The Lemmy.world TOS requires that any bot account be set as such in their profile, and that any community they post to requires approval first.

Generically speaking, I won't be approving any. What I mean by that is any bot request is going to need a valid and real reason for its use here, which I would then bring to the community to make that choice like I did for the rules discussion threads. I wish there were a better way than a basic upvote or downvote system for feedback, but its what we've got so its what I'll use.

I have not posted about any new bots since I took over here a few months ago, so no new bots should be considered as having community approval.

If you see them, please just report and I'll get to it as soon as possible. The current one seems to just be getting new accounts all over the fediverse, and tacking their home instance onto the end. They are banned, but I'll have to ban again as things come up. I'll bring this up to the lemmy.world admins as well. This also goes for any other new bot that begins flooding the community.

Thanks!

Hello everyone! Mods here 😊

Tell us, what services do you selfhost? Extra points for selfhosted hardware infrastructure.

Feel free to take it as a chance to present yourself to the community!

🦎

Hey everyone! I'm pretty glad to have come across Lemmy haha. I was going to start looking into doing some self hosting stuff on Reddit and a lot of people seemed a bit... Opinionated. That said, I have an old base M1 Mac Mini that has been sitting in my closet for a while, and while I do have a simple proxmox setup in my own house for a couple small things, I was considering a fun side project to try to host something for my mom in her house. My main question is has anyone actually tried doing any self hosting stuff on a 8GB model of a Mac Mini with M1? It seems that Asahi linux supports it pretty well, but its all ARM. I have basically no experience with ARM on linux, especially not on a box made by apple. I have very light experience with a Pi 5 but outside of that not much.

fuck yeah monday checkmarks, bitches!

just asking what is a good one

Anyone here running the non-enterprise version perhaps? How have you found it?

Wondering about licensing too. If I were to create my own OIDC/SSO connectors on a fork of the code, strip out the EE stuff and deploy that fork, would that be a breach of license? Many of the features behind the paywall I find useful. I already run Authentik and have all my other apps behind it for SSO, so was curious how building my own stuff on my own fork would make me non-compliant (if at all).

Hi everyone,

It's been a while since I last posted here! I'm happy to announce that we've released Portabase 1.34!

Repository: https://github.com/Portabase/portabase (on the road to 2k stars)

For those unfamiliar with Portabase, it's an open-source, self-hostable backup and restore platform designed for data retention, disaster recovery, and homogeneous migrations.

Until now, Portabase supported 10 data sources (including PostgreSQL, MySQL, MariaDB, MongoDB and Docker volumes).

With v1.34, we're introducing our 11th data source: files and directories!

There are 3 ways to back up your files:

• Archive (logical backup): creates a full .tar.gz of the selected directory.
• Snapshot (incremental): uses Restic under the hood to provide incremental backups with deduplication, reducing storage usage.
• Sync: synchronize files and directories to a destination. This is a direct copy, not a restorable backup.

What's new in 1.34?

• Support for file and directory backup/restore (obviously)
• UX improvements and UI fixes
• Multiple security fixes, thanks to users who reported vulnerabilities
• DACPAC support for Microsoft SQL Server (in addition to BACPAC, and native BACKUP DATABASE support is also on the way)
• Helm chart improvements

Important: If you're upgrading and want to use the new file and directory backup features, make sure to update your agents as well.

As always, if you encounter a bug, please open an issue on GitHub. And if you like the project, consider giving us a star! It means a lot to us and helps the project gain visibility.

Thanks to everyone using, testing, contributing to, and supporting Portabase!

How I manage my Containers and their Vulnerability Management across selfhosted infrastructure and how the patching of PHP2SHELL looked like

Tempus is an open-source and lightweight music client for Subsonic, designed and built natively for Android.

AI Disclosure:

• Implementation - Assisted (many contributions use ai)
• Testing - Assisted
• Review - Assisted

This app works with any service that implements the Subsonic API, including:

• LMS - Lightweight Music Server - personal fave and my backend
• Navidrome
• Gonic
• Ampache
• NextCloud Music
• Airsonic Advanced

https://github.com/eddyizm/tempus/releases/tag/v4.31.0

My last release post was for v4.20.0 so I've included what's changed across recent stable releases up to v4.31.0.

