AI disclosure: v1–v5 were hand written; v6 was built with heavy help from Claude Code. I review and test every change.

Hey r/selfhosted,

About 3.5 years ago a friend of mine was using Zipline and I didn't really like how it looked, so I started making my own. Back then it was called SpaceX (a joke name, it obviously couldn't stay). It was my first big Nuxt project and only me and a few friends used it. I open sourced it, and in July 2024 I started over with everything I'd learned and called it Fileship. Some code from that first version is still in there, which is kind of funny.

I just released 6.3, so I thought it's a good time to share it here.

The basic idea: you upload from ShareX, the web, the browser extension or your phone and get a link back. On top of that there are folders you can share with other users, Markdown notes, short links, upload inboxes and a trash.

Things I haven't seen in other ShareX servers:

• A native Windows app for screenshots, screen recording and OCR. It sits in the tray using a few MB of RAM and has ShareX style hotkeys.
• Fileship Harbor: your files show up in File Explorer like OneDrive, as online-only files.
• AI search that runs on your own server, on the CPU. Search "dog on a beach" in 50+ languages and it finds the photo. It also writes captions, does OCR and flags photos of IDs or card numbers so you don't share them by accident. All optional.
• Updates from the dashboard without downtime (blue/green behind Caddy).

New in 6.3:

• Single sign-on with OpenID Connect, tested with Keycloak and Google
• Import from Zipline, XBackBone and Chibisafe, and old Zipline links keep working
• The Docker image went from 1.43 GB to 230 MB
• Spanish, Brazilian Portuguese and Russian, 12 languages now (native speakers, please tell me what's wrong)

Other stuff: S3, SFTP or FTP storage, passkeys and 2FA, passwords, expiry and view limits on shares, Discord embeds, scheduled backups, webhooks, an installable phone app and upload scripts for macOS and Linux. MIT licensed.

Some honest notes:

• The desktop app is new (it came out with 6.0 earlier this month), so it's Windows only for now and needs Windows 11 24H2 or newer. Linux and maybe macOS could come later. Until then the dashboard gives you upload scripts for both.
• There are ARM64 images, but I've only tested them under emulation. If someone runs it on a Pi, let me know how it goes.
• Anonymous telemetry is on by default (counts and versions only, no file names, URLs or IPs). One switch or NUXT_TELEMETRY_ENABLED=false turns it off.
• I wrote everything by hand up to 5.x. This month I started using Claude Code, and a lot of 6.x was written with it. I review and test everything, but you'll see it in the commits, so I'd rather say it upfront.

Setup is a docker compose (2 CPU cores, 2 GB RAM, 4 GB with AI):

git clone https://github.com/hanzydev/Fileship.git
cd Fileship
echo "SECRET_TOKEN=$(openssl rand -hex 32)" > .env
docker compose up -d

GitHub: https://github.com/hanzydev/Fileship
Windows app: https://github.com/hanzydev/fileship-desktop/releases/latest
Docs: https://github.com/hanzydev/Fileship/tree/main/docs

Would love some feedback, especially from Zipline users.

Heyaaaa, I'm an artist who often looks up photos online for subjects I wish to have reference for while drawing. This used to be a pretty simple endeavor... and then generative AI happened. Now I have to carefully vet what images I'm using as reference so I know I'm getting the real thing, but to that end my collection of real deal references is growing, and searching through folders to find what I need is becoming tiring.

I'm looking for a program that I can use to catalog, tag, and search through this library of references that isn't Immich, since I already use an instance of that for my personal photo collection. I'd like to also have easy access to it while I'm away from my home network via something like tailscale, which is why im seeking something self hosted.

A hypothetical use case would be, if I search for "cat", it would bring up any feline that I've catalogued, but if I searched "tiger" I would only get tigers.

No idea if something like this exists, but I figure if anyone knows you guys might. Thanks!

Edit: A few people have already suggested running a second Immich instance, but the truth is I REALLY don't like the interface and use it purely as a backup service. It also uses a lot of resources on my NAS so I'd be eager to find something more lightweight and/or that I could toggle on and off as needed.

