My most frequently used are most likely vaultwarden, Memos, Trilium, Jellyfin, Frigate, Traggo, and beaverhabits. Also AdGuard and NPM but I don’t interact with them.
Oh yeah and freshrss
And! Nextcloud and Baikal. NC only for storage and Baikal caldav and carddav
I’m curious, is there a reason you use Baikal over Nextcloud for cal-/card-dav?
I would probably be happy to not have to run an additional service, so I would have to have good reasons to run Baikal next to Nextcloud. Then again, if I had already setup Baikal and then, sometimes later, Nextcloud, There would probably be a great span where I ran both :D
It didn’t work with iphone. Also, I previously hate Nextcloud and don’t want to depend on it to do any service except storage. Do not trust it.
-
Samba (I can move files now, sweet!)
-
Jellyfin (I can watch stuff, sweet!)
-
Qbittorrent-wireguard (for pirating copyrighted material from the internet illegally)
-
Somesuch Wireguard solution (for accessing the backend and doin stuff)
-
A proxy somewhere else
The rest is extra. This gets my usual goals completed pretty well.
for pirating copyrighted material from the internet illegally
I’m pretty sure that’s not the phase we use now
“Archiving legally purchased content as an insurance against corporate-sanctioned theft”?
-
I have a dedicated vm for things that are crucial to the home network, either latency-critical or network related.
That’d be my dns resolver (I enforce it over VLANs by hijacking anyone trying to do DNS to other resolvers, like random IoT devices), homebridge for less important home automaton and my own matter controller for most important home automaton (controlling the lights).
My router of choice is RouterOS in another VM. I tried opnsense, pfsense, vyatta, and a bunch of others (even a containerized Cisco route), and I settled on ROS, because it was the only one who could do IPv6 properly (apart from Cisco, but that has other issues).
For the less important things I run them on k8s and really, there are only two bits worth mentioning as essential: ArgoCD and nixhelm. Together, they provide effortless and mostly automated software updates with very easy rollbacks. I don’t have to go and manually update every single bit of software and that saves huge amounts of time.
Depends on what your usecase is for what is “essential.”
I think keeping household documents, taxes, medical bills, etc… In a local only paperless-ngx instance is quite essential to the organization of a household where everything is searchable and able to be organized on multiple levels compared to a simple document folder on 1 computer.
Having a document or self-hosted wiki with an in - case - of - death document that gets backed up in an encrypted, but accessible by family place is probably the most “essential” thing.
Tailscale
So headscale?
Pepsi or Coke?
Yes.
Honestly, I’ve used both. Tailscale edges out headscale by a tiny bit just because of the admin console’s GUI but other than that, yeah.
Headscale is not essential. Of course in this context the “self-hosted service” would be the Tailscale client…
Docker
TCP/IP
Sorry, this is an AppleTalk household.
I laughed my ass off when Chris from LUP podcast said they used Netbeui in their studio. I wouldn’t admit to that, myself.
Man, I haven’t seen a reference to that protocol in a very long time.
When I was studying for my first MCSE back in ancient times, my girlfriend heard me mention ‘netbeui’ and thought it was the funniest damn thing. She used to catch me throwing out all the computer jargon and just yell “NET… BOOEEEEEY” at me.
Excuse me, what?
Biggest Linux podcast in the world, uses NetBEUI. Yah, there’s that.
- AdGuard home (usable also as private DNS on Android)
- JellyFin
- Homeassistant
Adguard home
and Wireguard pointed at AdGuard for DNS
Set the mobile app to enable WireGuard connection when not on home network and then you have AdGuard everywhere
I’ve pointed my domain to my wireguard tunnel VPS IP, same result. I can just set my private DNS in settings pointing to my AdGuard domain
No one’s mentioned Forgejo yet? Solid git and artifact repository.
For me, the most essentials are definitely:
- PhotoPrism
- Jellyfin
- Navidrome
- Wiki.js
- thelounge
- git
- syncthing
@bpt11 headscale is high on my list, since it enables everything else I host to be behind a tailscale VPN.
Radicale for calendar, tasks & contacts
Syncthing for file sync
FreshRSS is the best I’ve found for RSS
Jellyfin for media
Audiobookshelf for audiobooks (but really more for podcasts, in my case)Zim + syncthing + mega
A reverse proxy, in my case Caddy.
Duh, you need a reverse proxy to host most of the stuff (if you want to run more than 1 service and use HTTPS). I use Traefik btw, though I heard Caddy is very easy to use.
How did you set up you SSL certificates, are you using a self signed certificate or do you use a custom subdomain?
Caddy automatically sets up certificates for you. Since I don’t want my subdomain to appear in certificate transparency logs, I use a wildcard certificate which requires using a plugin for my DNS provider.
Thanks, that sounds good. Can you explain more how you used the plugin for the wildcard certificate?
To get a TLS certificate from Let’s Encrypt, they need to verify that you are in control of your domain. For regular domains, this can be done via HTTP, for wildcard certificates they require you to create a DNS record with a special token to verify ownership of the domain.
This means that in order to automatically obtain a TLS certificate, caddy needs to interact with the API of your domain registrar to set up this record. Since there are many different providers, this isn’t built into caddy itself and you require a version that includes the corresponding caddy-dns module. Caddy modules need to compiled into the binary, so it’s not always trivial to set up (in my case I have a systemd timer that rebuilds a local container image whenever a new version of the docker.io/caddy:builder image is available).
Depends on the situation of course, but for us:
- immich: family photos are important
- docker + ssh: we enjoy hobbying with code, nerds be nerds
- samba: a file sharing protocol that works on all of our things
Yeaaah I hate to admit it… But Samba is the only crossplatform sharing protocol that works with every OS… I wish I could switch to NFS.
That and ftp, but that protocol seems to be cared enough for to not be maintained. Weirdly enough, samba made it into the linux kernel recently