What's Changed

Highlighting major features added over recent releases:

• feat: UPnP and DLNA streaming & control — Play directly to UPnP/DLNA renderers on your network, control remote player volume from your phone, and cast seamlessly.
• feat: Parametric Equalizer & AutoEq Support — Import AutoEq profiles for custom headphone/audio profiles, plus improved equalizer stability.
• feat: Continue Listening & Queue Management — Resume playback where you left off with a dedicated home section, modern player queue sheets with summary and quick actions, and fast playlist queueing.
• feat: Custom HTTP Headers — Support custom HTTP headers per server configuration.
• feat: Downloads & Syncing — Added fast scrolling to download views and automatic playlist download synchronization with the server.

And a ton of bug fixes, performance improvements, and updated translations across many languages -> Full Changelog: https://github.com/eddyizm/tempus/compare/v4.20.0...v4.31.0

📝 Note: Looking for Google Play Testers!

Tempus is currently being prepared for Google Play and is in the review process. If you are interested in testing early Google Play builds and helping out with feedback, please let me know—testers are greatly appreciated!

Release Notes app-tempus* <- The GitHub release with all the Android Auto, Chromecast, and media features. app-degoogled* <- The IzzyOnDroid release built without any Google dependencies.

As usual, any dev contributions appreciated as I am not actually a java/mobile dev, so my progress is significantly slower than those who do this on the daily.

Big thanks to all the folks who have been contributing.

I have owncloud OCIS up and running. I trying to setup full text search via the tika service (documented here under Content extraction: https://owncloud.dev/services/search/#content-extraction ).

As a test, I make a new text file on OCIS and copy and paste some sample text into it (just a few hundred words). Then when checking the tika logs, I see it was auto triggered to start the content extraction process as shown below.

When I do a search on owncloud, I see that there is an option for "Full Text Search", so it is aware of tika, just does says no results found when I try to search any of the words that should be in the file I just created.

Has anyone else gotten full text search to work with OCIS?

INFO  [main] 01:46:43,522 org.apache.tika.server.core.TikaServerProcess Started Apache Tika server 452c19c1-f5f1-48b1-8c3b-188e31222c39 at http://0.0.0.0:9998/

INFO  [qtp1698182759-64] 01:47:35,467 org.apache.tika.server.core.resource.RecursiveMetadataResource /rmeta (autodetecting type)

INFO  [main] 01:47:35,847 [fork] pipesClientId=0 org.apache.tika.pipes.core.server.PipesServer Cache memory budget: 2220883968 bytes (default, a quarter of max heap)

INFO  [main] 01:47:35,857 [fork] pipesClientId=0 org.apache.tika.pipes.core.server.PipesServer watching parent pid 1 for exit

INFO  [main] 01:47:35,998 [fork] pipesClientId=0 org.apache.tika.config.loader.TikaLoader temporary files go to java.io.tmpdir=/tmp/pipes-server-0-2223921947919245211

INFO  [main] 01:47:36,051 [fork] pipesClientId=0 org.apache.tika.pipes.core.server.PipesServer forked JVM max heap: 8472 MB

INFO  [main] 01:47:36,063 [fork] pipesClientId=0 org.pf4j.DefaultPluginStatusProvider Enabled plugins: []

INFO  [main] 01:47:36,063 [fork] pipesClientId=0 org.pf4j.DefaultPluginStatusProvider Disabled plugins: []

INFO  [main] 01:47:36,065 [fork] pipesClientId=0 org.pf4j.DefaultPluginManager PF4J version 3.16.0 in 'deployment' mode

INFO  [main] 01:47:36,071 [fork] pipesClientId=0 org.pf4j.AbstractPluginManager Plugin '[email protected]' resolved

INFO  [main] 01:47:36,071 [fork] pipesClientId=0 org.pf4j.AbstractPluginManager Start plugin '[email protected]'

INFO  [main] 01:47:36,073 [fork] pipesClientId=0 org.apache.tika.pipes.plugin.fs.FileSystemPipesPlugin Starting

INFO  [main] 01:47:37,845 [fork] pipesClientId=0 org.apache.tika.config.loader.ParserLoader text recognizer org.apache.tika.parser.ocr.TesseractOCRParser for [image/bmp, image/gif, image/jp2, image/jpeg, image/jpx, image/png, image/tiff, image/x-portable-pixmap] (found among the loaded parsers; name it under "text-recognizers" to pin it)