I’m about to set up my first home server for my family (around 5–10 devices) and could use some advice on remote access.

I’m planning to host things like Vaultwarden, Matrix, Linkding, Jellyfin, and whatever else I end up tinkering with. Now I’m trying to figure out the best way to access these services securely when I’m away from home.

My first thought was WireGuard. Getting a public IP from my ISP is relatively cheap, but I’m a bit hesitant about exposing a VPN endpoint on my home network to the public internet.

I’ve also been looking into Headscale and NetBird. They seem like great options, but I’m not sure if a mesh VPN is overkill for a small homelab. WIth these services I also need a VPS, which could cost several times more per month than a public IP. I’d also prefer not to rely on a third-party VPS if I can avoid it.

There’s another complication in my case: I live in a country with strict internet restrictions, so I usually have one or more VPNs connected just to access the internet normally.

Ideally, I’d like to access my home server while keeping my regular VPN connected. Otherwise, I might have to disconnect my current VPN, connect to my home VPN, open the service I need (say, Linkding), and then switch everything back afterward. Having to do that every time sounds pretty annoying.

Has anyone dealt with a similar situation? Is there a way to access self-hosted services seamlessly while keeping another VPN connected?

Would love to hear about your setups and experiences. Thanks!

EDIT: Add more focus on Two VPNs problem

Hi r/selfhosted,

we're two homelabbers (day jobs in cybersecurity/infrastructure) and we've been building MazeDNS, a self-hosted filtering DNS resolver in the spirit of Pi-hole and AdGuard Home, designed for people who run DNS in more than one place. It's part of Maze Labs, a small set of self-hosted tools we make for our own homelabs: https://amaze-labs.github.io/

AI disclosure: we build MazeDNS with AI coding assistants. We design it, review every change and test each release in our own labs, and it's all AGPL-3.0 so you can read the code.

Why another DNS filter? Pi-hole/AdGuard Home are great on a single box. We wanted one dashboard and one config for several sites without syncing instances by hand.

How it works

• One control plane (web UI + API, no DNS) and one or more agents (the DNS part) placed near your clients
• Agents enroll with a key, copy the config, and keep answering from their last copy if the control plane is down
• Sites, roles, maintenance/drain mode, health and sync status per agent

Features

• Blocklists (URL/file/pasted), allow/deny rules, whole-category blocking, one-click pause
• Local records, conditional forwarding, split-horizon per site/agent
• DoT/DoH (server and upstream), DNSSEC-transparent forwarding, cache, per-client rate limits
• Per-device query breakdown with traffic types (social, streaming, work…)
• Domain risk scoring from sources you choose (threat feeds, WHOIS age, name shape, optional LLM)
• Local users or OIDC SSO, API tokens, Prometheus /metrics, optional VictoriaMetrics/VictoriaLogs

Deploy: two containers, Docker Compose or Kubernetes. Quick start is in the README: https://github.com/amaze-labs/MazeDNS

Honest limitations

• Young project, small user base
• The resolver has no client ACL: keep agents on a private network, never expose :53
• Don't expose the control plane to the internet (VPN/reverse proxy only)

Docs: install, user guide, configuration, troubleshooting are all in the repo.

We'd love feedback, especially on multi-site setups and anything that breaks. Thanks!

Has anyone ever tried openfw utm?

https://openfw.com.br/#home

I have been searching for firewalls other than opnsense or pfsense and came across this, it looks promising but there's not many people talking about it

I don't like opnsense or pfsense for my own reasons I'm not going into details but it's always good to have alternatives

I'm currently running ipfire but the web UI is so ugly

I was reading a post recently that got me thinking about my deployment strategies. I believe there are good arguments for hosting certain things locally and good arguments for hosting things remotely on a VPS.

A media server (Plex, Jellyfin, etc) I think is fair to say locally is your best option, whereas your monitoring/notification system might be better served remotely. It's hard to get notifications about your network being down when notifications can't leave the device/network.

What specific services do you all host that you have a firm conviction of hosting locally and hosting remotely and your reason for doing so?

