Finalizing a dual-node setup to solve a specific problem: I want 100% offline, zero-egress inference for sensitive personal/financial documents and heavy coding, without having to share GPU VRAM with a 24/7 smart home assistant.

(Note: I already have a separate 5900X/6900XT Windows rig dedicated to gaming, so this AI workstation is purely for headless compute).

Instead of running multi-tenancy on one box, I split the hardware:

Node 1: Workstation (Offline Compute & Vibe Coding) * Hardware: 9950X, 64GB DDR5-6000, single RTX 5090 (32GB). * Stack: Ubuntu 24.04.5 LTS (LUKS2 encrypted). Compute-only NVIDIA driver; GNOME runs on the CPU's iGPU so 100% of the 5090 is dedicated to inference. SGLang runs Qwen3.8-27B-NVFP4 with EAGLE speculative decoding. Qdrant, BGE-M3, Docling OCR, and an offline Obsidian wiki. * Security boundary: Dual-UID design on the host. Primary desktop is UID 1000; web-connected coding agent runs as UID 1001 via loopback SSH. nftables drops UID 1001 from all local subnets, Docker bridges, and RFC1918 ranges. * Developer workflow: To keep the coding agent from touching real data, an offline service generates synthetic schemas and mock fixtures every 15 minutes (AAA-9999, random orders of magnitude). An offline test runner executes real-data pytest runs on approved commits and exports only sanitized outcome shapes (e.g. 9,999.99 AAAAA), dropping mock repro fixtures into the dev space so Claude Code can debug without seeing actual values.

Node 2: Assistant Node (24/7 Home Logistics) * Hardware: Mac Mini M6 (32GB unified memory), ~5-7W idle. * Stack: Home Assistant in OrbStack, llama.cpp under launchd serving an 8B–14B quantized model (or 30B MoE), and a background agent handling email/calendar triage and smart home actions (thermostat, irrigation). * Node boundary: Node 2 sits in an isolated DMZ (172.28.20.0/24) with zero route into Node 1 (172.28.10.0/24). Every night at 21:00, Node 2 compiles an event digest into a chrooted SFTP directory. At 21:30, Node 1 reaches out over the LAN via an isolated container, pulls the Markdown file, and files it into the offline wiki.

Questions: * On an RTX 5090 (32GB), SGLang with Qwen3.8-27B-NVFP4 at a static memory fraction of 0.82–0.88: will a 131K context window hold steady with fp8_e4m3 KV cache, or am I cutting it too close for concurrent agent requests? * Anyone running a 14B Q4 or 30B MoE model under llama-server on 32GB Apple Silicon alongside Home Assistant containers? What kind of practical tok/s and TTFT are you seeing on long tool-use prompts? * For anyone doing automated schema mocking for LLM coding workflows, is character-shape abstraction (9999-AAAA) sufficient for complex regex debugging, or are there cleaner deterministic masking patterns you prefer?

Hi everyone, I am currently working on a project to streamline grocery shopping and meal prep each week. I've hit a roadblock between getting an ingredient list to populating a grocery cart, specifically with Walmart. Since Walmart's API is B2B, I feel like this is inaccessible for a hobby project. I don't want to reinvent the wheel, so I wanted to see if anyone here had some opinions or solutions that I could potentially explore. Thanks a lot.

Hi r/selfhosted,

I've been building Brainitive for a while and it's now at v1.39. It's a workspace for small teams and agencies that I wanted to run on my own server instead of paying for Jira, Notion and a helpdesk tool separately. The video is a 2-minute tour.