INFO  [qtp1698182759-64] 01:47:38,046 org.apache.tika.pipes.core.PipesClient clientId=0: server successfully started

INFO  [main] 01:47:38,253 [fork] pipesClientId=0 org.apache.tika.pipes.timing.worker WORKER_TIMING id=4c7bc086-2e57-4c1c-b9ad-fd89d95e7ba0 req_deser_us=5210 ctx_merge_us=4763 intermediate_wait_us=30692 handoff_us=1136 fetch_us=4016 parse_us=166925 emit_us=102 worker_wall_us=171086 intermediate_us=107 resp_ser_us=1823 resp_write_us=97 resp_ack_us=189 resp_bytes=1404

INFO  [main] 01:48:38,290 [fork] pipesClientId=0 org.apache.tika.pipes.core.server.PipesServer socket timeout while waiting for task, shutting down

Tika Docker Compose:

  tika:
    container_name: owncloud-tika-1
    image: apache/tika:4.1.0-2-full
    restart: unless-stopped
    # command: apt update && apt install tesseract-ocr-xxx -y add additional languages (only works if Tika supports auto-detection for that language)
    networks:
      owncloud-net:
    ports:
      - 9998:9998 #shouldn't be needed if on the same docker network
    logging:
      driver: local

Relevant OCIS Docker ENVs

# full text search service
      SEARCH_EXTRACTOR_TYPE: tika
      SEARCH_EXTRACTOR_TIKA_TIKA_URL: http://owncloud-tika-1:9998/
      FRONTEND_FULL_TEXT_SEARCH_ENABLED: true
      SEARCH_CONTENT_EXTRACTION_SIZE_LIMIT: 20971520 # uint64 number specific number of bytes for max file size to index (processor intesive for large files), default 20MB

See output for the following commands showing the OCIS search service status:

80ae748e0f06:~$ ocis search health
2026-10-26T20:12:50Z DBG Health got a good state code=200 line=github.com/owncloud/ocis/v2/services/search/pkg/command/health.go:48 service=search
80ae748e0f06:~$ ocis search version
Version: 8.2.1
Compiled: 2026-10-18 00:00:00 +0000 UTC

┌─────────┬────────────────┬──────────────────────────────────────────────────────────────┐
│ VERSION │    ADDRESS     │                              ID                              │
├─────────┼────────────────┼──────────────────────────────────────────────────────────────┤
│ 8.2.1   │ 127.0.0.1:9220 │ com.owncloud.api.search-524d2757-df68-4e64-ad2e-93d0f13eafae │
└─────────┴────────────────┴──────────────────────────────────────────────────────────────┘
80ae748e0f06:~$ ocis search server
2026-10-26T20:13:11Z INF Tika version: Apache Tika 4.1.0 line=github.com/owncloud/ocis/v2/services/search/pkg/content/tika.go:44 service=search
2026-10-26T20:13:11Z WRN starting service search line=github.com/owncloud/ocis/v2/services/search/pkg/command/server.go:86 service=search
2026-10-26T20:13:11Z ERR service search stopped with error error="runner search.debug failed: listen tcp 127.0.0.1:9224: bind: address already in use\nrunner search.grpc failed: listen tcp 127.0.0.1:9220: bind: address already in use" line=github.com/owncloud/ocis/v2/services/search/pkg/command/server.go:90 service=search

So here is the deal. OpnSense is based on FreeBSD (as the users know but others may not understand) and utilizes ZFS Snapshots which are an amazing way to go back to a previous state when something breaks after an update. However for some reason the cron section has been changed so you can not add any random cron job and can only select from predefined options. This means we have to work from the CLI to add jobs, but even worse after an update the cron jobs are removed.... which becomes self defeating.

I think I have a decent solution that will work to not only persist the backup script that will automatically create and remove snapshots but also recreate the cron jobs automatically. Ideally there would be some sort of addon where we could adjust things but this is the best I can do for now and want to share with everyone.

