The Lemmy.world TOS requires that any bot account be set as such in their profile, and that any community they post to requires approval first.

Generically speaking, I won't be approving any. What I mean by that is any bot request is going to need a valid and real reason for its use here, which I would then bring to the community to make that choice like I did for the rules discussion threads. I wish there were a better way than a basic upvote or downvote system for feedback, but its what we've got so its what I'll use.

I have not posted about any new bots since I took over here a few months ago, so no new bots should be considered as having community approval.

If you see them, please just report and I'll get to it as soon as possible. The current one seems to just be getting new accounts all over the fediverse, and tacking their home instance onto the end. They are banned, but I'll have to ban again as things come up. I'll bring this up to the lemmy.world admins as well. This also goes for any other new bot that begins flooding the community.

Thanks!

Hello everyone! Mods here 😊

Tell us, what services do you selfhost? Extra points for selfhosted hardware infrastructure.

Feel free to take it as a chance to present yourself to the community!

🦎

cross-posted from: https://lemmy.world/post/53575321

Hi everyone! 👋 I'm Xuruh, the developer of Jorvik.

Jorvik is a Discord-style chat app built on Matrix: servers, channels, voice, GIFs and end-to-end encrypted messaging, without being locked into one company's platform. It works with any Matrix homeserver, so you can sign in with an account you already have.

✨ What's new (1.0.24 – 1.0.27)

• Sign in to any Matrix server
• Mobile web layout with push notifications (works on iPhone via Add to Home Screen)
• Long-press message menus and clearing mentions on phones
• Notifications open the right chat and bring Jorvik back from the tray
• Stickers, visible status messages, and clean copy/paste
• Opt-in game activity ("Show the game I'm playing")

🔗 Try it

• 💬 Web: chat.jorvik.app
• 🖥️ Desktop (Linux, Windows, macOS): jorvik.app
• 🗨️ Matrix room: #jorvik:matrix.jorvik.app
• 🧑‍💻 Source (AGPL-3.0): github.com/jorvikapp/jorvik

This community is the place for feedback, bug reports, feature ideas and screenshots. Native Android and iOS apps are on the roadmap!

Jorvik is a continuation of Heorot by Vitosicz. 💜

So here is the deal. OpnSense is based on FreeBSD (as the users know but others may not understand) and utilizes ZFS Snapshots which are an amazing way to go back to a previous state when something breaks after an update. However for some reason the cron section has been changed so you can not add any random cron job and can only select from predefined options. This means we have to work from the CLI to add jobs, but even worse after an update the cron jobs are removed.... which becomes self defeating.

I think I have a decent solution that will work to not only persist the backup script that will automatically create and remove snapshots but also recreate the cron jobs automatically. Ideally there would be some sort of addon where we could adjust things but this is the best I can do for now and want to share with everyone.

Here is the script, place it at: /usr/local/etc/rc.syshook.d/start/99-snapshot-addon.sh and preform a chmod +x so that it is executable. Then reboot and the script to create the snapshot automatically and the cron job should be created. Since this runs on boot it will do this check after every update that requires a reboot or reboot in general and if the script and cron jobs are removed due to an update it will recreate them.

#!/bin/sh

CAT_PATH="/usr/local/opnsense/scripts/auto_be_retention.sh"

# Ensure target directory exists
mkdir -p /usr/local/opnsense/scripts

# 1. Write/Update the auto_be_retention.sh script
cat << 'EOF' > "$CAT_PATH"
#!/bin/sh

WEEKLY_RETENTION=6
MONTHLY_RETENTION=4

TYPE=$1

if [ "$TYPE" != "weekly" ] && [ "$TYPE" != "monthly" ]; then
    echo "Usage: $0 [weekly|monthly]"
    exit 1
fi

DATE_TAG=$(date +%Y%m%d_%H%M%S)
BE_NAME="auto_${TYPE}_${DATE_TAG}"

/sbin/bectl create "${BE_NAME}"

if [ "$TYPE" = "weekly" ]; then
    KEEP=$WEEKLY_RETENTION
else
    KEEP=$MONTHLY_RETENTION
fi

/sbin/bectl list -H | awk '{print $1}' | grep "^auto_${TYPE}_" | sort | \
awk -v keep="$KEEP" '
    { lines[NR] = $1 }
    END {
        to_delete = NR - keep
        for (i = 1; i <= to_delete; i++) {
            print lines[i]
        }
    }
' | while read -r OLD_BE; do
    if [ -n "$OLD_BE" ]; then
        /sbin/bectl destroy -F -o "$OLD_BE"
    fi
done
EOF

chmod +x "$CAT_PATH"

# 2. Inject cron tasks into /etc/crontab if missing
CRON_FILE="/etc/crontab"

if ! grep -q "auto_be_retention.sh weekly" "$CRON_FILE"; then
    echo "0 3 * * 0 root /usr/local/opnsense/scripts/auto_be_retention.sh weekly" >> "$CRON_FILE"
fi

if ! grep -q "auto_be_retention.sh monthly" "$CRON_FILE"; then
    echo "30 3 1 * * root /usr/local/opnsense/scripts/auto_be_retention.sh monthly" >> "$CRON_FILE"
fi

# 3. Reload cron daemon
service cron restart

This will check for and if missing create a script at /usr/local/opnsense/scripts/auto_be_retention.sh and it will check for and if missing create two cron jobs.