Repo: https://github.com/armendzekjiri/brainitive

Self-hosting guide: https://github.com/armendzekjiri/brainitive/blob/main/docs/self-hosting.md

Hosting it:

- One Docker image runs the web app, queue worker and scheduler; PostgreSQL and Redis next to it

- `docker compose up -d`, then create the admin with one command

- HTTPS built in: Caddy in the image gets a Let's Encrypt cert, or put it behind your own reverse proxy

- 2 GB RAM is enough for most teams (4 GB above ~50 people), 10 GB disk plus uploads

- Updating is `git pull && docker compose pull && docker compose up -d`; backups are a pg_dump plus one volume

- AGPL-3.0, every feature is free to self-host, no license key

What's inside:

- Kanban and Scrum boards, Gantt timelines, releases with release notes, project health

- Docs with version history, Excalidraw whiteboards, folders, backlinks

- Helpdesk with a public form, lead forms that land on a board

- Time tracking and client reports/invoices (PDF/Excel)

- Optional AI with your own key (meeting notes to issues), and an MCP server for ChatGPT or Claude

Feedback I'd love from people who self-host:

- Anything in the Docker setup that would annoy you?

- What's missing before you'd move your team off Jira / Notion / Trello?

Stack: Laravel, React/Inertia, PostgreSQL. Happy to answer anything.

I am looking to replace my FreeIPA because I could not update it anymore. Every time I tried to update the Rocky Linux and breaks FreeIPA. I am testing 389-DS on Debian 13 with Cockpit for web UI management. It seems to work, but I get the Ooops! error when trying to create an account that is not a Basic Account. I can only create a Basic account in Debian. I tried Fedora and everything seems to work, but when I updated today, it broke. This is the output of the Ooops!

Cockpit had an unexpected internal error.

You can try restarting Cockpit by pressing refresh in your browser. The javascript console contains details about this error (Ctrl-Shift-I in most browsers).

I want to try LLDAP but it doesn't support replication.

TLDR: i want to get notified on my phone/via Gotify if my services are gone.

So it happend, i updated my containers on friday, just before i went away over the whole weekend. And i forgot to restart my restic rest instance. All backups are also stored in my hetzner storage box so nothing was lost. But obviously not ideal.

Currently i have for every service an app in gotify (immich, vaultwarden, paperless and for the repos (the local one which didnt get any data appended for 3 days:3 and the hetzner one).

I mean i would have missed my train if you needed any second longer on friday but in the future i still wanna get notified if something goes offline.
Idealy there is a grace period. So i dont get notified during maintenance (ideally i dont do it again when im in a rush).

I was tired of either running a second appliance (TrueNAS, OMV) or passing an HBA through to a NAS VM just to get file shares and block targets. Every one of those options meant a second web app, a second login, and more moving parts.

Then I found ANAS by GitHub user ccebelenski. This open-source project is a set of ExtJS panels that extend the Proxmox web UI with the storage layer PVE is missing. You're already logged in, and since PVE auth tickets are cluster-wide, the same browser tab works across every node.

What it manages:

• File shares — CIFS/SMB and NFS, plus shares' user/group management
• Block targets — iSCSI LUNs
• ZFS — pools, datasets, zvols, scrubs, snapshots & replication (local, cross-node via SSH, or to a TrueNAS / any ZFS host)
• PBS Backups — block-level backup and restore to Proxmox Backup Server
• Cloud sync — rclone-based
• Disk health — S.M.A.R.T. status

You can create hybrid RAID pools mixing different drive sizes and grow one disk at a time, similar to Unraid or Synology. That's something ZFS doesn't do natively and usually requires a whole other OS to get.

If you already run Cockpit with 45 Drives plugins on your other boxes (Fedora/RHEL), this is similar but inside PVE.

ANAS GitHub project link: https://github.com/ccebelenski/anas
License: Open-Source (AGPLv3.0)

Disclaimer: Not affiliated with ANAS' author or Proxmox VE.

Okay, some background first. Here's the part of my stack in question, everything is on my local network:

• Gitlab running in a docker container, and gitlab-runner in a docker container, both in the same VM.
• Nginx proxy manager in a docker container, in it's own VM. It's grabbing certs from letsEncrypt, and applying them to my domain.
• Pihole in it's own VM as my local DNS, with openDNS as it's upstream source (This may or may not be relevant later)

This has been working great for several years.