Hey r/selfhosted,

When I last posted here, we had just released the Web UI and talked about using it as the foundation for a cross-platform desktop client. Today I finally get to follow up on that: GameVault 2 is available to everyone as a public beta, with desktop clients for Windows, Linux and macOS!

If you're new to GameVault, it's a self-hosted home for your DRM-free game collection, with a server that stores the library and clients that download and install games locally. You can share it with friends and family.

We've rebuilt the client around the same frontend as the Web UI, with a much, much more modern interface and a responsive layout that adapts to smaller screens. You can browse your library on your phone and use the same familiar interface in the desktop app.

Getting the Linux client out feels especially good. We have AppImage and .deb packages, plus umu-launcher integration for running Windows games through Wine/Proton, with separate prefixes per game. There's also support for keeping multiple versions of a game and choosing which one to download.

One thing before upgrading: GameVault 2 still lacks some features, including GameVault+, and existing game installations need to be downloaded and installed again. GameVault 1 remains available while we work towards feature parity.

We've already switched to GameVault 2 ourselves. As one of the two developers behind this project, I'm really proud of how far it has come, and I'm excited to finally get this version into more people's hands. Thanks to everyone who tested builds and kept sending feedback.

You can download GameVault 2 here. If you run into bugs, please report them on GitHub.

Hi r/selfhosted!

I've been developing StatLite, an open-source monitoring dashboard primarily designed for people running a few applications on small VPS instances.

The idea came from wanting basic monitoring without having to deploy and maintain a full Prometheus/Grafana stack just to watch a handful of services.

StatLite is a single Go binary with SQLite storage. It collects a small, predefined set of metrics: HTTP traffic, errors, response latency, CPU, memory, and application health where available.

One useful feature is that it monitors itself out of the box. You can install it, run statlite, and open the dashboard to see its own process and local host-resource metrics. No application integration is needed to get started.

From there, you can add:

• Spring Boot applications using Actuator/Micrometer
• Quarkus and Micronaut applications
• Express, FastAPI, Django, and Go apps using a small JSON metrics endpoint
• Caddy HTTP traffic, including per-host requests, errors, and latency

It also has a read-only status API, which I've been using with a small shell script to get Telegram alerts and recovery notifications.

The emphasis is on keeping resource usage and operational complexity low rather than trying to cover every possible metric or observability use case.

The project is MIT-licensed, and the dashboard and metrics stay on your own server.

GitHub: https://github.com/PVRLabs/statlite

Interactive demo: https://pvrlabs.xyz/statlite/demo.html

I'd be interested in feedback from people running applications on small VPS instances, particularly what basic monitoring information you find useful and what you'd rather avoid running additional infrastructure for.

I host a Jellyfin server with the ARR stack. Its great!

I personally use tailscale and have family and friends join my tailnet.

I see a lot of folks on here open their Jellyfin to the internet. Are people generally comfortable with that? Something about the Jellyfin login page being the first and last line of defense is uncomfortable to me.

But I would like to open it up - would be a lot more convenient for family and friends. But you know… I’m using the ARR stack…

I've been running this on my homelab for half a year and it's grown into something others might find useful.

You give it a URL (or a file) and get clean Markdown back: no navigation, cookie banners or ads, just the content. I use it mostly to hand articles, docs and Reddit threads to an AI assistant without wasting half the context on page junk, but it works just as well for saving articles or reading on mobile.

What it handles:

• Web pages, with a headless browser fallback for JavaScript-heavy sites
• Reddit and Hacker News threads including the comments
• PDF, Word, Excel, PowerPoint, EPUB
• YouTube transcripts, no API key needed
• Images and audio, if you point it at a model (local works too, nothing is sent anywhere by default)

How you use it:

• Web UI (installable PWA, so you can share links to it from your phone)
• Plain HTTP API: curl "https://your-host/api?url=..."
• MCP server for Claude and other AI tools that speak MCP

Self-hosting bits:

• docker compose up -d, images for amd64 and arm64 on Docker Hub and GHCR
• SQLite, no external database
• Main app plus optional sidecars, each one can be left out if you don't need it
• Optional login with multiple users, or leave it open on your LAN
• Blocks requests to private and internal addresses by default, so it can't be used to poke around your network
• AGPL-3.0

Built with Claude Code. Happy to hear what breaks or what's missing.

