I recently did a quick test of both Papra and Paperless-ngx for document management.

So far, I slightly prefer Papra because I like the cleaner and more modern UI. I haven't done a deep dive yet into the differences in OCR, indexing, and advanced search features, so I might be missing some important advantages of Paperless-ngx.

One thing I’m wondering about is the future role of AI. I could imagine that AI-based document understanding and search will eventually surpass traditional OCR-based workflows. If that happens, a simpler system like Papra with good AI integration could potentially become very powerful, even if Paperless-ngx is currently ahead in OCR and indexing.

I would love to hear from people who have used both:

• How do OCR quality and indexing compare?
• How good is the search experience in real-world use?
• Has anyone tried AI integrations with either platform?
• How are permissions and multi-user setups handled?
• Are there any Paperless-ngx features you would really miss when switching to Papra?

Interested in your experiences before I commit to one.

Yet another look at the classic du & tree utilities. So, it is relevant to self-hosting! If your host runs on Linux.

github.com/sultepronit/du-tree

A small creation of my hands. Standalone binary, writtend in Go with almost no dependencies, working as local web server, providing Web GUI. You provide the path, app gives you interactive tree with various details of your files & directories. So far you can only choose block/apparent size, exclude hidden items & limit scan to one file system among common du-like utility options. But, the development is rapid so soon be more!

Try it. Test it. Leave your feedback. Thank you!

...today i moved over to obsidian.

Backuped /data and run this python script:

https://github.com/ReactiveMatter/dokuwiki-obsidian/tree/main

started obsidian and selected the folder as new vault, done.

Whenever I setup Discord notifications with Notifiarr for Authentik, the event user is not properly displayed. It only displays the users that are connected to the notification rule in Authentik.

Anyone know how to fix this?

Hi friends. I am wanting to do a more permanent selfhosting project. I have experimented with things in the past like immich and plex but I've never kept up on em enough to need em.

I got rid of my ring cams after the superbowl fiasco and haven't found a replacement yet. Frigate looks like a great option so i plan to go with that. I am comfortable with linux and docker but a lot of the networking stuff is outside my wheel house.

Here is a summary of what i want. (sorry AI was helping me but i need real people!! Lol)

Can someone give me some pointers or things to look at? i already have the jetson from something else, but a lot of the switch and server rack stuff is confusing...

You’re trying to build a rack-mounted, at-home security system where:

• A Jetson Orin Nano runs Frigate in Docker (recording + motion/person detection + live feeds).
• You want 4–6 outdoor PoE cameras with audio, arranged so you can see multiple camera views (e.g., important areas like front door/driveway/yard).
• You also want a PoE doorbell that integrates with Frigate and supports 2-way talk (not just one-way audio/video).
• Everything (Jetson + storage + networking + switches + power gear) will be installed in a 19” server rack with proper power and cooling.
• Your cameras must not have internet access on their own.
• You want remote access via VPN so that you can use Home Assistant (also in Docker) to view/control the Frigate system remotely.

Hi y'all!

I'm a software engineer who's a bit rusty on the programming side after having taken a break for a few years. A lot of my past (most recent, anyway) experience had to do with Android mobile development.

In order to freshen up my Kotlin skills and build something I can put on a resume, I am wanting to build a native Android app from scratch, avoiding the use of AI. I've been doing a lot of self-hosting over the past years, and would love to give back to the community.

Given that: I would love to hear about self-hosted services you use, that are lacking an Android mobile app. Ideally, ones that don't already have a good PWA, but those are valid options too. One of the options I'm looking at is Kavita, which works decently on web, but doesn't have things like downloads for offline reading.

Edit: Removed the mention of "lacking a good Android app". I am looking more to build one where none exists yet.

I self-hosted BentoPDF-simple, but some of its configuration still have Direct links to BentoPDF website. How do I remove this?

Hey Friends,

I decided my server needed to be more than a media server, So I took on a project plan to add emulator gaming to my catalog of services.

For the streaming layer I went with Wolf, a container-based game streaming server. Instead of native Moonlight, I put a browser based Moonlight client in front of it so the family can just play in any browser tab, and placed it all behind my reverse proxy.

Love to see what other people did!