The script located at /usr/local/opnsense/scripts/auto_be_retention.sh will create a snapshot with a timestamp named similar to: auto_monthly_20261001_033000

It will also look the count of previous snapshots (6 for weekly and 4 for monthly which can be adjusted if you choose) and delete the oldest one. Weekly snapshots will happen every Sunday at 3:00 AM and monthly snapshots will happen on the 1st of the month at 3:30 AM.

Why do we need this?

We don't "need" this but the advantage is that if you can have automatic updates (which are an option that is available in the cron section) it's probably better to have a snapshot that can easily be rolled back to in the case of something acting up automatically created as well. The other option is try and undo the issue or take a config backup and reinstall then use that to get everything up and running again.

Rolling back a snapshot takes a few minutes and gets everything back up and running until a solution for the issue/s are available.

I ran the script and I am not seeing anything in the Settings > cron section!!

You won't... that is part of the deal with how OpnSense has decided to handle things. You will need to look in: /etc/crontab This is because of how OpnSense is using menu drive cron selections, since the selections are not available it seems to not want to create or show them.

I have done some testing and removed the files and jobs and also had them recreated. At the next update we will see if everything sticks around or if it is removed.

Please remember that the script above is given without warranty or guarantee, use it at your own risk. I am not responsible if this script causes things not limited to but including data loss, testicular/breast shrinkage/growth, rude children, nagging wives/girlfriends/husbands/partners, alien visitation, global warming, or thermonuclear war. ID10T errors are also your own responsibility... you should not be running things you find on the internet without understanding how they work.

https://www.drivebase.io/

https://github.com/drivebase/drivebase

Background: I am looking to replace my FileBrowser docker service with something newer and this looks very nice. My needs are simple right now -- just local folders and files, I need to access from anywhere. But I'm also liking Drivebase supporting multiple cloud providers, as I have files in more than one place. They offer paid managed services, or a free self-hosted version for folks like us.

Looking for just the basic Google Drive features here for a few people, not a pastebin or a temporary file sharing service. Don't need any AI features.

But I am surprised Drivebase has never been discussed here before, and I notice they have an agents.md file in the repo too.

Thanks for any ideas on this. Let me know what you prefer for this sort of thing, if you like.

EDIT TO ADD: thanks all for the info. I'll not use this Drive base. Think I'll check out other options next.

Hi all

I'm going to set up a little server on a pretty old Mac Mini, with an external RAID 1 enclosure. It's initially got two main purposes - to run an Immich server to backup my photos when I'm away travelling, and to give me something to learn about Linux and self-hosting on. I used Linux a bit back in the day, but I've been living the lazy Mac life for years. I'd really like to transition out of the Mac ecosystem eventually, so this is an initial toe in the water towards that aim.

I'm planning on running Debian, for stability and compatibility, and backing up to a separate NAS that already exists, so that I'm not completely screwed if (definitely when) I mess something up. It'll all be set up in my power/internet access point shed, so I'd prefer it to be fully remote access, no screen/DE.

It seems like I'll be running Immich in Docker, and that I'll need Tailscale/Wireguard for my remote connection. Does this seem like a decent initial plan? Are there any decent resources for learning this that you'd recommend? I already own the hardware, and all my photos are safe on SD card, SSD, and local backup, so there's no real consequence to me messing about with this. Any advice/thoughts would be welcome

Ta

A neat little trick to have publicly sharable link for a service behind a VPN

This is and update on the php2shell vulnerability and a response to the blog post from https://lemmy.world/post/53441818 : https://eliastaylor.com/noexploit/

cross-posted from: https://lemmy.world/post/53522071

Is anyone aware of privacy respecting alternatives to products like Inito or Mira?

PHP, TLS, etc.. We appear to be facing a tsunami of vulnerabilities being discovered in record time. Further, the window to act on these vulnerabilities has basically closed to zero; hackers' tools now automatically fold the very latest vulnerabilities into their botnets within minutes/hours of discovery. I have always been extremely reluctant to expose any of my services - even with the latest and greatest security tools. My choice to stay totally within the confines of tailscale seems vindicated given this week's news. How are you all taking this?

https://pwn.watch/

Keep P2P as the default for small rooms — that's most servers most of the time and the no-extra-infra story is genuinely valuable for self-hosters.