Hello everyone! I'm no security expert but I consider myself tech literate. I am a solo dev and I have an app that I was using a free service to host, but as the userbase grew, that service was no longer sufficient so I got a VPS.

I didn't want to be limited and I am not a fan of Amazon or Google so I went for a 2 core, 4gb ram VPS. I was able to fit my server and database in it, and barely utilized 10% of the CPU and RAM. So I wanted to make good use of the rest of my resources, and that kickstarted my self-host journey.

I added Wireguard, Adguard, Navidrome, and about 30GB of my and my wife's music library, I also hosted the API of a small website I run to it. I also installed Beszel to have a quick dashboard of everything.

Everything runs in separate Docker containers, each stack on its own isolated network. The only public entry point is a Caddy reverse proxy, and it only accepts connections with Cloudflare's client certificate.

Other than music, I don't have any personal files or information there, but I always had the mindset of compartmentalizing work and personal stuff. So what are your thoughts on my setup? Would you feel safe also adding email, and other things to it? Or is it safer to separate?

The end goal is a personal NAS for picture back up, and navidrome and any other personal things. But with current prices it's out of reach.

Managing SSL certificates across a bunch of self-hosted services is the one part of self-hosting that still catches me off guard. You set up certbot, cron the renewal, and most months it's fine. Then a custom domain expires, a DNS record changes, a container restarts at the wrong time, and suddenly a client site is showing a cert error at 2 AM.

I've been through enough of those fire drills to know the "set and forget" approach works until it doesn't. The moment you add a custom domain or move a service, the renewal chain breaks silently and you find out from a user, not from a monitoring alert.

For those of you running several apps on your own hardware or VPS: what's your setup? Are you using a reverse proxy with automatic cert provisioning (Caddy, Traefik, nginx-proxy with acme-companion)? Have you settled on one approach, or do you mix and match depending on the service?

Genuinely curious what's working for people who've been doing this longer than I have, especially when the number of services grows past what you can mentally track.

Description:

NetPulse watches all your home network in one place: which devices are connected, how the routers and link together, and where to look when something breaks. It is free software licensed under AGPL-3.0, mainly aimed at home networks running OpenWrt (but wait).

switches

Current features include:

- Device discovery and topology maps using FDB, LLDP and SNMP, including Proxmox hosts and VMs.

- Per-router CPU, RAM, temperature, uptime and per-port traffic, plus firmware updates for vanilla OpenWrt.

- WiFi and roaming details, including signal, bands, events, channel analysis and 802.11r.

- WireGuard tunnel status and AdGuard statistics. Also test periodically your internet connection.

- Alerts through Web Push, ntfy, Telegram or webhooks.

- Home Assistant integration over MQTT and a read-only MCP server for AI clients.

There is also an experimental 19-inch rack view under Labs that suggests equipment layout and cabling.

Also (NEW) we have vendor integrations, which live in a separate repository and currently cover MikroTik/RouterOS and Asuswrt/Merlin.

Deployment:

The server is a single Go binary with the web UI and SQLite. It runs under systemd on Linux or inside an LXC/VM, with no Docker required. The compressed Linux amd64 download is about 24 MB.

OpenWrt has .ipk and .apk packages with LuCI integration. You can run the server on the router itself or install agents across several routers. On my setup, the server uses about 20 MB of RAM and each agent around 12 MB.

For the IA curious, this is not one developer's task. It takes testing, understanding how networks behave across different devices, and working with several very active contributors. It is not something I put together over a weekend with Claude.

Repo: https://github.com/gnacho/netpulse

Web with features and demo: https://netpulse.cloudless.club/

We ended up pulling our managed APIs out entirely, because our documents aren't allowed to leave our own infrastructure for compliance reasons. And our problem has nothing to do with cost, because the per-page pricing was perfectly reasonable.

