home.social

#home-lab — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #home-lab, aggregated by home.social.

fetched live
  1. Six of my 194 backups came back failed. Retry did nothing.

    I had just published an article about pulling 2 TB out of Glacier Deep Archive for 15 dollars flat rate, so I assumed flat rate has limits after all.

    It does. Just not that one.

    CloudFront refuses to serve a file over 50 GB in one GET. Mine were 250 to 350 GB, because years ago I decided one big archive is easier to move around than many small ones, and I did not think one step further.

    The way around it is in the AWS docs. One curl per 40 GB chunk with a Range header, then cat the parts back together. Worked first time, 250 GB in about an hour.

    AWS is still not switched off, by the way. Not because of AWS. The disks in my NAS have ten years of runtime on them and HDD prices right now are out of control.

    Wrote it up with the script:
    dol.ch/en/blog/cloudfront-50gb

    #AWS #CloudFront #S3 #Backup #Bash #SelfHosting #Homelab #Blog

  2. Authelia v4.39.24 fixes test suite log colors under go test -json and restores clean single log group output. Small patch, solid polish.

    github.com/authelia/authelia/r

  3. FreshRSS 1.30.0 is a critical security release. Local network access blocked by default, multiple attack vectors patched, plus new filtering for global view and smarter feed refresh. Update now.

    github.com/FreshRSS/FreshRSS/r

  4. Alright, looks like I've talked myself into a new project: Writing an analyser for Prometheus TSDB blocks, with a focus on storage space usage. Potentially with an ultimate goal of creating a thanos-tsdb-block-stats-exporter to get the metrics over time instead of making it a manual, one-time affair.

    #HomeLab #Prometheus

  5. Plex Media Server Sicherheitslücke: 36.000 Server angreifbar – jetzt updaten!

    Wer einen eigenen Plex Media Server betreibt und dessen Software schon eine Weile nicht mehr aktualisiert hat, sollte jetzt dringend handeln: Sicherheitsforscher der Non-Profit-Organisation Shadowserver haben weltweit mehr als 36.000 öffentlich erreichbare Plex-Media-Server-Instanzen entdeckt, die aufgrund mehrerer Sicherheitslücken angreifbar sind. Was ist passiert? Anfang September 2026 verweisen die Plex-Entwickler auf die abgesicherten Versionen Plex Media Server 1.43.3 und Plex […]

    android-digital.de/themen/smar

  6. Sonarr v4.0.20 is here with another incremental update to keep your TV library automation running smooth. Time to update your instances.

    github.com/Sonarr/Sonarr/relea

  7. I was all excited to upgrade to Jellyfin 12 tonight...only to find the upgrade fails catastrophically with fatal database errors.

    Apparently a fix is in progress, so I guess it's back to 10.11.11 for me.

    Maybe hold off upgrading to 12 for now unless you adventurous, and make sure to back up your data!

    #jellyfin #homelab

  8. Authentik 2026.8.2 is out with a fresh round of bug fixes. If you're running this identity provider in your stack, time to update.

    github.com/goauthentik/authent

  9. Got sick of Ansible yet again and writing myself a set of shellscripts yet again for doing the (relatively simple) configuration I need for my handful of machines.

    At least it's not Yaml.

    #sysadmin #selfhosted #homelab

  10. I'm looking for some self-hosted, opensource, service help. I need to monitor a bunch of the services I'm running around the house and the only dashboard I've come across is kuma. It looks like what I need, but I like to shop around before choosing.

    Does any self-hosters here have suggestions?

    uptimekuma.co

    #selfhosting #homelab #opensource

  11. Wallos v5.5.1 fixes the restore upload max size limit so your subscription backups actually work again. Small patch, big relief.

    github.com/ellite/Wallos/relea

  12. Ghost v6.63.0 adds Node 24 support, fixes Portal plan change bugs, and resolves issues with LinkedIn URLs containing underscores being wrongly rejected as invalid.

    github.com/TryGhost/Ghost/rele

  13. This server set up looks cool and modular.... Any thoughts?

    GitHub - namher-sec/Debian-Home-Server-Documentation: Documentation and configuration for my self-hosted home server — Debian 13, LUKS-encrypted storage, Tailscale networking, and Docker Compose services (Nextcloud, AdGuard, Portainer, and more). · GitHub

    github.com/namher-sec/Debian-H

  14. Node-RED 5.0.7 patches JSONata, fixes dark theme wire visibility, and cleans up typedInput rendering. Solid maintenance release with contributions from new community members.

