{"type_":"Posts","comments":[],"posts":[{"post":{"id":3464495,"name":"Tailscale + public domain","body":"Hi selfhosting community :)\n\nI am hosting some services on a NixOS box (Immich, Nextcloud and some others). So far I had no problem reaching my services, just via tailscale when I am not at home.\n\nBut now I wanted to branch out and get a little fancy with https setup and a domain, so I can share my services with friends.\nI followed this [guide](https://www.youtube.com/watch?v=Vt4PDUXB_fg) and got a domain at cloudflare.\nHowever I ran into some problems.\n\nThe relevant setup:\n::: spoiler spoiler\n**Nextcloud:**\n```\nservices.nextcloud = {\n enable = true;\n hostName = \"nextcloud..com\";\n https = true;\n};\n```\n\n**Nginx:**\n```\nservices.nginx = {\n enable = true;\n virtualHosts = {\n \"nextcloud..com\" = {\n forceSSL = true;\n useACMEHost = \".com\";\n };\n \"immich..com\" = {\n forceSSL = true;\n useACMEHost = \".com\";\n locations.\"/\".proxyPass = \"http://127.0.0.1:2283/\";\n };\n \"immich...net\" = {\n locations.\"/\".proxyPass = \"http://127.0.0.1:2283/\";\n };\n };\n};\n```\n\n**ACME**\n```\nsecurity.acme = {\n acceptTerms = true; \n defaults.email = \"my@mail.com\";\n certs.\".com\" = { \n domain = \"*..com\";\n group = \"nginx\";\n dnsProvider = \"cloudflare\";\n dnsPropagationCheck = true;\n credentialsFile = config.sops.secrets.cloudflare.path;\n }; \n};\n\n```\n:::\n\n---\nMy situation now is the following:\n- I can reach eg. Immich by going to http://..net:2283 (https is not working here).\n- I can **not** reach Immich by the domains I have setup in my Nginx configuration. So \"immich...net\" & \"immich..com\" give a \"Server not found\" error. I tried both 127.0.0.1 and the tailscale IP of the server in the proxyPass section.\n\nDoes one of you network wizards know where the problem lies? Or how would I go about troubleshooting the issue?","creator_id":9983394,"community_id":225,"removed":false,"locked":false,"published":"2025-03-04T21:53:01.110276Z","deleted":false,"nsfw":false,"ap_id":"https://lemmy.world/post/26342457","local":false,"language_id":37,"featured_community":false,"featured_local":false},"creator":{"id":9983394,"name":"marci","banned":false,"published":"2024-03-04T15:22:01.895560Z","actor_id":"https://lemmy.world/u/marci","local":false,"deleted":false,"bot_account":false,"instance_id":8},"community":{"id":225,"name":"selfhosted","title":"Selfhosted","description":"A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.\n\nRules:\n1) Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.\n2) No spam posting.\n3) Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.\n\n4) Don't duplicate the full text of your blog or github here. Just post the link for folks to click.\n5) Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n6) No trolling.\n\n\nResources: \n* [selfh.st](https://selfh.st/) Newsletter and index of selfhosted software and apps\n* [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n* [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n* [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show/)\n\n> Any issues on the community? Report it using the report flag.\n\n> Questions? DM the mods!","removed":false,"published":"2023-06-05T11:23:43.291224Z","updated":"2024-10-23T06:42:07.331884Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.world/c/selfhosted","local":false,"icon":"https://lemmy.world/pictrs/image/8286e071-7449-4413-a084-1eb5242e2cf4.png","banner":"https://lemmy.world/pictrs/image/9111ecb9-344c-4836-bbda-a87c27f3bdb9.jpeg","hidden":false,"posting_restricted_to_mods":false,"instance_id":8,"visibility":"Public"},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":3464495,"comments":11,"score":28,"upvotes":31,"downvotes":3,"published":"2025-03-04T21:53:01.110276Z","newest_comment_time":"2025-03-05T01:07:28.344935Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"hidden":false,"creator_blocked":false,"unread_comments":11},{"post":{"id":2442813,"name":"[Guide] Uptime monitoring in Windows","body":"> Disclaimer: This is for folks who are running services on Windows machines and does not have more than one device. I am neither an expert at self hosting nor PowerShell. I curated most of this code by doing a lot of \"Google-ing\" and testing over the years. Feel free to correct any mistakes I have in the code.\n\n# Background\n\nTLDR: Windows user needs an uptime monitoring solution\n\nWhenever I searched for uptime monitoring apps, most of the ones that showed up were either hosted on Linux or containers and all I wanted was a a simple exe installation file for some app that will send me alerts when a service or the computer was down. Unfortunately, I couldn't find anything. If you know one, feel free to recommend them.