And that 'docs not able leave our cloud' constraint rules out Textract, OpenAI embeddings and Cohere in one go, since every one of them ships your data off to someone else. That forced us into self-hosting the whole pipeline, OCR, embeddings and reranking included, and after a couple of weeks of testing this is the shortlist I've built up:

docling holds up well on clean digital PDFs, but it gets noticeably shaky once you hand it scans or handwriting

PaddleOCR-VL deals well with messy multilingual layouts and stays small enough to run on a fairly modest GPU

TEI is dependable for embeddings, though it only serves one model per server
Infinity handles embeddings and reranking together from a single process

SIE runs OCR, embeddings and reranking behind one endpoint with model-swapping by ID, and it runs inside your own cloud.

What you give up by self-hosting is all the turnkey convenience you used to get for free, so there are no parsed tables handed to you, no confidence scores, and the entire pipeline becomes yours to own and maintain.

We've made peace with that because the residency requirement simply isn't negotiable for us, but I'll admit that if cost were the only thing driving this decision it would be a far harder one to justify.

I'm the author - free + MIT, not affiliated with Immich.

My library was mostly phone uploads: live photo pairs, 12MP stills, 4K clips. Immich stores everything exactly as uploaded, which adds up fast. JPEG-XL saves 20-40% on photos, AV1 saves 30-50% on videos with no visible loss.

immich-convert-originals talks to Immich via API and converts originals in place:

• Images -> JPEG-XL / HEIC / AVIF (JPEG -> JXL is lossless bit-exact repack)
• Videos -> AV1 in MP4
• Web UI: browse, pick album / date range / selection, dry-run savings preview, live progress
• EXIF, GPS, favorites, ratings, albums carry over
• Every upload verified, old file goes to Immich trash (30 days)
• Single Docker container, amd64/arm64, settings in UI

Docker:

mkdir -p immich-converter/data && cd immich-converter
docker run -d \
  --name immich-library-converter \
  --restart unless-stopped \
  -p 8000:8000 \
  -v ./data:/app/data \
  ghcr.io/fabianwimberger/immich-convert-originals:latest

Source + docs: https://github.com/fabianwimberger/immich-convert-originals

AI Involvement: Made with AI assistance

1.0 is out since Sunday, so I tested the upgrade with a copy of my server first.

Heads up: this is not a simple image update. 1.0 has a new db layout and won’t open a 0.16 store. And latest already points to 1.0, so if you use latest or watchtower, pin v0.16 now or the next pull kills your mail server.

The upgrade goes through stalwart-migrate (you need 0.16.27 first). It only reads the old store and writes into a new one, so going back is easy.

I put last night’s backup on another VM in a docker network without internet (didn’t want the copied queue to send mails, lol). Small setup: 10 accounts, RocksDB. prepare asked 4 questions, I took the defaults. run --final took 41 seconds for 920 mails, verify said 0 mismatches. 1.0 started fine on the copy.

What bit me: my little admin app for the JMAP API failed creating a domain with “Invalid key for object”. Domain isEnabled and alias enabled are both called enable now. Annoying part: reading the old name gives no error, the field is just missing. So if you have scripts against the admin API, test writes too, not only reads. SCHEMA_CHANGES.md in the stalwart-migrate repo has the full list.

Also: OAuth clients need to log in again, search index gets rebuilt, IMAP clients don’t redownload everything.

I’ll wait for 1.0.1 before doing it for real, but the dry run took maybe half an hour and I’m way less nervous now. Happy to share the commands if anyone wants them.

We built Olivares AI to run coding agents on our own servers instead of on each laptop: Claude Code, Codex, Gemini CLI, OpenCode, Grok and local models through Ollama.

It is one Go binary with the web console built in. It stores its data in SQLite on a single node, or in PostgreSQL, and has backup export. You can run it as a Docker container (the image runs as a non-root user), with Compose, or from the Debian package, which adds a no-login service user.

From the console or the olivares CLI you start and stop agent sessions, several side by side, each in its own git branch. Each tool can have several accounts, MCP servers and skills sit in one shared catalog, and every action is checked before it runs and written to a signed log. You also see the cost of each session.

