@devve

- Nextcloud
- Miniflux
- Gitlab
- HomeAssistant
- Wallabag
- Ghost (for my personal blog)
- Umami analytics
- Searx NG
- OnlyOffice document server
- ntfy
- Lychee
- LAMP Stack
- TheLounge (IRC web client)
- Cockpit (server manager)
- RSSHub
- Jellyfin
- Adguard

On an Intel NUC in my closet.

Host all the things!

Wordpress, SMTP/IMAP, tor, bittorrent, Nextcloud, Plex, NTP, photo galleries, DoT…

I even started hosting the website for my local Italian restaurant and they haven’t even realised it yet.

• Pihole

• Sonarr

• Radarr

• Lidarr

• Notifiarr

• Sabzbd

• Nicotine+

• Kodi

• Plex

• Airsonic

• Nextcloud

• Joplin

• qbittorrent

Currently split between VMs and physicals. I’m refactoring these ,with plans to build out and migrate much of it to a minipc proxmox cluster.

Adding:

• proxmox

• podman/portainer

• unbound

• ngnx proxy mgr

• Solid server

• homepage

• matrix

• searxng

• some sort of mail stack, TBD

vSphere cluster on 3 HP Mini EliteDesks:

• 2x PiHole servers with local unbound resolver; synced with Gravity Sync
• 3x Active Directory DCs
• Homebridge Instance
• Jenkins Instance
• Portainer Instance Hosting:
  • Authelia
  • Code Server
  • CyberChef
  • Guacamole
  • NGINX Proxy Manager
  • PairDrop
  • SMEE Client
  • Your Spotify
  • Docker-SMTP
  • Vaultwarden
  • A couple of personal websites using NGINX
• Kubernetes (k3s) (3 Managers, 6 Workers) Hosting:
  • ArgoCD
  • AWX
  • Rook Ceph
  • Cloudflared
  • My main personal website using a container image built with Jenkins and deployed with ArgoCD.

---

Standalone Lenovo TS140:

• Plex (GTX 1650 Super for Transcoding)
• SABnzbd
• Radarr
• Sonarr
• Ombi
• Tautulli
• MP4 Automator
• Veeam B&R for backing up vSphere hosts.

---

Synology DS1821+:

• 64TB Raw, 2TB NVMe Cache
• MeTube
• Backup Sync to Google Drive

---

Misc:

• RIPE Atlas Probe
• All networking gear is Unifi. UDM Pro, USW Aggregation, USW Pro 48 PoE, U6 Pro, U6 In-Wall, 3 USW Flex Minis. 10G SFP+ connections between UDM Pro and switches.

Hello

Let’s have a look at the inventory

• RPI 4B

  • OpenHab (Openhabian actually, so some additional services like Zigbee2MQTT or Grafana)

• HP EliteDesk 800 G2 i5-6500T, 8GiB RAM - this one is currently the mainstay of my lab, running containers with docker-compose

  • Nginx as reverse proxy (+ fail2ban, letsencrypt)
  • Paperless-ngx (+ Redis, Tika, Gotenberg)
  • Jellyfin
  • Minecraft server (+ Mapcrafter)
  • ddclient
  • Heimdall

• Dell OptiPlex 7060 Micro i7-8700T 32GiB RAM

  • I’ve gotten this one fairly recently. A real bargain - costed as much as the CPU alone and was in pristine condition. I will be migrating the workload from EliteDesk to this one. I decided to try ProxMox this time though, so I need to learn a bit first. Also perhaps add a second SSD

I don’t selfhost very much compared to other people and my hardware’s pretty much either all literally found in the garbage or 2nd hand, but here it is

PiHole

WireGuard server that passes trough pihole adblocking

Homarr (lol)

Deluge

The system is mostly a NAS that I also run the occasinal general purpose VM off of, here are the specs for the 3 ppl that care:

CPU: AMD FX-8320E

RAM: 16GB

Storage: 5x2TB Seagate something something 7200RPM in RAIDz1, 128 GB random chinese SSD (mostly for VMs and apps) the, OS runs off of a flash drive

OS: TrueNAS scale

Can’t ask too much off my little laptop, but here it is

• HomeAssistant
• Frigate NVR
• PiHole
• Wireguard VPN

Just testing from selfhosted instance!

I have a used Lenovo Thinkcentre mini with an i3-7100T and 16gb RAM. I have Ubuntu server LTS installed on it and I run everything in docker containers.

I host:

• jellyfin server for my friends and family
• qbittorrent to download for the JF server(behind a VPN)
• Jellyseerr for requests
• Jackett, Sonarr, and Radarr for downloads
• a Minecraft server

My “Home Lab” loosely put, is an amalgamation of this:

Docker and Docker Compose installed on Ubuntu on a Dell PowerEdge 530 and on that docker host I have: -Portainer

-Nginx Proxy Manager

-Cloudflare Dynamic DNS

-Chromium

-Dozzle

-Gluetun

-Homarr

-Jellyfin

-Kanboard

-Komga

-Radarr

-Lidarr

-Sonarr

-Navodrome

-netbooyxyz (work in progress)

-Prowlarr

-qBittorrent

-Pairdrop

-Resilio-Sync

-Searxng

-Siganl CLI container for alerts

-Uptime Kuma

-VSCode

-WikiJS

-Watchtower

On one of my Pi’s:

-Pihole

-Pialert

-fail2ban

-PIVPN

-Unbound

The weakest part of my setup arguably is between my storage “solution” and my networking setup.

