Depends how overtly racist you are apparently

Thanks for the correction and the history lesson! ♥️ I’m sorry for assuming I knew better than the thorn expert

þeir’s wiþ

You do realize the thorn is an actual letter and not completely equivalent to th everywhere?

The “th” in “with” is an eth, not a thorn.

https://en.wikipedia.org/wiki/Thorn_(letter) https://en.wikipedia.org/wiki/Eth

As an aside, theirs is written without an apostrophe.

Gitea is not fundamentally different than Forgejo, Forgejo is just a better fork of it. Better in terms of: more contributors, more users, dogfooding (Gitea is built on Github 🤦).

But yes, GitLab is like the Mac of Git forges: everything is included, doing everything their own way, vendor lock, very expensive. There is a community edition but serious users will run into its limitations and it does not integrate neatly with external solutions.

Forgejo is IMO the Linux of Git forges: low on resources, expandable, hackable, stable.

Volsync

Talos is amazing and if you want to start from a fully automated setup (GitOps, Renovate), I highly recommend using https://github.com/onedr0p/cluster-template

Glad you found your ideal selfhosting setup!

Enjoy!

Dococd + renovate goes brrr

Docker Compose is really the easiest way to self-host.

Copy a file, usually provided by the developers of the app you want to run, change some values if instructed by the # comments, run docker compose up and it “just works”.

And I say that as someone who has done everything from distro-provided packages to compiling from source, Nix, podman systemd, and currently running a full-blown multi-node distributed storage Kubernetes cluster at home.

Just use docker compose.

Sure, you can buy Windows 11 Pro and follow these steps, or just install any modern Linux distro and tick the box “encrypt disk” in the installer.

Old PCs are plenty powerful and compatible with everything, but if energy consumption is a major concern, an old phone can work too.

You are 100% right that Android is a very weird Linux and Termux is limited.

PostmarketOS is a project that enables installation of a full upstream Linux onto old phones. Then you can run whatever (ARM-supporting) distro you like on it, without weird kernel limitations.

You probably have your network locked down much better than me. That should work too.

For me, it was easier to set up authelia to limit access. I don’t trust the “authorization” portal in foundry so I set up a real authentication proxy.

As a dev I’ve had experience with the developer culture and norms in different languages, and NodeJS stands out to me for invoking (other NodeJS) dependencies for even the smallest things.

Left-pad is the best illustration of this dependency culture. This also means vulnerabilities spread across the entire npm landscape instantly, since everything depends on almost everything else.

I’m hosting foundryvtt on a k8s cluster. I’m using Authelia+lldap to have only authenticated users passed on to that behemoth of a NodeJS app that is undoubtedly full of vulnerabilities.

I have Authelia set up to enforce 2FA for any request outside my users’ home networks. Or so I thought, but one of my players kept getting asked to 2FA.

Turns out I forgot about IPv6. He connects over IPv6 by default.

You’re not advertising 196.x.x.x routes to your tailnet?

This is just using old laptops as servers with extra steps.

Let me present my self-hosting strategy:

1. Buy old laptops for less than €100 a piece, especially if they have good hardware and cracks in the frame, dirty keyboards, etc.
2. Put them in a cabinet with power and an old 1Gb ethernet switch
3. Install whatever you want on them (in my case a Talos Kubernetes cluster)

Much simpler, and a lot cheaper

CPU requests were filling up on my setup. Got a dirty cracked used Ideapad with 4C/8T (i5-8265U) and an NVMe SSD to reinforce my Talos Kuberbetes cluster. Cost €65.

Upgraded it from 4GB soldered + 4GB stick RAM to 20GB RAM total. 16GB DDR4 sticks only cost €20 on the used market nowadays :)

RAM upgrade done, still need to add it to the cluster.

Then I’ll install a nice observability stack: VictoriaMetrics, VictoriaLogs, Grafana, and set up alerting finally. Afterwards, I’m thinking of adding Karakeep.

I’m not actually sure because I haven’t measured it. But I’ve read that while CPU and memory overhead is small, disk IO is much faster without virtualization.

Sell the expensive minisforum pc, buy 3 used laptops, use https://github.com/onedr0p/cluster-template

Done! Full GitOps bare metal Talos kubernetes cluster that runs your workloads so much faster than any VM. Without hypervisor or Ansible or systemd or ssh. Just YAML manifests all the way down. Cert-manager for automatic certificate management. SOPS for local secrets management.

A few months later, you can have this:

Volsync for automated encrypted backups that automatically populate your volumes when you completely reset the entire cluster.

Rook-ceph for shared replicated storage among the nodes.

Authelia/lldap stack + Anubis botblocker to protect public-facing endpoints.

I guess I should start a blog.

Maybe Signal drains battery when it can’t use Google Play Services for notifications and falls back to keeping a connection alive to Signal servers instead?

If selfhosting the family chat is not a goal in itself and it’s about privacy or being independent from big tech, just take the loss and go to Signal. Much smoother experience than any self-hosted messenger can provide for now.