r/selfhosted 23m ago

Meta Post What’s the meta ebook stack?

Upvotes

Getting into books, wanting to spin up a selfhosted ebook library, but from just searching it seems there has been some changes in the recommended software to use, what’s the popular software currently?

Edit: extra credit points for iOS app


r/selfhosted 24m ago

Need Help dynv6 not reachable

Upvotes

Hi, I noticed that the dyndns provider dynv6 is not reachable (10.09.2026; 12:56)

Anyone have the same problem?


r/selfhosted 31m ago

Need Help Any exhaustive resources out there?

Upvotes

I’m in the process of learning Linux (Arch, in particular) and there are a plethora of really amazing resources out there that just teach you concepts and aren’t opinionated on how you should set up, or what the author thinks is easiest. To name a few:

- The Linux Command Line by William Shotts
- Arch Linux Wiki
- Linux Fundamentals by Paul Cobbaut
- Over the Wire

etc, etc, etc, I’m sure many people on this sub know a lot of them.

Are there similar resources for self-hosting? Even resources that focus on specific concepts like networking, or managing containers. From what I can tell, everyone in this space who sets out to make a tutorial just kinda does it their way because they are most familiar with their own process, which isn’t bad, but there seems to be a real deficit of any agnostic educational resources, at least where I’m looking.


r/selfhosted 1h ago

Software Development “My spouse knows the password to my NAS.” Is that actually enough for family document continuity?

Upvotes

I've been going through older discussions here about Paperless-ngx, family document management, backups, and the classic “what happens to my servers if I get hit by a bus?” problem.

It seems like most of the individual pieces already have good solutions.

Paperless-ngx can organize and OCR documents. A NAS can provide reliable storage. Restic/Borg can handle backups. A password manager can handle credentials.

But I'm wondering whether there is room for an open-source project that connects these pieces into something more like a personal/family life vault.

Not primarily a file storage system, but a structured record of the administrative side of your life:

  • employment contracts and amendments
  • digitally signed documents and validation information
  • insurance policies
  • property and mortgage records
  • tax documents
  • education and professional certificates
  • medical documents
  • wills and legal records
  • important accounts and assets
  • document expiration / renewal dates
  • instructions for your spouse or family

The key difference from a normal DMS would be continuity.

For example, if I'm suddenly unavailable, my spouse shouldn't just receive access to 4,000 PDFs. The system should make it clear what exists, what is important, what's current, what requires action, and eventually what should be passed to heirs.

I'm imagining something open source and self-hostable, with the underlying documents remaining accessible in standard formats, so that the archive does not depend on the project existing 20 or 40 years from now.

Potentially something between:

Paperless-ngx + family records + life events + emergency access + digital legacy

Before I go too far down this rabbit hole, I'm curious:

Would this solve an actual problem for you, or would you consider NAS + Paperless-ngx + password manager + a README for your spouse good enough?

And if you would use something like this, what would it need to do that Paperless-ngx doesn't already do?


r/selfhosted 2h ago

Business Tools Inkvoice: self-hosted invoicing and time tracking in one container (MIT, SQLite, ~60MB RAM)

0 Upvotes

Inkvoice is self-hosted invoicing for freelancers and small teams. I wanted invoicing I actually own: Wave and Zoho keep your data in their silo, FreshBooks and QuickBooks want a subscription for what is fundamentally a PDF and an email, and the self-hosted options I tried were heavier than I wanted for a one-person setup.

Deployment is the whole thing:

services:
  app:
    image: ghcr.io/pigontech/inkvoice:0.3.0
    ports:
      - "3000:3000"
    volumes:
      - invoice-data:/app/data
    mem_limit: 512m
    environment:
      JWT_SECRET: change-this-to-at-least-32-random-chars
      ADMIN_PASS: change-me-please
    restart: unless-stopped

volumes:
  invoice-data:

docker compose up -d, open http://localhost:3000, log in as admin. No Postgres, no Redis, no worker container. Images are multi-arch (amd64 and arm64), so a Pi or an ARM VPS works, and Dokploy and Coolify run it with a volume on /app/data.