\n\nTo get uptime monitoring on Windows, I had to turn to scripting along with a hosted solution (because you shouldn't host the monitoring service on the same device as where your apps are running in case the machine goes down). I searched and tested a lot of code to finally end up with the following.\n\nNow, I have services running on both Windows and Linux and I use Uptime Kuma and the following code for monitoring. But, for people who are still on Windows and haven't made the jump to Linux/containers, you could use these scripts to monitor your services with the same device.\n\n# Solution\n\nTLDR: A PowerShell script would check the services/processes/URLs/ports and ping the hosted solution to send out notification.\n\nWhat I came up with is a PowerShell script that would run every 5 minutes (your preference) using Windows Task Scheduler to check if a Service/Process/URL/Port is up or down and send a ping to Healthchecks.io accordingly.\n\n## Prereqs\n\n1. Sign up on healthchecks.io and create a project\n1. Add integration to your favorite notification method (There are several options; I use Telegram)\n1. Add a Check on Healthchecks.io for each of the service you want to monitor. Ex: `Radarr, Bazarr, Jellyfin`\n\n When creating the check, make sure to remember the Slug you used (custom or autogenerated) for that service.\n1. Install latest version of [PowerShell 7](https://learn.microsoft.com/en-us/powershell/scripting/install/installing-powershell-on-windows?view=powershell-7.4)\n1. Create a PowerShell file in your desired location. Ex: `healthcheck.ps1` in the C drive\n1. Go to project settings on Healthchecks.io, get the `Ping key`, and assign it to a variable in the script\n\n Ex: `$HC= \"https://hc-ping.com//\"`\n\n The Ping key is used for pinging Healthchecks.io based on the status of the service.\n\n## Code\n\n1. There are two ways you can write the code: Either check one service or loop through a list.\n\n### Port\n\n1. To monitor a list of ports, we need to add them to the `Services.csv` file.\n > The names of the services need to match the Slug you created earlier because, Healthchecks.io uses that to figure out which Check to ping.\n\nEx:\n\n```\n\"Service\", \"Port\"\n\"qbittorrent\", \"5656\"\n\"radarr\", \"7878\"\n\"sonarr\", \"8989\"\n\"prowlarr\", \"9696\"\n```\n\n1. Then copy the following code to `healthcheck.ps1`:\n\n```\nImport-CSV C:\\Services.csv | foreach{\n Write-Output \"\"\n Write-Output $($_.Service)\n Write-Output \"------------------------\"\n $RESPONSE = Test-Connection localhost -TcpPort $($_.Port)\n if ($RESPONSE -eq \"True\") {\n Write-Host \"$($_.Service) is running\"\n curl $HC$($_.Service)\n } else {\n Write-Host \"$($_.Service) is not running\"\n curl $HC$($_.Service)/fail\n }\n}\n```\n\n> The script looks through the Services.csv file (Line 1) and check if each of those ports are listening (`$($_.Port)` on Line 5) and pings Healthchecks.io (Line 8 or 11) based on their status with their appropriate name (`$($_.Service)`). If the port is not listening, it will ping the URL with a trailing `/fail` (Line 11) to indicate it is down.\n\n### Service\n\n1. The following code is to check if a service is running.\n \n You can add more services on line 1 in comma separated values. Ex: `@(\"bazarr\",\"flaresolverr\")`\n \n This also needs to match the Slug.\n\n```\n$SERVICES = @(\"bazarr\")\nforeach($SERVICE in $SERVICES) {\n Write-Output \"\"\n Write-Output $SERVICE\n Write-Output \"------------------------\"\n $RESPONSE = Get-Service $SERVICE | Select-Object Status\n if ($RESPONSE.Status -eq \"Running\") {\n Write-Host \"$SERVICE is running\"\n curl $HC$SERVICE\n } else {\n Write-Host \"$SERVICE is not running\"\n curl $HC$SERVICE/fail\n }\n}\n```\n\n> The script looks through the list of services (Line 1) and check if each of those are running (Line 6) and pings Healthchecks.io based on their status.\n\n### Process\n\n1. The following code is to check if a process is running.\n \n Line 1 needs to match their Slug\n\n```\n$PROCESSES = @(\"tautulli\",\"jellyfin\")\nforeach($PROCESS in $PROCESSES) {\n\tWrite-Output \"\"\n\tWrite-Output $PROCESS\n\tWrite-Output \"------------------------\"\t\n\t$RESPONSE = Get-Process -Name $PROCESS -ErrorAction SilentlyContinue\n\tif ($RESPONSE -eq $null) {\n\t\t# Write-Host \"$PROCESS is not running\"\n\t\tcurl $HC$PROCESS/fail\n\t} else {\n\t\t# Write-Host \"$PROCESS is running\"\n\t\tcurl $HC$PROCESS\n\t}\n}\n```\n\n### URL\n\n1. This can be used to check if a URL is responding.\n \n Line 1 needs to match the Slug\n\n```\n$WEBSVC = \"google\"\n$GOOGLE = \"https://google.com\"\nWrite-Output \"\"\nWrite-Output $WEBSVC\nWrite-Output \"------------------------\"\n$RESPONSE = Invoke-WebRequest -URI $GOOGLE -SkipCertificateCheck\nif ($RESPONSE.StatusCode -eq 200) {\n # Write-Host \"$WEBSVC is running\"\n curl $HC$WEBSVC\n} else {\n # Write-Host \"$WEBSVC is not running\"\n curl $HC$WEBSVC/fail\n}\n```\n\n### Ping other machines\n\n1. If you have more than one machine and you want to check their status with the Windows host, you can check it by pinging them\n1. Here also I use a CSV file to list the machines.