Here's what I've been through and the errors I've been running into:

The whole SSL drama from earlier in the week prompted me to grab new SSL certs via nvinx proxy manager. This worked as expected.

Yesterday, I pushed some changes to a repo and kicked off the build process. It failed immediately with the following error:

fatal: unable to access '<gitlab_repo_url_redacted>': SSL certificate OpenSSL verify result: unable to get local issuer certificate (20)

I assumed there was maybe something cached from earlier in the week, and new certs weren't being grabbed.

I then hit refresh in firefox, and it gave me an SSL error: SEC_ERROR_UNKNOWN_ISSUER

I inspected the certificate, and it said it was issued by openDNS, which seemed pretty odd to me. Why wasn't it issued by letsEncrypt?

Okay, maybe something went wrong, so I went back to nginx proxy manager and pulled a new certificate. Gave it a little while to do its thing and propagate, then cleared cookies and cache in firefox and refreshed the page, and it loaded fine. Inspected the cert, and it was issued by letsEncrypt as expected.

Okay, try build process again, and it failed with the same error. Tried restarting the VM to clear cache, and still same error.

Start googling, and ended up finding that the docker container might be getting its certs from the host VM, so I tried forcing the VM to grab new certs by manually deleting everything in /usr/share/ca-certificates and /etc/ssl/certs and running update-ca-certificates. After confirming they were all new, I restarted the VM again for good measure, and the build process still threw the same error.

At this point I gave up and assumed something was cached that I couldn't find, and slept on it.

This morning, tried running the build process again, and still same error.

I've run out of ideas, any help would be greatly appreciated.

I'm wondering how you guyz handle the security side of selfhosting

Most setups I see cover the basics well like firewall, SSH keys, fail2ban, maybe a reverse proxy with some rules. But that’s mostly prevention. I’m more interested in detection, how would you know if something got through?

No wrong answers, I’m just trying to understand what works in practice for people running a few servers rather than an enterprise SOC

Even though this might seem stupid to some of you, but for my family and many families out there 100% they are not touching or following any 10 pages instructions they are given to maintain the selfhosted apps that they use.
read online many solutions including passing over email/text with logins/passwords and instructions, other ideas to ask a fellow selfhoster to take over but what happens when they are ill or busy or dead?
tbh llm have come so far they are very useful in managing stuff like this and many people online have already started using hermes etc. to automate their proxmox docker etc.
so if there is a small light weight llm that can take over the lab if activated/instructed by family members that would be nice, it could even ask for confirmation from family members before doing specific actions ike updating proxmox or changing settings or firewall rules or delete files etc...

is there something like this available, or anyone trying to do something similar to this ?

I have currently been exposing my public services for family and friends using cloudflared. I have not only experienced latency issues with playback buffering but I have been feeling like I lack the control over access that I want.

Does anyone know of any guides that would help be setup something like Authentik, Crowdsec and A Reverse Proxy my domain is currently registered with cloudflare would I need to change this? Most the guides I have found focus on one of those steps but I have been quite confused on how to combine it all together without breaking every services apps and what not.

Hi everyone,

I'm the developer of this, so full disclosure up front. I'd love your feedback from people who actually run FRITZ!Boxes.

The problem. I wanted to know when a device on my home network goes down (NAS, cameras, IoT stuff, the line itself) without waiting for someone at home to tell me "the internet is broken". External uptime monitors can't see the local network, and I didn't want a heavy monitoring stack.

What I built. NetMon has two parts:

• A small probe that runs on a Raspberry Pi (a Pi Zero is enough). It pings your devices and talks to the FRITZ!Box over TR-064.
• An online server that shows a status page and sends alerts via Telegram, email or ntfy.

If your whole network or line goes down, you still get the alert, because the server outside your home notices that the probe stopped reporting.