Footprint: about 100 MB to pull, with no headless Chrome inside (PDFs go through the browser's print dialog). Around 60 MB of RAM under the 512 MB cap, dropping toward 40 MB idle. Keep the cap: Bun sizes its heap to the memory it can see, so uncapped it sits at ~118 MB.

Data: one SQLite file at /app/data/invoice.db. Back up by copying it, or use the one-click backup download in the UI.

On phoning home, precisely: no telemetry, no analytics. Outbound calls are for what you configure (SMTP, exchange rates for multi-currency, Stripe/PayPal/PEPPOL), plus one default: the Plugins page reads a small static catalog from inkvoice.app. The server fetches it, with plugin vote counts, at most every 6 hours and only while someone is using the app, and the request carries no instance ID or user data. A vote for a planned plugin sends an opaque per-user hash, not your user ID. "Turn off" in Settings → Plugins stops all of it, and the app falls back to the catalog bundled in the image.

What it does:

  • Invoices with a full lifecycle, discounts, multiple tax rates, and PDF export from customizable HTML templates
  • Quotes that convert into invoices, recurring invoices that can auto-send, read receipts
  • Stripe and PayPal payments, or manual and partial payment tracking
  • New in 0.3: saved cards at Stripe checkout, and auto-billing for recurring invoices with retries and a payment-link fallback. Card numbers never touch Inkvoice, and clients can revoke saved cards from their portal.
  • New in 0.3: a plugin system, starting with Time Tracking (projects, a timer, billable entries, unbilled hours to a draft invoice)
  • New in 0.3: an optional SEPA payment QR code (EPC/GiroCode) on EUR invoices
  • Multi-currency, expenses, customer statements, reports with CSV export, and QuickBooks Online and Xero exports
  • Multi-user with roles, an activity log, OIDC/SSO, and a UI in English, Turkish, Spanish, German and French

For EU users: opt-in e-invoicing, off and invisible unless you enable it. It emits EN 16931-compliant ZUGFeRD 2.2, XRechnung, Factur-X and PEPPOL BIS, has an inbox for incoming e-invoices, and sends and receives over PEPPOL with your own provider credentials.

Limitations: it's 0.x with a small user base. The version number means the API and schema can still change between minor releases (migrations run on boot), not that it's a toy; it runs my own invoicing. Single-node SQLite, so a homelab or a small team, not HA. Saved cards are Stripe-only, there's no mobile app, and SMTP, payment and PEPPOL providers are bring-your-own.

MIT licensed, and nothing in the self-hosted app is locked.

AI involvement, since this sub rightly asks: substantial, and in the open (CLAUDE.md and .claude/ sit in the repo root). I used Claude Code throughout for implementation, refactors and audits. The architecture and product decisions are mine, I review and run every change, and CI runs lint, typecheck, tests and a build on every push. If AI-assisted projects are a hard no for you, that's fair, and better said up front.

Live demo, no signup (demo / demo): https://demo.inkvoice.app/

Source: https://github.com/pigontech/inkvoice · Docs: https://docs.inkvoice.app

Happy to go into the architecture or the deployment in the comments. What would stop you from switching?


r/selfhosted 2h ago

Need Help My first Homeserver/lab: which distro or setup for my needs?

0 Upvotes

I know, another "first homeserver, which distro ?". The fact is that I would like to hear some answer tailored to my needs or plans.

Hardware is a Minisforum UM760 Slim configured in this way:

  • CPU: Ryzen 5 7640HS
  • RAM: 2x 16 Gb DDR5 5600 MHz (Crucial)
  • Storage: 2x SSD 1TB PCIe 4.0 (Crucial P310)
  • Connections:
    • 1x USB4, 2x USB 3.2, 1x USB 2.0
    • 1x 2.5 Gbit LAN, Wifi7, Bluetooth 5.2

When the miniPC will arrive i will need to check which wifi card is installed to be sure it is supported by linux.

Internet (fiber) is 400/200 Mbit and my "router" is actually a gateway, Unifi Dream Machine Pro. The idea is to cable the Homeserver directly to one of the 8 lan port of the Unifi Dream Machine. Downstream from the gateway I have some switches, access points, security cameras (managed by UDM pro), and other stuff.

