@devve

- Nextcloud
- Miniflux
- Gitlab
- HomeAssistant
- Wallabag
- Ghost (for my personal blog)
- Umami analytics
- Searx NG
- OnlyOffice document server
- ntfy
- Lychee
- LAMP Stack
- TheLounge (IRC web client)
- Cockpit (server manager)
- RSSHub
- Jellyfin
- Adguard

On an Intel NUC in my closet.

• Audiobookshelf
• Calckey
• Gitea
• Grafana + Prometheus
• Homeassistant
• Jellyfin
• KitchenOwl
• Navidrome
• Nextcloud
• Wallabag

and lemmy of course 🙂

Running Tipi on a five year old chrome box with tailscale as the VPN. Has been running great! Now I’m self hosting

1. Adguard: adblocking inside tailnet & for DNS rewrites
2. Barrage: Nice deluge UI
3. Beszel: Clean & simple server monitoring. I monitor two of my instances & the self hosted setup on this.
4. Beszel Agent: Agent for collecting data for Baszel
5. Deluge: Torrenting
6. Duplicati: Backups with a great UI
7. File Browser: for quick ops
8. Flowise AI: Great drag and drop LLM chat apps builder
9. Immich: The absolute best way to manage pictures
10. Jackett: For the arr stack
11. Jellyfin: Media streaming solution with apps on my phone, TV & laptops
12. Open WebUI: My default LLM chat client now, I no longer pay 20$ for chatGPT but just pay as I go with open webui and chatgpt api key
13. Radarr
14. Sonarr
15. Uptime Kuma: Uptime monitoring for everything
16. Wallos: Subscription management

Tipi is pretty awesome. If you haven’t already, check it out!

• Pihole

• Sonarr

• Radarr

• Lidarr

• Notifiarr

• Sabzbd

• Nicotine+

• Kodi

• Plex

• Airsonic

• Nextcloud

• Joplin

• qbittorrent

Currently split between VMs and physicals. I’m refactoring these ,with plans to build out and migrate much of it to a minipc proxmox cluster.

Adding:

• proxmox

• podman/portainer

• unbound

• ngnx proxy mgr

• Solid server

• homepage

• matrix

• searxng

• some sort of mail stack, TBD

My “Home Lab” loosely put, is an amalgamation of this:

Docker and Docker Compose installed on Ubuntu on a Dell PowerEdge 530 and on that docker host I have: -Portainer

-Nginx Proxy Manager

-Cloudflare Dynamic DNS

-Chromium

-Dozzle

-Gluetun

-Homarr

-Jellyfin

-Kanboard

-Komga

-Radarr

-Lidarr

-Sonarr

-Navodrome

-netbooyxyz (work in progress)

-Prowlarr

-qBittorrent

-Pairdrop

-Resilio-Sync

-Searxng

-Siganl CLI container for alerts

-Uptime Kuma

-VSCode

-WikiJS

-Watchtower

On one of my Pi’s:

-Pihole

-Pialert

-fail2ban

-PIVPN

-Unbound

The weakest part of my setup arguably is between my storage “solution” and my networking setup.

Storage is just a bunch of large drives in the Dell. Next upgrade is a new router solution, but still use my current router for a wireless access point strictly for IOT and putting my other devices on separate VLANs.

I was thinking about getting a Nextcloud going, but not sure I want to as of right now.

Available from internet:

• jellyfin
• jellyseerr
• immich
• paperless-ngx
• owncloud ocis
• traefik
• homarr

Available only from local:

• the *arr stack
• qbittorrent
• jackett
• watchtower
• apprise
• netdata (kinda new, still have to fully understand how it works)
• portainer
• speedtest-tracker
• homepage

Security

All the services available from internet, just goes through traefik to terminate https, I rely on the build in authentication of each service. To add another layer of security, I have fail2ban active on all those services.

I have a public IP, and I have open on my router ports 80, 443, a random port for ssh and vpn.

Hardware:

Memory:
  System RAM: total: 8 GiB available: 7.73 GiB used: 4.46 GiB (57.7%)
  Report: arrays: 1 slots: 4 modules: 2 type: DDR3
CPU:
  Info: 6-core model: AMD Phenom II X6 1090T bits: 64 type: MCP cache: L2: 3 MiB
Graphics:
  Device-1: NVIDIA GP107 [GeForce GTX 1050 Ti] driver: nvidia v: 535.98

docker compose files

All the docker compose files + how I configured everything is available at: https://github.com/simone-viozzi/my-server

Bonus:

Since I like the ability of btrfs to do snapshots, I created all important docker volumes as btrfs subvolumes. Then I created a backup script that literally sends the subvolume (encrypted) to an external cloud. This does not allow incremental backups and most likely is not the best backup solution… but it works… the repo is: https://github.com/simone-viozzi/btrfs2cloud-backup

I welcome any advice / criticism!

vSphere cluster on 3 HP Mini EliteDesks:

• 2x PiHole servers with local unbound resolver; synced with Gravity Sync
• 3x Active Directory DCs
• Homebridge Instance
• Jenkins Instance
• Portainer Instance Hosting:
  • Authelia
  • Code Server
  • CyberChef
  • Guacamole
  • NGINX Proxy Manager
  • PairDrop
  • SMEE Client
  • Your Spotify
  • Docker-SMTP
  • Vaultwarden
  • A couple of personal websites using NGINX
• Kubernetes (k3s) (3 Managers, 6 Workers) Hosting:
  • ArgoCD
  • AWX
  • Rook Ceph
  • Cloudflared
  • My main personal website using a container image built with Jenkins and deployed with ArgoCD.