Here is the script, place it at: /usr/local/etc/rc.syshook.d/start/99-snapshot-addon.sh and preform a chmod +x so that it is executable. Then reboot and the script to create the snapshot automatically and the cron job should be created. Since this runs on boot it will do this check after every update that requires a reboot or reboot in general and if the script and cron jobs are removed due to an update it will recreate them.

#!/bin/sh

CAT_PATH="/usr/local/opnsense/scripts/auto_be_retention.sh"

# Ensure target directory exists
mkdir -p /usr/local/opnsense/scripts

# 1. Write/Update the auto_be_retention.sh script
cat << 'EOF' > "$CAT_PATH"
#!/bin/sh

WEEKLY_RETENTION=6
MONTHLY_RETENTION=4

TYPE=$1

if [ "$TYPE" != "weekly" ] && [ "$TYPE" != "monthly" ]; then
    echo "Usage: $0 [weekly|monthly]"
    exit 1
fi

DATE_TAG=$(date +%Y%m%d_%H%M%S)
BE_NAME="auto_${TYPE}_${DATE_TAG}"

/sbin/bectl create "${BE_NAME}"

if [ "$TYPE" = "weekly" ]; then
    KEEP=$WEEKLY_RETENTION
else
    KEEP=$MONTHLY_RETENTION
fi

/sbin/bectl list -H | awk '{print $1}' | grep "^auto_${TYPE}_" | sort | \
awk -v keep="$KEEP" '
    { lines[NR] = $1 }
    END {
        to_delete = NR - keep
        for (i = 1; i <= to_delete; i++) {
            print lines[i]
        }
    }
' | while read -r OLD_BE; do
    if [ -n "$OLD_BE" ]; then
        /sbin/bectl destroy -F -o "$OLD_BE"
    fi
done
EOF

chmod +x "$CAT_PATH"

# 2. Inject cron tasks into /etc/crontab if missing
CRON_FILE="/etc/crontab"

if ! grep -q "auto_be_retention.sh weekly" "$CRON_FILE"; then
    echo "0 3 * * 0 root /usr/local/opnsense/scripts/auto_be_retention.sh weekly" >> "$CRON_FILE"
fi

if ! grep -q "auto_be_retention.sh monthly" "$CRON_FILE"; then
    echo "30 3 1 * * root /usr/local/opnsense/scripts/auto_be_retention.sh monthly" >> "$CRON_FILE"
fi

# 3. Reload cron daemon
service cron restart

This will check for and if missing create a script at /usr/local/opnsense/scripts/auto_be_retention.sh and it will check for and if missing create two cron jobs.

The script located at /usr/local/opnsense/scripts/auto_be_retention.sh will create a snapshot with a timestamp named similar to: auto_monthly_20261001_033000

It will also look the count of previous snapshots (6 for weekly and 4 for monthly which can be adjusted if you choose) and delete the oldest one. Weekly snapshots will happen every Sunday at 3:00 AM and monthly snapshots will happen on the 1st of the month at 3:30 AM.

Why do we need this?

We don't "need" this but the advantage is that if you can have automatic updates (which are an option that is available in the cron section) it's probably better to have a snapshot that can easily be rolled back to in the case of something acting up automatically created as well. The other option is try and undo the issue or take a config backup and reinstall then use that to get everything up and running again.

Rolling back a snapshot takes a few minutes and gets everything back up and running until a solution for the issue/s are available.

I ran the script and I am not seeing anything in the Settings > cron section!!

You won't... that is part of the deal with how OpnSense has decided to handle things. You will need to look in: /etc/crontab This is because of how OpnSense is using menu drive cron selections, since the selections are not available it seems to not want to create or show them.

I have done some testing and removed the files and jobs and also had them recreated. At the next update we will see if everything sticks around or if it is removed.

Please remember that the script above is given without warranty or guarantee, use it at your own risk. I am not responsible if this script causes things not limited to but including data loss, testicular/breast shrinkage/growth, rude children, nagging wives/girlfriends/husbands/partners, alien visitation, global warming, or thermonuclear war. ID10T errors are also your own responsibility... you should not be running things you find on the internet without understanding how they work.

https://www.drivebase.io/

https://github.com/drivebase/drivebase

Background: I am looking to replace my FileBrowser docker service with something newer and this looks very nice. My needs are simple right now -- just local folders and files, I need to access from anywhere. But I'm also liking Drivebase supporting multiple cloud providers, as I have files in more than one place. They offer paid managed services, or a free self-hosted version for folks like us.