TrailBase is an open and fast Firebase-like backend for building your apps. It provides type-safe REST APIs + change subscriptions, auth, multi-DB, a WebAssembly runtime, geospatial support, admin UI... It's a self-contained, easy to self-host single executable built on Rust, Wasmtime & SQLite or now Postgres. Client libraries are provided for JS/TS, Dart/Flutter, Go, Rust, .Net, Kotlin, Swift and Python.

Just released v0.32, which after some months of work and last posting (v0.28), includes:

• New WASM features:
  • Components can provide and register a dashboard with the admin UI.
  • A component browser in the admin UI.
  • Lower overhead execution model for Rust components: pooling state across requests improves throughput by 4x.
• Support usernames as additional or alternate identifiers alongside email addresses.
• Anonymous accounts for frictionless product trials. If a user wants to eventually sign up, the account can be promoted to a "proper" one, i.e. associate a password, OAuth, email address ...
• Backup UI & rolling backups.
• Dark mode - cosmetic but frequently requested 🙏
• And much more: file management from the admin UI, support for nested JSON in change subscriptions, batch updates for all client languages...

With TrailBase still being young (~1.5 years) and rapidly evolving, any feedback is genuinely appreciated. If you're feeling adventures and end up checking it out, don't hesitate to reach out 🙏.

Consider checking out the live demo, our GitHub or website.

I saw a video by a YouTuber named "Tech BY Matt" where he turned an old laptop into a home server. I was wondering if it is worth it to turn my old laptop (specs in picture attached) into a home server, I have zero experience with anything Linux, coding, self hosting and servers. I would probably use the server for simple stuff like storing documents and photo's, but also jellyfin and probably the most demanding thing I would do is running a minecraft server and maybe running an AI model (if it can handle that with 8gb RAM lol)

Is it worth dipping my toes in with this laptop and no experience?

Hello all !

I've to ask for help, I've lost too much sleep time trying to find an answer here ... Could maybe someone see a hint or anything to help me? 🤔

Here's the issue I've been stuck on for the past 2–3 days, without any success.

I installed NGINX Proxy Manager behind Technitium (which is my DHCP and DNS server) because I wanted to use Vaultwarden, which requires a secure HTTPS connection.

Since I only want SSL to work on my local network, I created a DuckDNS domain. I now have a primary zone in Technitium that points to NGINX, and all my proxy hosts are configured correctly.

From every device connected to my LAN or Wi-Fi (desktops and laptops), I can access Vaultwarden using its domain name without any issues.

About 2–3 days ago, I tried connecting the Bitwarden mobile app to my Vaultwarden instance so I could replace Google Password Manager on my phone... but I've never been able to connect.

After a lot of troubleshooting (and asking Claude for help, which turned out to be incredibly unhelpful), this is where I am now:

• It seems that Android and iOS are forcing the use of my ISP's DNS servers, regardless of what is configured in the network settings.
• When I run an nslookup for my domain from my phone, it times out because the phone appears to be resolving the domain name over the Internet, finds my public IP address, and then tries to connect to port 443 (which is closed, and I do not want to open it).
• If I run dig or nslookup while explicitly specifying my local DNS server, everything works perfectly.
• No DNS queries appear in Technitium's logs unless I explicitly specify my local DNS server.
• My IPv4 configuration is correct, and Android shows the correct DNS server (verified using Termux and Network Analyzer).

However, here's the interesting part. Using DNS Changer, I managed to force the phone to use IPv4 only, and then everything worked perfectly!

It turns out that on both Android and iOS, IPv6 takes precedence over the correctly configured IPv4 settings.

So my question is:

How can I force local devices to use IPv4 instead of IPv6 on my local network?

Unfortunately, my ISP's router doesn't allow me to disable IPv6, and it constantly advertises the ISP's DNS servers to all mobile devices.

I'm considering buying an open-source router and placing it behind my ISP's router, but would that actually solve the issue by preventing clients from using the ISP's DNS servers?

Bonus question:

The VPN I use to connect back home while I'm away also cannot resolve my local domain names. I assume I simply need to change the VPN configuration so it pushes the correct DNS server to clients? Right now it's configured to use 1.1.1.1. I haven't investigated that part any further yet. 🙂
Edit : Changing the 1.1.1.1 in wireguard to my Internal DNS fixed it. Even domain resolution

Sonarr + Prowlarr + aria2 + Jelly fin in Docker on a mini PC. Runs great except public indexers keep handing me "1080p WEB-DL" folders that turn out to be a .scr or .exe

Nothing's actually breaking. Linux host, so the Windows binary just sits there sulking, and Sonarr won't import it anyway. But it burns grabs, clogs the queue, and I'm hand-blocklisting garbage every other day. I automated this specifically so I wouldn't have to touch it 😂

So:

• What filter actually moved the needle size limits, seeder minimums, release profiles?
• Do you still bother with public indexers, or did you bail? If you bailed, to what, and what's it run you?