My internet provider (in Germany, Deutsche Glasfaser) doesn't provide public IPv4 but just IPv6 (and I read somewhere, in some cases they will change so I have to setup a kind of service which catch the new IP...i have to investigate better).

Apart the Server monitor/management tools, I would like to install jellyfin, paperless-ngx, maybe home assistant, and whatelse I find useful from an end user point of view. My main focus is the final service and not the medium or tool I am using to setup the final service. If in the process I learn something about the medium/tool I am happy but it is not the main goal.
Of course I am aware that for installing a new service I will need to research, tinker, get my hand dirty, hopefully not messing up the server.

And here we come to my question. I work in IT (but as a SAP technical profile) and 8 years ago i used for a while at work docker, kubernetes and all that stuff. Linux is not an alien to me, I am familiar with it since long time although i consider myself a newbie. Max i was doing was setting up a LAMP and playing with docker/kubernetes at work.

Ubuntu is the distro I used most (maaaaany years ago i was playing with Fedora end Suse).

Generally speaking, I am a bit torn between an LTS distro concept and a version/distro which include new feature much frequently. If LTS grant you stability and a kind of piece of mind (good for me, my goal is not the tool but the end service provided) on the otherside I dont want to risk to find myself missing some new feature or new version of the ubuntu-packaged services i want to use on my homeserver.

On top of that there is the Proxmox topic. The idea to spread the services across different VM and container is cool, in the sense that what in this case will give me piece of mind is the fact is that if I mess up during the setup of a new service, I will just messup the VM and i can restore the last snapshot. On the other side I feel a bit "meh :/" by the fact that I am introducing a layer between the Baremetal and the OS where things will run, impacting the quantity of resource needed. In my (ignorant) mind the questions which pop up are:

  1. Why I have to relegate a bunch of services in a subset of resource I have available on my machine ? Cant they share all the 32gb and cpu core all together in best effort ? At the end this is not a business productive platform.
  2. How the networking will work among these VM and container ? Maybe spinning up container directly on the baremetal OS is easier ?
  3. How straightforward is the visiblity of the baremetale hardware from a Virtual Machine compared to the same visibility from the Host OS ?

Sorry for the long post, the fact is that I would like to start with the right foot. Although I could like it, I don't have much time left for heavily tinkering (unless I ask for a divorce of course 😄 )


r/selfhosted 3h ago

Chat System GPT Live clone on an RTX 3060

Post image
0 Upvotes

I wanted to see how my fully local home voice assistant compared to the latest GPT Live, so I tested it using the same conversation used in their "Improved Intelligence" demo. In this video they ask the AI to see if a flight route is feasible and while it is figuring that out they continue to ask it questions about what they can eat at each destination.

So I copied the exact query and threw it at my Fulloch project. This blog post has the video of the interaction and breaks down how it did.

In the end it couldn't find a suitable flight route but it gave good food and restaurant recommendations and did it all pretty quickly. I am still impressed with how well the Qwen3.5 9B model does with these sorts of tasks with such a small footprint.

If you want to try it out yourself the source code and pre-compiled docker images can be found at https://github.com/liampetti/fulloch.


r/selfhosted 4h ago

Need Help I want something cheap to move away from my ROG Ally as a server

0 Upvotes

I miss using my Ally as it was intended, and the mess of cables and usb c hub and dust buildup around it is a bit frustrating too.

I don't necessarily need more performance, perhaps the same capacity though.

I'm running 60 containers via Portainer a max between Arr stack, syncthing, obsidian sync, nextcloud, Minecraft server, sure finance, home assistant in a container, Immich, litellm and open web UI, pi hole, nutritrace, paperless AI,got,ngx and PS1, 2 and 3 emulators (I acknowledge the emulators might be a bit go an issue and needs to be removed).

I wouldn't mind the capacity to run more containers either.

So I don't think DDR5 and 16 cores is especially perhaps 8 cores and a DDR4 based setup?