---

Standalone Lenovo TS140:

• Plex (GTX 1650 Super for Transcoding)
• SABnzbd
• Radarr
• Sonarr
• Ombi
• Tautulli
• MP4 Automator
• Veeam B&R for backing up vSphere hosts.

---

Synology DS1821+:

• 64TB Raw, 2TB NVMe Cache
• MeTube
• Backup Sync to Google Drive

---

Misc:

• RIPE Atlas Probe
• All networking gear is Unifi. UDM Pro, USW Aggregation, USW Pro 48 PoE, U6 Pro, U6 In-Wall, 3 USW Flex Minis. 10G SFP+ connections between UDM Pro and switches.

I have a rented server with 8 Xeon E3-1246 and 64GB at Hetzner where I host:

• Vaultwarden
• Gitlab (git repo, container registry, static blog (pages with Hugo))
• Drawio (Diagrams)
• Kroki (for Gitlab)
• Gitlab runner
• FreshRSS
• Nextcloud
• Redis
• Headscale (Tailscale server)
• Keycloak
• MariaDB
• PostgreSQL
• Plex
• Privacybin
• Wallabag
• Hedgedoc

It’s all behind a Traefik instance handling Let’s Encrypt and using the Docker socket to route traffic based on labels in docker-compose.yml. Behind these I also run k3s and from time to time some VMs. I also have a 1TB storage pod at Hetzner where I use restic to back everything up from this instance as well as from my home system and laptops.

Been self hosting for over a decade at this point. Mix of custom built servers and surplus hardware over the years.

To name a few of my daily servers.

• home assistant
• paperless-ng
• jellyfin
• nextcloud
• blue iris
• audiobook shelf

With docker being so easy I have kind of lost track how much stuff i am hosting. A problem i never thought i would have :)

Proxmox on a self-built rackserver (Will be building a second one for a proxmox cluster):

• Pi-Hole (primary)
• Home Assistant
• 2 Docker Hosts (One for Eval, one for Prod)

Raspberry Pi Zero for Pi-Hole (secondary)

On my Docker Host (All in docker-compose):

• Heimdall (Personal Dashboard)
• Portainer (Docker GUI)
• baikal (CAL & CADdav)
• vaultwarden (Password Manager)
• bookstack (Documentation, kinda abandoned because im lazy)
• changedetection(.)io (Monitoring Websites for Changes, useful for changelogs or price monitoring)
• cloudflare-ddns (DDNS because dynamic IP Adresses…)
• Grafana & InfluxDB (Dashboard and Database for Stats)
• linkding (Bookmarks aka “Have to read someday”)
• mealie (Reciepe manager)
• neko (Watch2gether but in selfhosted and more capable imo)
• nginx proxy manager (Reverse Proxy with GUI)
• paperless-ngx (Document manager with OCR)
• semaphore ui (Ansible GUI with sheduled tasks)
• Uptime Kuma (Status Monitoring)
• watchtower (Automatic updates of my docker containers because im lazy)

A Synology DS220+ for local Storage

A 5TB Hetzner Storage Box for Backups (encrypted)

A Rootserver for Games and some testing in the wild (Currently Windows, will be switched to ubuntu)

Hetzner Cloud Server with mailcow on it

I had a small X.25 network as combination coffee-table and space-heater at one point; this was before most homes had internet. It almost cost me a divorce.

home assistant, freshrss (and a few related services such as rss-bridge), nitter and piped. I tried to host libregrammar, but ran out of memory.

• jellyfin and Plex (in the process of migrating)
• radarr/sonarr
• jackett and deluge
• nextcloud

I’ve had new hardware in the basement now for a while, going to slap it together and build a k8s cluster on top of rancher/harvester

Currently I play around with a Raspi 4 8GB with docker-compose. Most services are accessible with VPN only:
Caddy (as easy reverse proxy)
Portainer (container dashboard)
Linkding (bookmarks)
Baikal (calendar, todo list to sync with Android by caldav)
Agendav (web calendar frontend)
Dillinger (browser markdown editor with PDF export)
Trilium (note app)
Syncthing (google drive/onedrive alternative)
Seafile (file sharing)
Jellyfin (media server)

Using LXD:

• ddclient
• Jellyfin (2)
• Minecraft (proxy + 4 servers)
• Satisfactory server
• V Rising
• Gitea vcs
• wordpress
• rtorrent
• other web servers

Using rootless Podman + Systemd service:

• Vaultwarden
• Linkding
• Traefik
• Immich photo backup
• Nextcloud (though I hate it, probably will stop)
• Grafana
• Prometheus
• Prowlarr/Radarr/Sonarr/Lidarr/Bazarr/Recyclarr
• Rtorrent + Flood
• Jellyseerr
• Navidrome (Subsonic server)
• Miniflux (RSS)
• Woodpecker (CI integration for Gitea)
• Tubearchivist (yt-dl)
• wg-easy (wireguard)
• searxng

All services are split across 2 DIY servers (in towers). 15TB of media stored on HDD with btrfs duplicated across both servers. One server host is Alpine Linux, the other is Opensuse MicroOS. LXD containers usually are Debian 12 or Alpine. I’m beginning to migrate some things to a cluster of (12) raspberry pi 3s. Unsure what to choose for rpi’s, maybe, Fedora CoreOS (ublue), although Alpine does work extremely well on them (once you get them set up with it).

+ router running fresh tomato :)

Also mailcow for email, on a VPS, although I need to switch to a new provider, having difficulty with delivery using Linode and OVHCloud.