[I] went mediasoup, built into Haven, after all. The two things that pushed my plan above toward LiveKit are gone now. It runs on one port instead of a whole range, and it downloads a ready-made build instead of compiling anything.

While the code is a slop hodgepodge, Haven is currently the only Discord clone I have found that makes it easy to selfhost; no extra open port except 443 80, single docker container, no extra database.

Website: https://haven-app.com/

I discovered Incus and IncusOS recently, and they seem like a very cool foundation for a self-hosted setup.

I'm thinking of using them with incus-compose to declare my setup.

Does anybody use them? I'd love to get some feedback. Are they stable and polished yet, or are there still a lot of sharp edges?

They mention "designed for modern systems" on their website. Are there any issues running it on a roughly 10-year-old laptop?

I came across the link via https://mastodon.social/@CuratedHackerNews/117481600704689796

Last time I touched php it was ~20 years ago and maybe for a month. Could someone with actual php understanding weigh in?

Somehow, somewhere between the lines, my understanding was that there have been observances of the vuln being used in the wild before the 14 UTC. And that wasn't from reading news sites

What tools and projects do you use for your local LLM chats and agents?

I'm trying to sift through the mess of LLM harness and tools to find how to really get the most out of local LLMs.

The set of vulnerabilities is dubbed PHP2Shell and disclosure is scheduled for 14:00 UTC with attacks expected to follow soon after.

It is adviced to take offline every non-vital services until the patch has been installed (or the Docker image has been updated with a patched version of PHP)

Update: fix is out https://www.php.net/archive/2026.php#2026-10-21-5

Ive checked all my self hosted services and was happy to find out the only one was written in PHP, addy, formerly anonaddy.

You can use the awesome self hosted GitHub repo or this one already filtered for PHP

https://awesome-selfhosted.net/platforms/php.html

Update your stuff, folks. I've had a fun day at work.

Hey everyone! I'm completely new to self-hosting, but I've become convinced of its benefits and would like to get started in the near future. I'm still trying to figure out which hardware and software would be the best fit for my needs, so I'd really appreciate some advice.

What I'm looking for:

• I live in the EU and want to move away from US-based and other non-EU cloud providers, which is one of the main reasons I'm interested in self-hosting.
• I want to de-Google my digital life and replace services like Google Photos, Google Drive, and Google's contact and calendar syncing with self-hosted alternatives.
• I'd like to automatically back up photos from my phone, sync files, contacts, and calendars, and access everything remotely.
• I want to avoid proprietary operating systems and vendor-specific apps as much as reasonably possible, ideally relying on open-source software.
• (Eventually, I'd also like to consider hosting my own email server, although I've heard that this comes with quite a few challenges. This isn't a priority for now.)
• I don't want to become a Linux or server administration expert just to keep everything running.

A little more context:

• Users: Just two people.
• Workload: Mainly file storage and syncing, photo backups and management, contacts, and calendars. No video editing, media transcoding, or other particularly demanding tasks.
• Budget: Around €500–800 for the NAS itself, excluding storage drives.
• Hardware preference: I'd prefer a compact, reasonably power-efficient, ready-made NAS rather than building a full PC, mostly due to limited space.
• Technical experience: I've been building my own PCs for almost 30 years and consider myself an advanced Windows user. However, my last real Linux experience was with Ubuntu about 20 years ago.
• Internet connection: 250/40 Mbps DSL with a public (dynamic) IPv4 address and a FRITZ!Box 7590 router, which supports WireGuard VPN.

Here are my main questions:

1. Which operating system would you recommend? I've been looking into TrueNAS Community Edition and OpenMediaVault, but I'm open to other suggestions. Ease of use, stability, and low maintenance are important to me.
2. Would a prebuilt NAS be a good choice? I've been considering devices like the UGREEN DXP4800 Plus and TerraMaster F4-424 Pro. Can their proprietary operating systems be replaced with something open-source without losing important functionality, such as fan control, power management, or hardware monitoring? Are there particular models known to work especially well with TrueNAS or OpenMediaVault?
3. How much hardware performance do I actually need? Given my relatively modest requirements, would something like an Intel N100 already be sufficient, or would it make sense to invest in a more powerful CPU and additional RAM for future flexibility?
4. Which software stack would you recommend? I'm currently considering Nextcloud for files, contacts, and calendars, and possibly Immich for photos. I'd prefer solutions with reliable automatic syncing and open-source Android apps.
5. What should I consider regarding backups and remote access? I'm planning to use WireGuard for remote access, but I'd be interested in recommendations for a simple, reliable backup strategy as well.

I'm happy to learn new things and follow technical guides, but I'd prefer a system that doesn't require constant tinkering once it's set up.

Thanks for reading, and I appreciate any suggestions or experiences you're willing to share!