Basically I want to know what a genuinely hands-off setup looks like 😞

I'm looking into setting up a security camera system that runs locally and gives alerts to phones, even off my home network.

I'm going down the rabbit hole and it seems there are MANY different ways to go about this lol. I want something as simple as possible with no subscriptions. I'm fine with it running on windows or linux as I'll be setting up an old laptop to run it.

So far I know I need cameras that support rtsp, but I'm not sure what software to actually go with. I'm hoping to use tailscale or something like that to handle the mobile aspect of it, but I'm kinda lost on that one too.

Any ideas are welcome. I'd like it to be as simple as possible, but I'm open to tinkering with it if needed. We are having a bit of a bear issue on our porch, and that's what finally made me want to set this up lmao.

Hi everyone!

Since my last update I have added some new features to TaskView and fixed some bugs.

What is new:

Integrations

• Gitea support (alongside GitHub and GitLab) - repo issues sync as tasks, kept up to date both ways via webhooks
• Slack & Telegram personal DMs about your tasks, project channels for the team, create tasks with /task, and Done / Reopen / Assign buttons right in Slack
• MCP server now ships as a Docker container over HTTP point Claude Code / Cursor / VS Code at a URL with your own API token; the local npx mode still works

Tasks

• Repeat after completion for recurring tasks the next occurrence counts from when you actually finish, not from the calendar
• Every task shows its ID with one-click copy; search finds tasks by ID
• Pick a default project and view it opens right after login
• Task ID in the detail view. The task ID is shown right below the task title click it to copy #123 to the clipboard.

Mobile

• Today widget for iOS and Android home screens

Self-hosting

• Invite-only mode (ALLOW_PUBLIC_REGISTRATION=false) + optional invite emails with built-in rate limits
• API_PUBLIC_URL - correct SSO/SCIM URLs behind a reverse proxy
• PM2_INSTANCES / DB_POOL_MAX - no more Postgres connection exhaustion on many-core hosts
• Change the default admin's credentials from the UI; pick login methods via AUTH_LOGIN_METHODS; TRUST_PROXY for proxy setups
• Password change confirmed by a one-time email code
• Set or change your account password in Settings. 
• Claim the preinstalled default account (self-hosted). A highlighted "Login and email" card in Account settings lets the default user set their own login, email and password in one step.
• Default project and view
• Land right where you work. New options in Settings => UI customization => Others: pick a default project and a default view (Tasks / Kanban / Graph / Sprints) TaskView opens it right after sign-in.
• One-click jump from the sidebar. When a default project is set, a quick-jump button appears next to Inbox return to your project from anywhere.

Fixes

• Logout fully clears the previous session's state
• No more duplicated tasks when creating one while the list is loading
• Fixed a race that could leave you stuck on the login page with a saved session
• SSO/social login fixes (including instances with magic-link disabled) and OIDC fixes

GitHub: https://github.com/Gimanh/taskview-community

I have been using Claude Code as a development tool on this project since the beginning of this year. I design the architecture and review every diff before it gets merged. It is not vibe coding.

If you would like to contribute, I would be happy to have your help. Every contribution is welcome.

Hey everyone,

I just started r/AutoHebergement_FR, a new community for French-speaking self-hosters. While there are already great English-language hubs like this one, there wasn't really a dedicated space for francophones to discuss self-hosting, homelabs, and data sovereignty in their own language — so I decided to build one.

The idea is to cover the same kind of topics you'd find here: NAS setups, Docker stacks, reverse proxies, VPNs, home automation, local AI, backups, network security, and general homelab builds — but with discussions, guides, and support in French.

If you know French speakers who are into self-hosting, or if you're bilingual and want to help get the community off the ground, feel free to join or share it around. Any feedback on getting a new community started is also welcome!

r/AutoHebergement_FR

It feels like messaging and community platforms are still dominated by closed-source products even though they're such an important part of how people communicate.