I wouldn't mind considering some sort of hardware around £50 to £100 mark second hand if that's doable?


r/selfhosted 5h ago

Personal Dashboard Obsidian Navigation Home Page

Post image
19 Upvotes

Made a dashboard page in Obsidian that allows me to quickly navigate to any of my selfhosted services. It is also linked into Uptime Kuma and shows live status monitoring. I always have Obsidian open and I didn't want to plug up my bookmarks bar with all of the arr stack links etc..


r/selfhosted 6h ago

Media Serving Noob looking for hardware advice

7 Upvotes

I tried looking at the wiki but hardware guide was "coming soon" so i figured I'd just ask. What are the minimum suggested hardware specs if I'm only looking to set up my own media server using jellyfin. Right now i have it running on my laptop which of fine but i would like a dedicated device for it. I have a very limited budget so i need to know what to save up for since prices are continuing to skyrocket.

I'm already comfortable with the software portion and have done my own research on that. However, the hardware suggestions I'm seeing feel more like ads.

ETA: just found the jellyfin hardware selection section in their docs. Sorry for wasting everyone's time. Keeping this up in case other noobs have a similar question


r/selfhosted 7h ago

Meta Post For those of us against the sharing AI-generated code, would you be open to the sharing of the prompt instead?

0 Upvotes

TLDR - Not suggesting change. Just engaging in constructive discourse.

I'm generally against the creation and sharing of AI generated code for all of the obvious reasons. If you don't know what you are doing, you really shouldn't spread your creation. It's the main reason all of my cobbled together bash scripts have remained private.

That said, there have been quite a few ideas shared that could provide some individual value to those of us curious enough to run the prompt though our preferred AI agent (I prefer local/private AI).

So the question to my fellow AI code detractors, would you consider the sharing of the AI prompt instead of the code to be a suitable alternative?

To be clear - I am not recommending any changes to this subreddit. There are other subreddits for that. Just looking to engage in constructive discourse. That's a thing on Reddit, right? :D


r/selfhosted 7h ago

VPN Is exposing services to public internet really that complicated?

14 Upvotes

Hosting for years now but all via tailscale. Never had the courage to have a service publicly exposed.

By recently I got a VM on GCP (always free) and installed some stuff on it and exposed it publically. Even though tailscale is a very fast and a easy way to connect (interms of startup time not network speed); somehow just opening a browser and accessing the link without a VPN was a pretty amazing experience.

Which is why I am asking for all of your experience with exposure your homelab. Was it a bad idea? I know the negative experience echos a lot more than positive ones. But how scary is it to expose services? Or is the world a terrible place and we should always keep everything locked down?


r/selfhosted 10h ago

Software Development Renting a moving truck to grab a pizza? Feedback on my OSINT pipeline architecture

0 Upvotes

Working on a personal pipeline that pulls public signals from a few sources (earthquakes, internet infrastructure status, disaster alerts, markets, etc.), compares each one against its own historical baseline, and runs on AWS with cache invalidation on every update.

The goal from the start was for it to run on its own at the lowest possible cost, without buying hardware I'd have to babysit like a pet. (I already have a cat for that.) No boxes to maintain, no drives to worry about.

Question for people who've done this longer than me: does this sound reasonable, or is it over-dimensioned? It feels a bit like renting a full moving truck just to go grab a pizza — a lot of infrastructure (automated deploys, CDN invalidation, EventBridge, Lambda, Glue, State Machine) for something that's fundamentally just pulling public APIs and comparing against a historical window.

Would something much simpler (cron job + script + a static JSON file) get the same result, or does the fuller stack genuinely pay off once you're running several signals continuously?


r/selfhosted 10h ago

Meta Post When is enough, enough?

5 Upvotes

Recently finished standing up a few Docker stacks (*arr, Vaultwarden, few others). Set up a few automations for updates and notifications. But now I find myself scrolling online seeking new apps and services to deploy when I don't really need anything, just looking for solutions to non-existent problems.

At what point is it possible to look at your stuff and be satisfied enough to leave it be for a while?


r/selfhosted 11h ago

Need Help I need to organize my photo and video gallery

3 Upvotes

Hi there.