Storage is just a bunch of large drives in the Dell. Next upgrade is a new router solution, but still use my current router for a wireless access point strictly for IOT and putting my other devices on separate VLANs.

I was thinking about getting a Nextcloud going, but not sure I want to as of right now.

Running Tipi on a five year old chrome box with tailscale as the VPN. Has been running great! Now I’m self hosting

1. Adguard: adblocking inside tailnet & for DNS rewrites
2. Barrage: Nice deluge UI
3. Beszel: Clean & simple server monitoring. I monitor two of my instances & the self hosted setup on this.
4. Beszel Agent: Agent for collecting data for Baszel
5. Deluge: Torrenting
6. Duplicati: Backups with a great UI
7. File Browser: for quick ops
8. Flowise AI: Great drag and drop LLM chat apps builder
9. Immich: The absolute best way to manage pictures
10. Jackett: For the arr stack
11. Jellyfin: Media streaming solution with apps on my phone, TV & laptops
12. Open WebUI: My default LLM chat client now, I no longer pay 20$ for chatGPT but just pay as I go with open webui and chatgpt api key
13. Radarr
14. Sonarr
15. Uptime Kuma: Uptime monitoring for everything
16. Wallos: Subscription management

Tipi is pretty awesome. If you haven’t already, check it out!

home assistant, freshrss (and a few related services such as rss-bridge), nitter and piped. I tried to host libregrammar, but ran out of memory.

Using LXD:

• ddclient
• Jellyfin (2)
• Minecraft (proxy + 4 servers)
• Satisfactory server
• V Rising
• Gitea vcs
• wordpress
• rtorrent
• other web servers

Using rootless Podman + Systemd service:

• Vaultwarden
• Linkding
• Traefik
• Immich photo backup
• Nextcloud (though I hate it, probably will stop)
• Grafana
• Prometheus
• Prowlarr/Radarr/Sonarr/Lidarr/Bazarr/Recyclarr
• Rtorrent + Flood
• Jellyseerr
• Navidrome (Subsonic server)
• Miniflux (RSS)
• Woodpecker (CI integration for Gitea)
• Tubearchivist (yt-dl)
• wg-easy (wireguard)
• searxng

All services are split across 2 DIY servers (in towers). 15TB of media stored on HDD with btrfs duplicated across both servers. One server host is Alpine Linux, the other is Opensuse MicroOS. LXD containers usually are Debian 12 or Alpine. I’m beginning to migrate some things to a cluster of (12) raspberry pi 3s. Unsure what to choose for rpi’s, maybe, Fedora CoreOS (ublue), although Alpine does work extremely well on them (once you get them set up with it).

+ router running fresh tomato :)

Also mailcow for email, on a VPS, although I need to switch to a new provider, having difficulty with delivery using Linode and OVHCloud.

Available from internet:

• jellyfin
• jellyseerr
• immich
• paperless-ngx
• owncloud ocis
• traefik
• homarr

Available only from local:

• the *arr stack
• qbittorrent
• jackett
• watchtower
• apprise
• netdata (kinda new, still have to fully understand how it works)
• portainer
• speedtest-tracker
• homepage

Security

All the services available from internet, just goes through traefik to terminate https, I rely on the build in authentication of each service. To add another layer of security, I have fail2ban active on all those services.

I have a public IP, and I have open on my router ports 80, 443, a random port for ssh and vpn.

Hardware:

Memory:
  System RAM: total: 8 GiB available: 7.73 GiB used: 4.46 GiB (57.7%)
  Report: arrays: 1 slots: 4 modules: 2 type: DDR3
CPU:
  Info: 6-core model: AMD Phenom II X6 1090T bits: 64 type: MCP cache: L2: 3 MiB
Graphics:
  Device-1: NVIDIA GP107 [GeForce GTX 1050 Ti] driver: nvidia v: 535.98

docker compose files

All the docker compose files + how I configured everything is available at: https://github.com/simone-viozzi/my-server

Bonus:

Since I like the ability of btrfs to do snapshots, I created all important docker volumes as btrfs subvolumes. Then I created a backup script that literally sends the subvolume (encrypted) to an external cloud. This does not allow incremental backups and most likely is not the best backup solution… but it works… the repo is: https://github.com/simone-viozzi/btrfs2cloud-backup

I welcome any advice / criticism!

I had a small X.25 network as combination coffee-table and space-heater at one point; this was before most homes had internet. It almost cost me a divorce.