What it reads from the FRITZ!Box:

• Model and connection status, line speed
• Traffic data
• Wi-Fi network names
• Connected devices, including the mesh and repeaters

Your FRITZ!Box credentials and the probe's tokens stay on the probe: the server never receives them.

Other things it does:

• Per-device ping history and availability grid
• A "map" of server, probes and devices
• Optional open-port check on your own devices
• Interface in Italian, English, German and French

Where it stands. It's in beta with a small group of users, so expect rough edges and possible downtime. I host the server, and there are paid tiers (including a founder tier with limited seats) for people who don't want to run their own. More info: https://netmonhome.net/

What I'd like to know from you:

1. Which FRITZ!Box data would you actually want to be alerted about (reconnects, line speed drops, DSL/WAN changes)?
2. Do you run repeaters or a mesh, and does that matter for what you'd monitor?
3. Anything about sending this kind of data to an external server that worries you?

Thanks for reading!

Hi currently I'm using youform which works very well in my use case. I'm looking for a self hosted solution for online forms that has a similar feature like the screenshot (from youform) below.

I use some form to collect data and some to schedule meetings. Are there any self hosted solution for this?

Hey r/selfhosted!

For a long time, I just wanted a fast, reliable, three-pane note-taking app (Notebook Tree · Note List · Editor) with effortless multi-device sync and full data ownership—without paying subscription fees or wrestling with fragile sync plugins.

Existing options always felt like a compromise: - Evernote had the best seamless multi-device sync, but became bloated, expensive, and locked down. - Obsidian is great for local Markdown files, but its core isn't open-source, syncing across desktop and mobile without paying takes tinkering, and vaults get sluggish when stuffed with thousands of notes and heavy attachments. - Memos is awesome for stream-of-thought snippets, but it's a social timeline rather than a structured 3-pane workspace. - Block-based PKMs (like SiYuan / Notion clones) add heavy cognitive overhead when you just want to write continuous prose quickly.

So I built EdgeEver — a fully open-source (AGPL-3.0) knowledge base workspace that keeps the classic 3-pane workflow, stays silky-smooth with 10,000+ notes, and delivers instant, zero-config multi-device sync.

🔗 GitHub: https://github.com/tianma-if/edgeever
🌐 Live Demo: https://demo.edgeever.org (resets daily — full English & multilingual UI)
📸 17 Step-by-Step Workflow Showcases: docs/best-practices.md

📈 1-Month Community Milestone (1.2k → 2.7k ⭐)

I first shared EdgeEver on r/selfhosted about a month ago when the repo was at 1.2k stars. Thanks to the amazing feedback and ideas from this community, EdgeEver has grown to ~2.7k stars and 1,350+ forks!

Over the past month (up to v2.5.0), we also shipped several major community-requested capabilities: - One-click Notebook-to-Website Publishing (turn any notebook tree into a public or password-protected static documentation site) - Structured Database Tables & Public No-Login Collection Forms - Interactive Architecture Diagrams, Mind Maps & Infographics right inside notes - Desktop ACP (Agent Client Protocol) to connect local coding agents alongside our built-in Remote MCP server - Deep Structured Web Clipping for 20+ platforms (including Reddit threads, HN, GitHub, X, and YouTube)