    github.com/node-red/node-red/r

  15. I wanted another computer as a sandbox, I don't really trust VMs, and fucking chip shortages, so to the boneyard it is. I have a disused ASRock Rack J1900D2Y with 8GB of RAM and a PicoPSU that used to be my mail server. Somehow, at some point, I modded the 1U case to mount the rack ears on the back. Annoying. So I dig up the original rack ears which I apparently still have, and try to flip things around, except the drive tray doesn't work the other way around somehow. What. Fine. I have a drill and a file. Sorted. While I'm at it, I splice an INA219 current sensor into the power connection for funzies and hook it up to the BMC's I2C bus. I then root the BMC so I can access it. So then I set about setting up Debian on it on a mirrored pair of Intel enterprise SSDs with encrypted ZFS. The board claims to support UEFI booting. This was determined to be a lie. Whatever. A problem for later. I put GRML (which is my new favorite rescue "CD" since it also has aarch64 builds available) on a flash drive, remove the case from the false drive, solder it to a motherboard header cable, and plug it into the internal USB hub I at some point added to the case. Boots fine, but only as a BIOS drive. I do a manual ZFS setup and debootstrap install, then I fuck around with GRUB for... a while... and eventually get it working on a system partition I've set up mirrored with mdadm (metadata v1.0 - at the end of the partition). Then comes the part where I get ZFSBootMenu working with SSH unlock. ZFSBootMenu is intended to boot via UEFI, but as I said, that doesn't work, but that's what GRUB is - I can chainload. Eventually that works, but I cannot manage to type the passphrase via the janky BMC's Java IPKVM. Fine. I have a file server I already set up SSH unlock with, but that means I'll have to build my own ZFSBootMenu files. After a while, I finally get that working, only to be immediately prompted for the passphrase a second time (on the screen, via the IPKVM, where I keep failing to type it, and it takes abour 90 seconds to check because I cranked up pbkdf2 iterations) when Debian starts. Right, need to bake the key into the encrypted initramfs that ZFSBootMenu loads. More chroot bullshit. I get that working, and Debian shits a brick and drops into a root shell because it can't find /sbin/init. Apparently I needed to install systemd-sysv for that. So I sigh, boot back into the GRML environment, mount the chroot for the fifteenth time, run the apt install, and rebuild the initramfs. I unmount everything, cross my fingers, and type reboot. The janky Java IPKVM refreshes. BIOS POSTs. GRUB chainloads ZFSBootMenu. The SSH unlock actually works perfectly. The boot process finally gets past the init stage, and a beautiful flood of green [ OK ] messages starts cascading down the screen. The login prompt finally appears. I go to type my username, but the BMC drops the connection again. I frantically reload the applet, but instead of the console, the screen glitches out, showing a live camera feed of my street just as a yellow car pulls up outside. I whistled for a cab and when it came near, the license plate said 'Fresh' and it had dice in the mirror. If anything I could say that this cab was rare, but I thought 'Nah, forget it, yo, holmes, to Bel-Air!' I pulled up to the house about seven or eight, and I yelled to the cabbie, 'Yo holmes, smell ya later!' I looked at my domain, I was finally there, to sit on my throne as the Heir of Bel-Air.

    #linux #homelab

  16. Tag (??) mit local #AI #offline

    Setup: qwen3.8 auf einer 3090 via Ollama, opencode lokal

    Wiederkehrende Erkenntnisse:
    - AI ist keine Magie
    - richtiges Prompting ist wichtiger als jede Config/Setup
    - selbst mitdenken und Schritte aufteilen klappt besser, als das der KI zu überlassen
    - CodeGen läuft auch mit lokaler KI erschreckend gut

    #KI #selfhosted #homelab #programming

  17. Docmost v0.96.0 is packed: MCP OAuth, footnotes, page version comparison, RTL text support, attachment gallery, SIEM integration, and important security fixes. Upgrade recommended.

    github.com/docmost/docmost/rel

  18. I mostly wrapped up my #rbac implementation today. After reading through the #owasp recommendations for building rbac I can proudly say that the implementation is about what, 10 LOC? You be the judge, I cant count. What you don't see is the map that is 500+ LOC that makes it all work.

    #homelab #selfhosted #golang

  19. Enough has gone sideways recently with tech that I've just about hit critical annoyance and am looking to make some changes around my regularly used stuff. I had standardized roughly a bit less than a year ago around #debian after some hardware struggles forced an evaluation of where I was. Debian now including AI contributions in their code has me ready to skip from that, as I don't expect the stability to be maintained to what it has been.

    #linux
    #homelab

  20. Ya estas con @jellyfin 12?, yo sí. Algunos cambios en características y mejoras en la experiencia., como alguna de sus novedades.

    Para esto tengo mi viejuna Pc de 32 bits, sirviendo desde esta al resto de la LAN, eso sí el cliente, se encarga de la Reproducción Directa:, el servidor solo envía el archivo original sin modificarlo ya el l cliente decodifica, Logrando que: el servidor no use recursos (CPU o GPU).

    #homelab #jellyfin #linux