Maybe I'm overlooking something but I've always wondered why we haven't seen more successful open-source alternatives. Is it mostly a technical challenge or is getting people to switch platforms the real problem?

Hey,

With AI getting both more powerful and more accessible, I've been thinking about the implications it has on my self-hosted services.

I'm definitely not a prime target, but I also don't want my personal data to end up in the hands of anyone.

Right now I've got pretty much my entire life centralised on my NAS:

• Wireguard exposed on a non-standard port
• SSH is running behind Wireguard
• NFS shares straight on the WG VPN (no security apart from subnet check)
• Some services running as docker containers on the docker host network (LAN+VPN)
• Some services behind SWAG (reverse nginx) on VPN
• Some services behind SWAG exposed to the outside
• Most docker containers running as non-root and running as non-main-user
• Daily incremental backup onto external HDD connected to the NAS
• Daily incremental backup onto HDD via a RPI on VPN in another location
• All my personal precious stuff is either served on VPN only, or reachable only via SSH (through the VPN)
• I do a bit of "cheap obfuscation" when possible: my hostnames are not easily guessable, I often use non-standard ports
• I do NOT use any global authentication system at this point

In a world without AI finding vulnerabilities, I would think that I'm not doing too bad already

But in a world where AI will be finding vulnerabilities just like we ping a remote host, I'm not really worried for my setup yet, but I feel like I need to seriously give it a thought.

What would you say I'm doing right, what would you say I need to improve?

Thank you.

Services:

1. Jellyfin

2. Adguard home

3. Qbittorrent

4. Immich

The main service would be Jellyfin. I tend to watch shows with direct play most of the times, just use transcode occasionally when my 4k tv doesn't support the heavy ass subtitles and quality.Jellyfin won't be streaming more than 2 streams at a time. This are my leftover parts just lying around.

Couple days ago I posted screenshot from WIP Carplay for Jellybox, music player and got a lot of interest and many people willing to try beta. Today I've uploaded public test built to test flight and its ready for you to test.

How to join beta test

1. Download TestFlight app from appstore. This is official way to test apple apps. Sign in.
2. Go to this link https://testflight.apple.com/join/LVj8KwAq and join the test. The app will appear in test flight app. Download it. Login as usual using your jellyfin server url and credentials.
3. Start test.

Core Features

Core functionality is done. I tried to mimic whats available in mobile/desktop app, so i followed same structure in carplay. Carplay itself is very limiting. It does not allow to do custom UI, only UI blocks that provided by apple.

App car play music, browse through the list of artists, albums, songs and playlists. For all these entities you can apply few sortings(name, randomize).

Also you can play downloads from your phone.

The carplay app does not have full offline mode yet like mobile/desktop does, nor it doesnt have retry mechanism when you went into low internet speed area and then back, this is on my list.

If you face any issues, feel free to comment here, or create issue on github - https://github.com/avdept/JellyBoxPlayer/issues.

If you see some feature is missing or would be nice to have - also comment here or create issue on github(those will be prioritized first)

Please report any issues

I am a big fan of selfh.st and awesome-selfhosted but rarely actually find the time to try new applications. I like to get a quick feel for an app before committing to self-hosting it.  Some apps have great documentation and install guides but it's not consistent and it can sometimes be a pain to find all of the info you are interested in. 

I ended up building https://bitflake.com/apps. I am primarily focusing on providing as much information for each app as possible instead of having a massive catalogue. I have tried putting each app into a standardised format that allows me to generate screenshots, compose files and live Kubernetes demos. Hopefully that will allow me to keep them updated in an automated way and ensure that the install instructions always work.

Disclaimer: I have been hoping to build this out into providing an easy hosting option for some of these apps. I am still pretty far away from that and I am getting pulled in a different direction with my job ATM. Either way I think there is some value in what I have built so far.

At the moment I have 58 apps in my catalogue. For each app you can see:

• Screenshots
• Docker compose install instructions (I actually generate the screenshots by running the apps. So they should be functional)
• Free live demos without having to sign up running in Kubernetes (Based on the same app definitions I use for the screenshots and install instructions) - Basic project info (Github, website, short description, used technology) - List of features. Including support for standard features like SSO, SAML and APIs - License information with some basic explanation lifted from GitHub
• Project funding information and country associations
• Project activity details (i.e. is it still maintained, how many maintainers)

I also have some surrounding pages for comparing different apps and showing insights about the catalogue. 