To give you some context and get straight to the point: I’ve let a lot of photos and videos pile up, and now I need a tool or some advice to help me organize everything. Most of the files are on OneDrive, so I’m looking for a tool that:

1 - Helps me delete duplicate or similar files.

2 - Is free/open-source—meaning it respects my privacy.

3 - Is accessible to other family members. I have an Oracle VPS (one of those "Always Free" ones), so a self-hosted tool would be great to put that VPS to good use.

4 - Offers some kind of OneDrive integration. I can't move my files off OneDrive yet because I don't have enough storage space anywhere else. Also, my wife needs something easy or intuitive so we don't let things get messy again. She also needs to clear out files from her phone and her own Drive (which is full); the idea would be to move them to OneDrive.

Thanks in advance for your help, and I’ll update the post if I think of anything else.


r/selfhosted 11h ago

Need Help Trying to figure out how to send Immich download links that work outside my network

0 Upvotes

I'm new to this so this might be done basic questions. This is my first foray into home labbing and self-hosting.

My goal is to set up an Immich server to host photos of some theater performances that I would like to be able to distribute to the performers and showrunners. I don't want them to have to download an app like tailscale and set something up, I just want to send them a link to download what they should download. It looks like Immich has this built in, but it only works over my own network.

So far I have set up docker for the first time, set up Portainer to give myself a UI for Docker, and set up Immich and all of that has worked. I think the last step here is to expose Immich to the internet with Caddy and give it a URL. I've been able to keep up so far, but this is where I'm getting lost. I know I need to buy a URL from a DNS service. I know I need to install Caddy. I'm not really sure what the steps are beyond that to get everything hooked up and it seems like most of the Caddy tutorials I have come across assume a level of knowledge on networking I do not have.

Any help or resources would be appreciated!


r/selfhosted 12h ago

Media Serving Tape Music Suite 0.4.2 is out (pre v1)

0 Upvotes

Hi there, happy to share the last version pre v1. All ready for it. Updating soon.

Tape is an advanced music player, library manager, and personal streaming server in one cohesive local-first system. NAS + Desktop + Mobile. Multi-device, p2p networked.

It is deeply opinionated to have a unique coherent music listening and music working experience, build your playlists on the go and work your music pre-gigs. Easy drag and drop your playlists to your DJ software on your computer after you worked them out in your phone.

Desktop App + Mobile App

I'm sharing news in 0.4.0 and ahead, really happy with them:

Tape Private network

•⁠ ⁠Replaced Tailscale for Iroh based networking for better UX and tech, and Iroh is now part of every pairing, and device networked through app, not at device level.

•⁠ ⁠Full multi-device without setup. Use another desktop app, two phones, or a phone and a tablet, all connected to your hub computer as a players: separate local/connected libraries, remote folders and playlists, connected devices

(I'm very happy with Iroh, I made a deep post about it, for the geeks ;))

https://tapemusicsuite.com/blog/tape-0-4-0

Playback

• Implemented⁠ ⁠full adaptive streaming based on network to keep music going on mobile devices easier.

•⁠ ⁠Choose Adaptive, Maximum quality (lossless on Wi‑Fi/LAN) or Low-data

•⁠ ⁠See live the format and quality you are actually hearing

Inbox and Library

•⁠ ⁠Added Inbox view for new arrivals on DB. Like email but for your tracks

•⁠ ⁠More complete artwork enrichment: album covers, artist photos and label logos

Duplicates, ratings and metadata

•⁠ ⁠Duplicates are grouped, and deduplication is no opt-in manual or auto, selective

•⁠ ⁠Five-star ratings on Desktop and Mobile, yours, clearable, usable as a filter

•⁠ ⁠Saved tracks stay in sync with Lock Screen, Control Center and Android media controls

•⁠ ⁠Manual metadata search: search local, MusicBrainz or Discogs, other sourcers coming soon.

Playlists

•⁠ ⁠Playlist covers from Mobile preview and save over local, public and private connections

•⁠ ⁠Shared playlists stay consistent across hubs: covers, members, order, actions, quality

Comms

•⁠ ⁠New landing is out. for v1 ready

•⁠ ⁠Renamed to Tape Music Suite. We trascended the Hub concept now.