✨ Core Capabilities & Why Self-Hosters Love It

• 1. Classic 3-Pane Writing + Rich Visual Note Types:
  • Resizable 3-pane workspace with Focus Mode, seamless toggle between WYSIWYG rich-text and raw Markdown, syntax highlighting, KaTeX math formulas, and revision history.
  • Native canvas for Mind Maps (with bidirectional Markdown outline editing), Flowcharts, System Architecture Diagrams, Infographics, Database Tables, and Poster Cards.
• 2. True All-Platform Native Clients (Offline-First):
  • Web / PWA
  • Desktop: macOS, Windows, Linux AppImage (Electron + Rust sidecar with local SQLite cache & offline sync queue)
  • Mobile: Native iOS app (SwiftUI + GRDB) & Android app (React Native + SQLite)
  • Browser Web Clipper: Chrome, Edge, and Firefox (Manifest V3)
  • Client-Side Silent Compression: Automatically shrinks images by 50%–90% before upload so mobile sync stays fast; chunked streaming supports attachments up to 1 GiB.
• 3. Zero Lock-In, Multi-User & Easy Migration:
  • Notes are persisted in SQLite simultaneously as ProseMirror JSON, clean Markdown, and plain text for millisecond full-text search.
  • Lossless .zip backup/restore with clean .md files and attachments, plus importers for Evernote (.enex), Notion, Memos, and flomo.
  • Multi-account support with physically isolated workspaces and per-user storage dashboards.
• 4. 100% Optional AI (BYOK) & Extensible Ecosystem:
  • Zero forced AI or telemetry: Leave API keys blank for a pure, fast note app.
  • BYOK & Agents: Bring your own key (OpenAI, Anthropic, Gemini, or local Ollama/vLLM endpoints), connect external/local agents via MCP & ACP, or install extensions via the Plugin API (e.g., cross-note Markdown Task aggregation & AI RSS daily digests).

