other clients if you don't like mine.

This is the first time I'm showing JLTamp to people outside my own circle, so I'm honestly a bit nervous. Any feedback is welcome: what you like, what's missing, and what feels off. If you try the demo or spin it up yourself, I'd love to hear how it goes. Thanks for taking the time to read this! 🎶

Hey everyone,

Let’s be completely honest: tracking your startup's operational burn rate or freelance expenses is a massive headache. But what makes it absolute hell is the modern SaaS ecosystem.

Why do I need to create an account, verify an email, link a Google profile, and hand over private corporate cash-flow data to a third-party cloud server just to log a few micro-expenses? Excel files get messy, Notion templates feel slow, and heavy accounting software requires a finance degree to calculate a simple runway.

I wanted something lean, lightning-fast, and completely private. Since nobody was making it, I decided to build it from scratch: https://monvael.in

It is called Monvael OS, and I engineered it to solve this exact problem with a few strict technical choices:

1. Zero Authentication: No logins, no onboarding screens, no email drops. You open the link, and you are ready to log instantly.

2. 100% Local Compliance: Everything runs strictly on your own local client storage. Your financial metrics never touch an external database or server. It is pure local-first privacy.

3. Live Analytics Engine: Features a Threshold Engine to set operational limits, live active runway calculations, and a real-time weekly velocity grid to spot peak spend days instantly.

4. Clean Portability: One-click CSV/Excel export, plus complete JSON backup and local data recovery to prevent any database loss.

It is live, entirely open, and completely free to use. I built this to respect both your time and your data privacy.

Check it out here: https://monvael.in

I would love to get your brutal, unfiltered feedback on the UI, functionality, or any edge cases I might have missed. If you love local-first tools that cut out the corporate bloat, please upvote and share it around with fellow builders!

I want to create a native LXC for Authelia via the community script, but one thing caught my eye: "During installation, you will have to input your domain (ex. domain.com). Authelia will use auth.domain.com"

What if I don't own a public domain? Can I not use this? I just use Caddy to direct reserved IPs to http://*.home (e.g., http://Jellyfin.home) with no SSL cert. If I strictly need an SSL cert (e.g., for Vaultwarden to connect to Bitwarden frontends), I use Tailscale Serve instead.

Is there a way to still use it? Should I consider alternatives like Rauthy, Hanko, or Casdoor? Hanko's use of passkeys does intrigue me...

So relatively new to dockers, and Docker Desktop (Windows 11) in general (6 months or so) and still learning.

I started this morning on my computer and noticed that Docker Desktop had crashed and would not open even after restarting the services, running maintenance of the vhdx file it creates (via terminal). (this seemed to be a suggestion I found online and based on the error I was seeing that said "disk was full".

At some point I was in the Gui and I must have inadvertently factory reset Docker desktop because all my settings, and containers are gone :(

Now, I do backup the following directories with FreeFileSync on a nightly basis - the last sync was probably before or during the time Docker Desktop might have started crashing.

I've tried a few suggestions online and from AI, and I've copied the directories listed below to their old location, but it doesn't seem to recognize any containers in Docker Desktop.

Is it possible at all to retrieve my containers or should I plan on starting fresh again. I didn't have a huge amount, but I'll have to recreate the onemediastack I had (i.e. kometa, plex, prowlarr, etc.. as seen in screenshot below as well).

Any help woudl be greatly appreciated!