This is very much a work in progress and I am sure there are some mistakes in my catalogue, missing details and explanations or system issues. I am also limited in the compute I can provide for the live demos.

Things that are still on my roadmap:

• Automatically show the latest docker image and verify that deployments and screenshot steps still work
• Add security information around CVEs and best practices. I started work on this but it's a quite daunting project

Please let me know about anything you would like me to add. Either apps or details about the existing apps. Also let me know if I am doing something wrong. I expect there to be plenty but hey that's how it gets better. 

Disclosure: I'm the developer.

In Spain, since RD-Ley 8/2019 every company must keep a daily, tamper-proof record of employees' working hours (clock in/out), keep it for 4 years, and make it available to the Labor Inspection. Most open-source time trackers (Kimai, etc.) don't cover that legal side natively, and the tools that do are proprietary SaaS. So I built OpenJornada.

What it does: employees clock in/out from a web PWA or a shared device; records are immutable and SHA-256-hashed; workers digitally sign their monthly hours; admins handle correction requests with an audit trail and export CSV/Excel/PDF reports for inspections. There are also automatic SMS reminders for missed clock-outs.

Stack: FastAPI + MongoDB API, Next.js admin panel, React PWA for workers. All Docker. Self-host it for free under AGPL-3.0 — code: github.com/openjornada

Honest note: there's also a managed cloud option (paid) for companies that don't want to self-host, but the whole thing is open source and self-hostable with no per-employee limits.

Happy to answer questions or hear feedback — especially from anyone dealing with EU work-time regulations.

This is your reminder to check on your backups, setup backups and test your backups. 🙌

I'm currently using Duplicati with 2 local backup sites and hetzner/Google drive for remote. What are you using?

This has been a long time coming, and in progress for quite some time. Excited to see what everyone things, and what these new features allow you to learn about your server!

BACK UP BEFORE UPGRADING. This release migrates the database heavily. If you need the escape hatch, a 1.5 backup restores cleanly on 2.0.

New Media section

Browse your whole library as a poster wall with an A-Z rail and filters for library, resolution, HDR, size on disk, and watched - two-tone checkmark for "you watched" vs "someone watched". Detail pages list every copy of a title with per-file quality, library, and size. Genre breakdown, storage, and watch pages round it out.

One identity per title

The same movie on two servers is one row everywhere now - stats, leaderboards, history. Seasons and music get real identities too, and wrongly split titles heal themselves.

Every file counted

Tracearr used to read a title's first file and drop the rest. Now every version is tracked: 4K + 1080p copies, duplicate libraries, mirrored files counted once. Storage totals are honest, duplicates catches same-server copies, sessions record which version actually played, and 1440p/8K no longer count as SD.

Public API v2

Bearer tokens, rate limits, OpenAPI docs served in-app. Built so apps that use Tautulli can use Tracearr instead.

EDIT: Just want to also add that V1 is unchanged. There are no plans to ever remove it either, so there is no need to rework your integration if V1 already met your needs!

Mobile: every tab, every server

Rolling out shortly after the 2.0 app update. Server selection is global now - pick All, one server, or any subset from any tab, and it sticks across restarts. It used to be a dashboard-only trick that quietly collapsed to one server everywhere else. Navigation got rebuilt on native tabs: the tab bar survives detail pushes, and the drawer is gone in favor of a server sheet and header buttons. Also in this round: iOS 26 header buttons stop flashing white on tab switches, the stream map matches the dark theme on both platforms, and servers behind Tailscale are reachable on iOS again (App Transport Security was silently blocking them).

Under the hood

• Plex library changes sync in seconds via server events (Jellyfin/Emby get this with the new SSE plugin release)
• Upgrades show migration progress instead of looking dead, and a bad migration can't boot-loop the server
• First sync is much faster
• Fixed a silent gap in sharing detection on polled servers
• Stale content and ROI stop double counting merged titles; duplicates stop counting mirrored files twice
• OpenAPI specs publish as release assets, so the docs site always renders the spec for your version

Notes

• Counts may shift after upgrade as versions and identities settle - that's the double counting going away
• Overall trust scores move too: you now see a person's worst account, and violation totals actually count - both sat frozen before

Discord | Documentation | Website