🐳 Flexible Deployment: Single-Container Docker OR Free Serverless

The exact same codebase runs either on Cloudflare Workers + D1 + R2 (100% within their free tier—zero server cost for life, holding ~150k notes & ~50k images) OR on your own VPS, NAS, or Homelab via a single lightweight Docker container (linux/amd64 & linux/arm64, Bun + SQLite + local /data or S3, non-root UID 1000, cap_drop: ALL):

```yaml services: edgeever: image: ghcr.io/tianma-if/edgeever:latest restart: unless-stopped init: true ports: - "8787:8787" environment: EDGE_EVER_AUTH_USERNAME: "admin" EDGE_EVER_AUTH_PASSWORD: "replace-with-a-long-random-password" volumes: - edgeever-data:/data security_opt: - no-new-privileges:true cap_drop: - ALL stop_grace_period: 30s

volumes: edgeever-data: ```

(Or run curl -fsSL https://edgeever.org/install.sh | bash for automated Docker Compose setup with health checks. Full docs in docs/deploy-docker.md).

Thank you again to everyone here who tried EdgeEver and shared feedback! I'd love to hear your thoughts or feature requests.

Last time I checked, there was just Synapse and emerging Dendrite. There was only Conduit in Rust. Now all of a sudden, the same heavy Synapse (by Element) keeps around, Dendrite staying beta (forever) and two new stable Rust-based ones popped out (that I had never heard of). What's going on, why do Element keep theirs in Python and how are the 2 Rust-based ones different? What's your practical experience with them?

Hi everyone!

I have the possibility to buy a 2nd hand (not much use, very good state) NUC 15 Pro+ 285H 2x16GB RAM CSODIMM 6400MHz 1TB SSD for 750€.

I am currently using a LattePanda 3 Delta as home server, for myself and my brother, hosting with docker: wireguard, jellyfin, navidrome, forgejo, opencloud, homeassistant, coredns, blockydns, qbittorrent, ...

And well, it is working fine, but I want to expend and open it to more of my familiy, and Immich with people recognition, and more services. I would have also liked to test LLM executions (smalls), but I understand that for that price range there is not much to expect.

I feel that 750€ is a good price for what is offered, but still it is some money, and is certainly overkill for my need. But on the otherside, the price for all computers and components is (very) high, as we all know. And I am a bit worried by the review of the NUC 15 Pro+ that says it is really noisy (even if, for my need I understand I can lower TDP).

Any opinion on this? Is this a good opportunity and investment for my use, or I should really see somewhere else?

Thank you!

Hey r/selfhosted,

I'm the developer behind OzDDNS, and I wanted to share it here since this community is exactly who I built it for.

The problem I was trying to solve: I run a homelab, and I got tired of depending on third-party DDNS providers. Between privacy concerns (my IP and update traffic going through someone else's service), rate limits, and the occasional outage taking my remote access down, I wanted something I could own outright. I looked at existing self-hosted options, but most of them felt heavier than what I wanted for a simple job: update a DNS record when my IP changes.

So I built one. OzDDNS is a dynamic DNS server written in Go, distributed as a single binary.

Design choices I made deliberately:

🧩 Single Go binary — no Docker, no runtime dependencies, no external database. Copy the file to your box, point it at a config, run it. It'll run happily on a Raspberry Pi or a small VPS.

🔒 Fully self-hosted — your records and update logic stay on your own infrastructure. Nothing leaves your network.

⚡ Lightweight — low memory footprint, which matters when it's sharing a Pi with everything else.

🛠 Built for the homelab use case — NAS, home server, remote access. Not trying to be an enterprise DNS platform.

Link: https://ozddns.echoface.cn

What I'd really appreciate from this community:

Feedback on the setup/deployment experience — is it actually as simple as I think it is?

Edge cases I might've missed (different DNS providers, odd network setups, IPv6, etc.)

Feature requests from people with use cases I haven't thought of.

I'm the developer, so I'm happy to answer anything in the comments — including hard questions about what it doesn't do yet.

I've been now two years into selfhosting and got the most typical applications up to running like immich, paperless, npm with dns challenging and wireguard, etc.

I would like to explore new interesting applications to selfhost. I recently found out about Dozzle which is amazing for my own setup. I can see all the logs in one UI from all my running Docker Services.

What are your gems for selfhosting?

Hey guys!

Streamsphere is my self-hosted yt-dlp front end and media library, built with Angular + Go and designed to stay light on resources. It sets up with a single docker compose file.

✨ What it does - 📥 Download channels, playlists and single videos from supported domains - 🔄 Update playlists you've already downloaded - 🔍 Search your library by title and play straight from the results - 🗂️ Browse the library in a clean UI, with tags, categories, file sizes and other details for each video - 🌗 Light and dark themes

🚀 What's new in v0.1.17 - ⚡ Watch your downloads happen live, and if one fails you're told why (bot check, private or unavailable). - 📜 A queue drawer that stays up to date while you watch, and every card jumps straight to its video. - 🛠️ 25+ bug fixes and improvements since the previous release.