Free and open source (AGPL-3.0):

curl -fsSL https://olivares.ai/olivares/install.sh | sh
olivares quickstart

Code and the other install methods: github.com/olivaresai/olivares Site: olivares.ai

We build it with Claude Code and use it on our own servers. Questions and issue reports are welcome on GitHub.

Not sure if this is common knowledge yet, but after updating Virtual Machine Manager to 2.8.0-13004 (needs DSM 7.3 or newer) I noticed two new options I’ve wanted for a long time.

You can now schedule the OVA export of a VM daily, weekly or monthly. So you basically get an automatic backup of the whole VM to a shared folder instead of doing the export by hand every time.

You can also set a schedule to start and shut down VMs.

Before this you had to do it manually or write your own scripts for Task Scheduler.

Using solutions like wireguard or tailscale never fit my use case. I didn't want people in my household to have to rely on an app on their phone for connectivity.

Up until now I've been using Pangolin, with crowdsec, geo blocking, and ASN blocking. As expected my access logs were filled with denied attempts as bots sniffed around my services.

I was researching how to lock it down further and was learning about mTLS certificates, only to learn it had just been recently added to pangolin. Basically, you install one certificate on the pangolin server, and then client certificates on each of your client devices that will be accessing services through pangolin. I found decent support for it through apps like Nextcloud, Immich, and Home Assistant already baked in.

Since a client needs to have a valid cert to establish a TLS handshake, that means that bot requests never even make it to your server because they can't even establish a connection.

The only maintenance is having to renew certificates when they expire, which you can choose how long they are valid for.

My logs are finally silent! And it gives me much stronger protection against non-authenticated vulnerabilities, like the PHP CVE last week.

https://www.bleepingcomputer.com/news/security/tailscale-warns-of-serious-ssh-flaws-allowing-root-privilege-escalation/

Hello all,

I am planning to build a custom NAS (I know it's the worst possible time) with some room for self hosting. Currently I have a very crude setup; an RPi4 with a 2TB regular WD external HDD serving some media files for Plex. And it's not great.

I looked into some PnP options like UGreen, Synology, MinisForum etc. But, since I plan to run something custom (OMV/Unraid), I think a DIY setup would be a better investment allowing me to upgrade/fix only specific components in the future. The following setup is costing me around ~500 EUR (without the storage/RAM) which is far better HW than any PnP solutions on the market within the same price range.

I have done some research and with help of Gemini, finalized the following setup. What do you guys think? Any advice would be much appreciated.

I have already bought both RAM and OS SDD since I don't think waiting around is going to help much. For others I am waiting for the Black Friday to see if I can save some.

I'm the author of GCopy, sharing it here because the self-hosted part is the whole point for me.

Short version: it's a small web app that syncs your clipboard across devices. Open it on your laptop, desktop, and phone, log in with the same 8-char token, hit sync. Text, screenshots, and files all work. No client install, and the devices don't need to be on the same network.

Why I ended up self-hosting it:

• I didn't want my clipboard going through someone else's cloud. Clipboard content is basically "whatever I was just looking at."
• Everything is held in memory, nothing is persisted. Data expires after 24h of inactivity.
• The token is just a shared key. No user accounts, no email, no database.
• It's one Go binary with the frontend embedded. There's an official Docker image if you don't want to build it.

Docker, roughly:

docker run -d \
  --name gcopy \
  --restart unless-stopped \
  -p 3375:3375 \
  -v $(pwd)/cert.pem:/cert.pem:ro \
  -v $(pwd)/key.pem:/key.pem:ro \
  -e GCOPY_APP_KEY=your-secret-key-min-16-chars \
  -e GCOPY_TLS_CERT_FILE=/cert.pem \
  -e GCOPY_TLS_KEY_FILE=/key.pem \
  llaoj/gcopy:latest

The browser Clipboard API needs HTTPS, which is why the example uses a self-signed cert. You can also put it behind Caddy/nginx and skip the built-in TLS.

Config is all env vars: GCOPY_LISTEN, GCOPY_MAX_CONTENT_LENGTH (default 10 MiB), GCOPY_DEBUG, plus the TLS ones.