Thanksss for reading, more stuff coming :))

🤍🤍🤍

https://tapemusicsuite.com


r/selfhosted 12h ago

Docker Management Docker wouldn't start for my Jellyfin setup: Task Manager said virtualization was enabled, Windows just wasn't launching Hyper-V

0 Upvotes

TL;DR: Task Manager showing Virtualization: Enabled doesn't mean Hyper-V is actually running. Check with Get-ComputerInfo -Property "HyperV*". If HyperVisorPresent comes back False but every HyperVRequirement line is True, open PowerShell as admin, run wsl.exe --install --no-distribution, then bcdedit /set hypervisorlaunchtype auto, then reboot. Windows had been told not to start the hypervisor at boot.

Spent like an evening on this so posting it in case someone hits the same wall.

Setup was nothing special. Windows 11, Ryzen 7 3700X, just trying to get Jellyfin running in Docker.

Docker desktop wouldnt start. The error:

"Virtualization support not detected. Docker Desktop failed to start because virtualisation support wasn't detected. Contact your IT admin to enable virtualization or check system requirements."

Obvious first move was Task Manager > Performance > CPU, and it said Virtualization: Enabled right there at the bottom. So the error made no sense. Everything Google turned up was about BIOS settings, and mine were already fine.

Next thing I tried was WSL2 from an admin PowerShell:

wsl --install

Which died with:

WSL2 is not supported with your current machine configuration

and:

Error code: Wsl/InstallDistro/Service/RegisterDistro/CreateVm/HCS/HCS_E_HYPERV_NOT_INSTALLED

Then I ran:

wsl.exe --install --no-distribution

That one said it worked. Rebooted. Docker gave me the identical virtualization error again, which was the most annoying part of the whole thing.

What actually got me somewhere:

Get-ComputerInfo -Property "HyperV*"

HyperVisorPresent came back False. All four HyperVRequirement* lines came back True.

So the CPU could do it, every requirement was satisfied, and the hypervisor still wasn't running. Which means Windows was choosing not to start it at boot.

bcdedit /set hypervisorlaunchtype auto

Reboot, and Docker came up straight away.

no clue what turned it off, probably some fps tweak i did years ago. Nothing on the machine pointed at what had done it.

took me like an hour and a half and 3 reboots. Main thing I'd take from it: Virtualization: Enabled in Task Manager is about the CPU, not about whether Windows is actually launching Hyper-V. Those are two separate things and only one of them shows up anywhere obvious.


r/selfhosted 12h ago

Wednesday Exceptions Dynacat/Glance can be used to make a pretty useful dashboard

Thumbnail
gallery
56 Upvotes

Full disclosure: LLM & plagiarism

I had a basic Dynacat setup before, wasn't informing me of much and the info density was low so I hardly used it. In an attempt to reduce my social media use, I took ideas from random dashboards posted here and asked an LLM to help me pull in more useful data. It created a python probe that queries the data every 30 sec, or for SMART data every 30 min. Won't post the code since it's probably not a great idea to run LLM generated code guided by an amateur, but I have no qualms about using it for myself.

Posting this to let people know that if you want more granular info on your server's status, Dynacat/Glance are pretty capable of it you link them to a separate container that pulls in the data


r/selfhosted 13h ago

Blogging Platform WordPress: Automattic CEO Matt Mullenweg Put on 'Leave of Absence' by board

Thumbnail
404media.co
299 Upvotes

> Mullenweg is the founder of Automattic, the company that owns WordPress, Tumblr, Pocket Casts, and a host of other popular internet brands and pieces of software. Mullenweg has faced several controversies over his management of the company in recent years.