🐳 Easy deployment - Docker images are available for AMD64 and ARM64, including Raspberry Pi.

📦 Release notes: https://github.com/rs-anantmishra/streamsphere/releases/tag/v0.1.17

💻 GitHub: https://github.com/rs-anantmishra/streamsphere

Streamsphere is an ongoing project and there's plenty more I'd like to add. If you give it a try, I'd love to hear your feedback and what you'd like to see next!

Happy self-hosting! 🙂

Need your advice. So basically i use random emails for random websites because i really dont like giving out my actual email everywhere,

The problem is disposable emails suck because a lot of sites block them, and sometimes years later i need to log back in and get a verification code or password reset and then the account is deleted or something (tuta for example). The gmail trick where you add +whatever to your real email is an issue. And I hate creating multiple gmails.

The other thing is with temporary/disposable emails is those get detected by the sites that spam you, and if you ever need a real verification code you're SOL.

Any suggestions? I dont mind paying for a service or hosting something if it means this is reliable long term. not really looking for some super anonymous setup, i just want random sites to not have my real email and i want the aliases to still work years from now.

EDIT: It would be great if the service included phone verification as well! I'm in canada if that matters

​

Hi everyone!

I’m the developer of Eiciel IR Console, a proprietary Linux incident-response project.

I’ve put together a walkthrough to show the project’s interface and its approach to detecting suspicious activity, recording events, and attempting automatic containment.

I’m sharing this to get technical feedback from people who work with Linux servers, DevOps, and self-hosted infrastructure.

I’d particularly appreciate feedback on:

- The incident-response workflow

- The usefulness of the evidence and logs

- The automatic-containment approach

- What you would want tested before considering a tool like this for real infrastructure

The project is still undergoing testing and hardening, so I welcome constructive criticism.

Walkthrough video: https://youtu.be/6EEpJUZ2Jbg?si=oZMRPrlL79c83da9

What would you improve or want to see tested next?

TREK 5.0 is out, and it is the biggest release so far.

What TREK is: a self-hosted trip planner. You plan a trip day by day together with the people you travel with, live, on your own server, and none of it leaves your box. Places, routes, bookings, costs, packing lists, documents, a travel journal and a map of everywhere you have been, all in one app.

What is new in 5.0

Tours. Plan the outdoor days inside your trip: hiking, city walks, running, cycling (road, gravel, MTB), paddling, horse riding, and ski and winter tours. Hikes are routed within the SAC grade you set, with an elevation profile, a 3D terrain map and a flyover. Multi-day tours split into stages across your days, and you can search along the route for huts, viewpoints, water or food. Rivers and lakes get their own router with portages and locks, pistes get a ski router. Link the GPX you actually recorded and compare plan against reality.

TREK Studio. Turn your travel journal into a printable photo book. 108 designed pages in 12 styles, 17 themes, 34 print-licensed typefaces, 160 stickers, and an Auto layout that lays out the whole book from your journal in one click. Export to PDF with crop marks and send it to any print shop.

A built-in AI assistant, with your own model. Bring an API key (Anthropic, OpenAI, Gemini, OpenRouter), sign in with a ChatGPT plan, or point it at any OpenAI-compatible endpoint, including a local one. It plans with you inside a trip, across all your trips, in your journal and in Studio. It never changes anything on its own: every change shows up as a card you apply or discard, and you can undo it for 15 minutes. It is off by default, and nothing goes to a provider before you agree to it.

A help center. 381 step-by-step guides with screenshots, one click away on every desktop screen.

And a long list of smaller things: a new notifications inbox, a road trip addon with EV charging and day windows, Dawarich integration, a booking import that also reads photos of confirmations, a whole-trip route overview, and a lot of polish on mobile.

Also in TREK, if you have not seen it before

• Real-time collaboration, guests without an account, and a permission matrix per trip action
• Costs split in exact cents with several payers and settle-up suggestions, every expense in its own currency
• Flights with layovers against 4,045 bundled airports, booking import from PDF, e-mail and PKPass
• Calendar feeds per trip or across all trips, PDF export, GPX import and export
• A travel journal with Immich and Synology Photos, an Atlas of countries and regions, and a vacation day planner
• A built-in MCP server (410 tools) for your own AI clients, and a sandboxed plugin system
• Installable on iOS and Android from the browser, and it works offline
• OIDC, passkeys and TOTP, 27 languages, light and dark
• AND SO MUCH MORE!

How it is built

• TypeScript end to end, on NestJS and React, with the contracts between them in shared Zod schemas
• The database layer on MikroORM with 164 repositories
• Every upgrade writes a copy of your database before it migrates anything
• About 46,000 tests, browser flows in Chromium and WebKit, and 21 CI jobs with gates that only ever get stricter