Looking for just the basic Google Drive features here for a few people, not a pastebin or a temporary file sharing service. Don't need any AI features.

But I am surprised Drivebase has never been discussed here before, and I notice they have an agents.md file in the repo too.

Thanks for any ideas on this. Let me know what you prefer for this sort of thing, if you like.

EDIT TO ADD: thanks all for the info. I'll not use this Drive base. Think I'll check out other options next.

Hi all

I'm going to set up a little server on a pretty old Mac Mini, with an external RAID 1 enclosure. It's initially got two main purposes - to run an Immich server to backup my photos when I'm away travelling, and to give me something to learn about Linux and self-hosting on. I used Linux a bit back in the day, but I've been living the lazy Mac life for years. I'd really like to transition out of the Mac ecosystem eventually, so this is an initial toe in the water towards that aim.

I'm planning on running Debian, for stability and compatibility, and backing up to a separate NAS that already exists, so that I'm not completely screwed if (definitely when) I mess something up. It'll all be set up in my power/internet access point shed, so I'd prefer it to be fully remote access, no screen/DE.

It seems like I'll be running Immich in Docker, and that I'll need Tailscale/Wireguard for my remote connection. Does this seem like a decent initial plan? Are there any decent resources for learning this that you'd recommend? I already own the hardware, and all my photos are safe on SD card, SSD, and local backup, so there's no real consequence to me messing about with this. Any advice/thoughts would be welcome

Ta

A neat little trick to have publicly sharable link for a service behind a VPN

This is and update on the php2shell vulnerability and a response to the blog post from https://lemmy.world/post/53441818 : https://eliastaylor.com/noexploit/

PHP, TLS, etc.. We appear to be facing a tsunami of vulnerabilities being discovered in record time. Further, the window to act on these vulnerabilities has basically closed to zero; hackers' tools now automatically fold the very latest vulnerabilities into their botnets within minutes/hours of discovery. I have always been extremely reluctant to expose any of my services - even with the latest and greatest security tools. My choice to stay totally within the confines of tailscale seems vindicated given this week's news. How are you all taking this?

https://pwn.watch/

cross-posted from: https://lemmy.world/post/53575321

Hi everyone! 👋 I'm Xuruh, the developer of Jorvik.

Jorvik is a Discord-style chat app built on Matrix: servers, channels, voice, GIFs and end-to-end encrypted messaging, without being locked into one company's platform. It works with any Matrix homeserver, so you can sign in with an account you already have.

✨ What's new (1.0.24 – 1.0.27)

• Sign in to any Matrix server
• Mobile web layout with push notifications (works on iPhone via Add to Home Screen)
• Long-press message menus and clearing mentions on phones
• Notifications open the right chat and bring Jorvik back from the tray
• Stickers, visible status messages, and clean copy/paste
• Opt-in game activity ("Show the game I'm playing")

🔗 Try it

• 💬 Web: chat.jorvik.app
• 🖥️ Desktop (Linux, Windows, macOS): jorvik.app
• 🗨️ Matrix room: #jorvik:matrix.jorvik.app
• 🧑‍💻 Source (AGPL-3.0): github.com/jorvikapp/jorvik

This community is the place for feedback, bug reports, feature ideas and screenshots. Native Android and iOS apps are on the roadmap!

Jorvik is a continuation of Heorot by Vitosicz. 💜

I discovered Incus and IncusOS recently, and they seem like a very cool foundation for a self-hosted setup.

I'm thinking of using them with incus-compose to declare my setup.

Does anybody use them? I'd love to get some feedback. Are they stable and polished yet, or are there still a lot of sharp edges?

They mention "designed for modern systems" on their website. Are there any issues running it on a roughly 10-year-old laptop?

I came across the link via https://mastodon.social/@CuratedHackerNews/117481600704689796

Last time I touched php it was ~20 years ago and maybe for a month. Could someone with actual php understanding weigh in?

Somehow, somewhere between the lines, my understanding was that there have been observances of the vuln being used in the wild before the 14 UTC. And that wasn't from reading news sites