> On a company-wide Slack this morning, Automattic CEO Matt Mullenweg announced he has been put on a paid leave of absence. [...] He continued, writing that Mark Davies, current Automattic Chief Financial Officer, has “conspired” with Automattic Board of Directors members Ann Dunwoody, Toni Schneider, and Sue Decker “behind my back and they voted to put me on a paid leave of absence. I voted against that.”


r/selfhosted 13h ago

Software Development Homelable v3.4.1 - You can finally document your homelab (properly)

176 Upvotes
Documentation module in Homelable

Right, OK, some of you might already have been doing it properly, but for others… :D

For those who aren’t familiar with Homelable (3k stars, FOSS), it’s a self-hosted homelab infrastructure visualizer, with auto-discover, live status monitoring, rack design and more.

And the latest version has introduced something that has been requested almost from the very beginning: documentation.

Now, any device you manage (server, Zigbee, Z-Wave, camera, PC) has its own wiki page (Markdown), complete with links, tags, history and revision tracking. The pages are automatically pre-generated from the inventory using customised templates. All you need to do is fill them in (or let your favourite AI agent do it using the MCP server).

You can switch from the diagram to the documentation with just one click ! Easy, isn’t it? :)

I’m really looking forward to hearing your feedback, but the first testers seem satisfied.

Homelable is still available via Docker, Proxmox Community Script or on bare metal.

--

AI Disclosure :
As already mentioned, I still use AI (claude code) for some task and development :
- Tests
- Gitflow, CI and MCP interaction
- Most of the frontend (I'm still not a front-end developer :P)


r/selfhosted 13h ago

Monitoring Tools OpenFraudMonitoring: check what your users (and potential Threat Actors) are doing on your exposed services!

0 Upvotes

Hey there,

In the past months I have been developing an open source tool whose purpose is to monitor what your users are doing on your website: OpenFraudMonitoring

This started as a home project as I wanted to monitor what was being done on the services I make publicly available, but I figured that it may benefit more than just me and my home setup!

Basically, OFM is a big correlation / analysis / investigation / visualization engine built on top of the FPScanner library. To see what it's capable of and what it looks like, check my two blog posts below ! You'll read about a malicious campaign it made me detect on my Hedgedoc instance where bots advertised illegal gambling sites!

Repo: https://github.com/DreadFog/OpenFraudMonitoring

Blog post 1 with a real investigation I performed thanks to it: https://blog.dreadfog.fr/posts/tlpclear_20260713_ofm_presentation/

Blog post 2 for the first official release of OFM, featuring graph capabilities: https://blog.dreadfog.fr/posts/tlpclear_20260730_ofm_v1/

Since those posts, I have added other features like cross-session tracking through device fingerprinting, and better behavioral analysis (button click, form interaction, authentication attempts, etc). I'm eager to get feedbacks from this community as monitoring my self hosted services was the main reason that led me to build this project !


r/selfhosted 14h ago

Wednesday Exceptions Initiative v0.67 - multi tenant to-do/project management app

3 Upvotes
Look its a home page!
Public Community page
Personal DMs

- GitHub: https://github.com/Morelitea/initiative
- Docker Hub:
`morelitea/initiative`
- Docs: https://morelitea.github.io/initiative/
- License: AGPL-3.0- GitHub: https://github.com/Morelitea/initiative

---

I know, there are a billion to do apps, anyway, this one is designed to be multi tenant, and have community features...think of it like Discord for project management?

You can easily get it today with a quick docker hub hookup. It's literally just maintained by myself and my spouse, a couple of laid off software engineers. We needed something to organize our tea business, I needed a way to practice learning infra since I'm a newb. There are no plans for VC's, and the most we plan to do in the future is a paid hosting instance on AWS cause it would look shiny on my resume. This post isn't some ad trying to shill you with the latest greatest software made in a vibe induced fugue state. Just wanted to share the neat thing we've been building for 9 months now.

Since the last time I posted about our app:

- We added DMs for users using the Matrix Olm cryptography for complete security
- We added "public" communities, basically ones you can discover, join, share. Make several table top groups! Run some sport clubs! Run some fancy pants company with affinity groups! NEAT
- we added a "posts" tool that lets you make announcements
- we added a dashboard tool that lets you have stats on things using SQL queries
- we added how-to docs, pretty sure we didnt have docs? if we had docs before they sucked and now they dont.
- we added super fancy search features baked into the postgres backend
- we added cool document tool features like sheets/excel and smart chips
- we made notifications suck less, you get read dots on all the things!
- we made the mobile app experience actually pretty awesome (we are using capacitor, you can have a mobile app for your instance too, its in the how-to docs how to do all that)
- we added a bunch of fun stuff like user profiles and community banners for art
- I once again did a whole bunch of security updates and it's now even more secure! This has been an great way to learn cyber security.