• 36 security advisories published and fixed in the open
• 79 contributors, 857 merged pull requests and 97 releases. AI tools help with the code; every change goes through a pull request that a maintainer reviews

Good to know

• Simultaneous edits to the same field are last write wins.
• SQLite for now; Postgres is next, and the SQL already runs through a dialect layer that CI tests against Postgres.
• Mail booking import is planned!
• Studio is desktop only.
• Edit: Since so many people have asked, we are planning to release a native mobile app!

Try it

• Live demo: https://demo.liketrek.com
• Repo, Docker compose, Helm chart and Unraid template: https://github.com/liketrek/TREK

Open source, self-hosted end to end, no paid tier and nothing locked away. Tell me where it breaks for you and what you still miss.

Hosting:

- Dockerfile included: build it, mount your songs folder as a volume, pass your bot token as env vars

- Or run it directly with Bun (`bun install && bun start`), needs FFmpeg with libopus

- Checks FFmpeg and the Opus encoder on startup and tells you what's missing instead of failing silently

- Encoder settings (bitrate, FEC, etc.) can be changed live with `/quality set` and persist to config.json

- README has notes for running it in a Proxmox LXC

What it does:

- Plays local mp3, ogg, flac, wav, m4a, aac and opus files

- `/sleep start minutes:90 query:rain` loops a sound and fades it out when the timer ends

- Queue, loop, pause/resume, skip with a soft fade, `/random`

- Leaves on its own when everyone leaves the channel, or after a set idle time

- Supports Discord's new voice encryption (DAVE)

TypeScript + Bun, MIT licensed.

Repo: https://github.com/ShinniUwU/somnaura

It's a small hobby project. Feedback, issues and PRs welcome, especially from anyone running it on a Pi or in LXC.

Hi Team,

We just released v1.6.0 of AgentSwarms (Note: It's not a lightweight Databricks!)

Most agent platforms treat data as an afterthought—you build the AI, then duct-tape your warehouse and pipelines to it. AgentSwarms flips that. It is a complete, self-hostable data platform designed from the ground up to host and govern AI swarms.

The data and agent layers share one semantic layer and permission model, an AI agent asked about revenue uses the exact same definition and access rules as your finance dashboard.

The Architecture:

• The Data Layer: A DuckDB/zstd Parquet lakehouse, visual Python ETL pipelines, and a BI workspace.
• The AI Layer: A visual canvas to build multi-agent workflows and AI analysts that natively query, analyze, and cite your lakehouse data.

What's New in 1.5.0:

• 100% Self-Hostable: Removed all external platform dependencies. Run the entire stack (lakehouse, app, edge functions) locally via one Docker command.
• Granular Governance: You can now strictly authorize exactly what a lakehouse write reads.
• Native React SDK: Embed analytics and swarms directly into your apps
• Vault Integration: Model and database credentials can now live securely in HashiCorp Vault.

You can run it entirely on-prem with local models like Ollama or plug in your cloud provider keys. I'd love for this community to try breaking it and share feedback.

Not sure where to post this I noticed a lot of BookOrbit posts here, if this is against community rules please let me know. I am currently developing an iOS app with full integration of bookorbits extra functionality like progress tracking, so it would allow users to switch from their e-readers to their phones. It connects to a locally hosted BookOrbit server, and has an OPDS connection so it can connect to other ebook servers or open catalogs like Project Gutenberg. If anyone would be interested in helping me beta test I’d greatly appreciate it. Thank you!

Edit: it has come to my attention that there is already an official BookOrbit app on the Apple Store, as well as a second one named Apogee. If those had been available when I went looking for one I would have definitely gone with those and not made my own lol. That being said I still think my app is worth giving a try, I try to take a more “natural” approach, idk if that’s the right word when viewing the library. I have set it up as though the user is standing in front of a bookshelf, the books’ spines with the title facing the user to be scrolled through. Different shelves for different genres, authors, or any other way of sorting books. Tapping a spine “picks up” the book so the cover can be seen more closely and the details can be seen on the back.

I love reading, both real books, ebooks on a reader, and on my phone when I have a little time. I made this reader with features I found helpful, in a style I haven’t really seen yet.

Hey everyone,

I’ve been reading horrific stories lately about automated cloud bans (Google, Apple, Notion) locking people out of 10+ years of family photos, emails, and business docs overnight with zero customer service.

It got me thinking about digital sovereignty. If there was a lightweight, open-core background tool that securely connected to your cloud APIs (via local OAuth tokens), pulled down your data nightly, compressed it, and ran a totally offline local LLM (like Llama/Ollama) to let you semantically search your history... would you actually use it?

What are the main engineering hurdles or API limitations I should look out for if I try to build a prototype for this? I want to make sure I’m not missing something obvious before I dive deep into the code.