Honest tradeoffs:

• In-memory means a restart wipes the current clipboard. That's deliberate, but if you want persistence this isn't it.
• Only one file in flight at a time, and files are capped by the memory limit.
• Token-only auth means the 8-char token is the security boundary. Don't share it, and put rate limiting in front if you expose it publicly (there's no built-in rate limiting).

Repo: https://github.com/llaoj/gcopy

Docs: https://github.com/llaoj/gcopy/tree/main/docs

Hosted demo if you just want to poke at it: https://gcopy.link

Would genuinely appreciate feedback from people who've run similar setups, especially around auth and resource limits.

I’m running a cluster with 5 nodes and services like:

• Personal portfolio with blog
• Dozzle
• Grafana with a logging and metrics stack
• Vaultwarden
• Multiple Uptime Kuma instances (for different clients)
• Authentik
• Pocket ID
• Auth proxy
• 9 websites for different clients
• 12 more or less business-related backends, crawlers, and other applications that integrate with CMS or ERP systems
• Filebrowser / Nextcloud
• Forgejo
• Glance
• and multiple more

The problem I’m facing is management. The nodes aren’t much of a problem, since everything there is automated via Ansible. But I need some advice. For a very long time I’ve been putting off automated deployments and GitOps, because I was a bit scared to touch it. I don’t have the capacity to replicate everything in another cluster, test it there, and then point everything at the GitOps-managed space once it’s all migrated. I also don’t want the hassle of moving all the app data.

I should have started earlier, but now I’m stuck between keeping track of what to deploy and which version everything is on. I’m also no expert by any means.

Should I use Argo CD or Flux? Or are there other solutions I should try? At my workplace we use Argo, and I don’t know if our setup is just not great, but it’s always a hassle. Because of this, I’m leaning toward Flux.

Hi everyone, I’ve been working on AnkiBase for a few months and it’s finally in a state where I’d like other people to try it.

It runs your real Anki collection on your own server, so you can study from any browser without Anki Desktop.

What it does

• Studies your Anki decks with Anki’s own scheduler, so intervals, limits and card templates work exactly like in Anki
• Syncs with AnkiWeb, or with your own sync server (it can run Anki’s sync server for you in one click)
• Imports Quizlet sets and lets you study them in all the Quizlet modes (Learn, Test, Match and so on)
• Writes short AI stories from the words you’re learning, with tap to translate (optional, bring your own API key)
• Shows full stats, plus a dictionary search across all your cards
• Supports multiple users and profiles, with permissions for each user
• Has an iPhone app that studies fully offline and syncs when you’re back online

Install

Debian or Ubuntu, one command:

curl -fsSL https://raw.githubusercontent.com/Macro002/AnkiBase/main/install.sh | sudo bash

A setup wizard then walks you through the admin account, your first profile and syncing your cards. Updates are one click from inside the app, with an automatic backup and rollback.

Links

GitHub: https://github.com/Macro002/AnkiBase
Docs and demo video: https://macro002.github.io/AnkiBase/

AI disclosure: I built this with a lot of help from an AI coding assistant. I designed it, tested it and use it every day myself.

Feedback and bug reports are very welcome!

I'm trying to keep my docker / docker compose configuration in git to make it easy to recreate if things go bad. Of course, also trying to keep passwords out of the git repo. The problem I'm seeing is that a lot of projects provide a recommended compose.yaml file that pulls a lot more than just passwords from the .env file - things like a database names, urls, or port numbers, all info that I want under version control. Except it has the passwords mixed in.

How do people really deploy your systems? Do you have a secret.env and a non-secret.env file and use the docker compose command line option to load both? Do you just modify the compose.yaml file to embed the non-secret config options and hope upgrades won't require a complicated merge?

I'm setting this up, but I'm not living and breathing it every day so I appreciate not having to remember which env files to load on each restart. I can set up a system, but the reality is the more I need to remember each time translates directly into the more likely I will be to make a mistake. But at the same time I am worried about upgrading if I modify the stock setup files too much.