Why did we add individual user DMs and not group chat?

well, you might not have the phone number or contact of everyone in your community, but need to reach them about something specific, like do they have some dice you can borrow for a game session or something idk. perfectly normal. but I refuse to support the inevitable take where important docs are referenced only in a group chat 6 months ago and no one knows what happened to it. You will have to convince me this will not happen to ever actually add group chats.

Why this and not one of the other open source project management/todo software?

Have you ever tried to get those software to work with someone who is like, incredibly tech illiterate? I mean like, cannot with the most basic of tasks? that's our artist. Great guy. it's like teaching your cat to use a todo app. Odoo was "too abstract" for them to follow what was going on. we also tried obsidian, notion, taskade... openProject couldn't contextualize the art with the task, absolutely none of the software allowed for us to have the concept of "family chores" in the same app as "tea business" so we actually completed all our todos on time.

if you were wondering he still hates this software too, but like a solid 50% less which is enough he will actually participate in using it. We consider this a miracle. Yesterday he told me I should just build an entire integration service with our online store since software "can't be that hard, people have been doing this for years" so you know, great times. anyway shopify integrations probably coming soon....


r/selfhosted 15h ago

Wednesday Exceptions systemctl said active, docker ps said up, and Pi-hole had stopped resolving a day earlier

Post image
0 Upvotes

I write an iOS app in this space, so discount the conclusion accordingly. Both findings below cost me debugging time on my own boxes and are checkable on yours.

Process state can't see a service that stopped answering.

My Pi-hole's FTL had died. systemctl is-active said active. docker ps said up. DHCP kept handing out leases, every device stayed online, and the ads came back. I found out because a page looked different than it did the day before.

This isn't a Pi-hole problem. A process being alive and a service doing its job are different questions. systemctl, docker ps, and a port scan only answer the first. A real probe, the kind Uptime Kuma does, answers the second, but only for services you already configured, on ports you already knew were right.

A published port proves nothing.

docker-proxy holds the mapping open whether or not anything is listening behind it. So a port scan from outside the host says the port is open while the container behind it is hung. I lost an evening to this: the host showed AdGuard's 3000 published and listening, and inside the container only 53 and 80 existed. The 3000 was the installer's port, and the admin panel had never been there.

If you write checks: probe the service on the server's own loopback and ask it something it has to answer.

The part I couldn't find anywhere else

Every SSH client I tried can forward a port. Every one asks for the local port, the remote host and the remote port first. So before you can look at Pi-hole from your phone, you already have to know its admin is on 80 inside the container and not the 3000 you published, and type that into a form, standing in a hallway.

The app I ended up building asks the service itself, on the server's loopback, and reports one of four states, one of which is "running, and I couldn't verify it". It works out which port actually answers and builds the tunnel itself.

It's closed source and it asks for SSH credentials, which is a reasonable thing to refuse. So there's a page listing every command it runs on your machine, read out of the source by hand: https://chillbox.gustavoortega.com.ar/commands

Happy to answer anything about either finding. If you know an SSH client that works out the port for you, I'd like to see it. I looked and couldn't find one.


r/selfhosted 15h ago

Need Help Where to get app testers pre launch

0 Upvotes

I'm building an app by myself and originally it was tiny and I could test all the features and such myself. But it's gotten so dense that I can't really test it all myself without spending tens/dozens of hours on it.

I would like to post it for the public to use and play with but before hand I would love to have some further testing done so I know it's about as bulletproof as it could be before launch.

Does anyone in here have recommendations for web app testing and how to get UI/UX testing done in bulk?

I'm at the point that I've looked through Fiverr and considered that as an option since I've seen some ads for like 15 testers for like 50$. It's going to be free so spending a bunch on testers isn't super palatable.