\n Make sure the server names matches their Slug\n\n Ex:\n\n ```\n \"Server\", \"IP\"\n \"server2\", \"192.168.0.202\"\n \"server3\", \"192.168.0.203\"\n ```\n\n```\nImport-CSV C:\\Servers.csv | foreach{\n Write-Output \"\"\n Write-Output $($_.Server)\n Write-Output \"------------------------\"\n $RESPONSE = Test-Connection $($_.IP) -Count 1 | Select-Object Status\n if ($RESPONSE.Status -eq \"Success\") {\n # Write-Host \"$($_.Server) is running\"\n curl $HC$($_.Server)\n } else {\n # Write-Host \"$($_.Server) is not running\"\n curl $HC$($_.Server)/fail\n }\n}\n```\n\n## Task Scheduler\n\nFor the script to execute in intervals, you need to create a scheduled task.\n\n1. Open Task Scheduler, navigate to the Library, and click on `Create Task` on the right\n1. Give it a name. Ex: `Healthcheck`\n 1. Choose `Run whether user is logged on or not`\n 1. Choose `Hidden` if needed\n1. On Triggers tab, click on New\n 1. Choose `On a schedule`\n 1. Choose `One time` and select an older date than your current date\n 1. Select `Repeat task every` and choose the desired time and duration. Ex: 5 minutes indefinitely\n 1. Select `Enabled`\n1. On Actions tab, click on New\n 1. Choose `Start a program`\n 1. Add the path to PowerShell 7 in Program: `\"C:\\Program Files\\PowerShell\\7\\pwsh.exe\"`\n 1. Point to the script in arguments: `-windowstyle hidden -NoProfile -NoLogo -NonInteractive -ExecutionPolicy Bypass -File C:\\healthcheck.ps1`\n1. Rest of the tabs, you can choose whatever is appropriate for you.\n1. Hit Ok/Apply and exit\n\n## Notification Method\n\nDepending on the integration you chose, set it up using the Healthchecks [docs](https://healthchecks.io/docs/configuring_notifications/).\n\nI am using Telegram with the following configuration:\n\n Name: Telegram\n Execute on \"down\" events: POST https://api.telegram.org/bot/sendMessage\n Request Body:\n ```\n {\n \"chat_id\": \"\",\n \"text\": \"🔴 $NAME is DOWN\",\n \"parse_mode\": \"HTML\",\n \"no_webpage\": true\n }\n ```\n Request Headers: Content-Type: application/json\n Execute on \"up\" events: POST https://api.telegram.org/bot/sendMessage\n Request Body:\n ```\n {\n\t\"chat_id\": \"\",\n\t\"text\": \"🟢 $NAME is UP\",\n\t\"parse_mode\": \"HTML\",\n\t\"no_webpage\": true\n }\n ```\n Request Headers: Content-Type: application/json\n\n# Closing\n\nYou can monitor up to 20 services for free. You can also selfhost [Healthchecks instance](https://healthchecks.io/docs/self_hosted/) (wouldn't recommend if you only have one machine).\n\nI've been wanting to give something back to the community for a while. I hope this is useful to some of you. Please let me know if you have any questions or suggestions. Thank you for reading!","creator_id":67733,"community_id":225,"removed":false,"locked":false,"published":"2024-09-03T03:10:58.324945Z","deleted":false,"nsfw":false,"ap_id":"https://lemmy.ml/post/19874938","local":false,"language_id":37,"featured_community":false,"featured_local":false},"creator":{"id":67733,"name":"tarius","display_name":"tarius","banned":false,"published":"2023-06-01T22:07:40.965714Z","actor_id":"https://lemmy.ml/u/tarius","local":false,"deleted":false,"bot_account":false,"instance_id":2},"community":{"id":225,"name":"selfhosted","title":"Selfhosted","description":"A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.\n\nRules:\n1) Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.\n2) No spam posting.\n3) Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.\n\n4) Don't duplicate the full text of your blog or github here. Just post the link for folks to click.\n5) Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n6) No trolling.\n\n\nResources: \n* [selfh.st](https://selfh.st/) Newsletter and index of selfhosted software and apps\n* [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n* [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n* [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show/)\n\n> Any issues on the community? Report it using the report flag.\n\n> Questions? DM the mods!","removed":false,"published":"2023-06-05T11:23:43.291224Z","updated":"2024-10-23T06:42:07.331884Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.world/c/selfhosted","local":false,"icon":"https://lemmy.world/pictrs/image/8286e071-7449-4413-a084-1eb5242e2cf4.png","banner":"https://lemmy.world/pictrs/image/9111ecb9-344c-4836-bbda-a87c27f3bdb9.jpeg","hidden":false,"posting_restricted_to_mods":false,"instance_id":8,"visibility":"Public"},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":2442813,"comments":4,"score":26,"upvotes":29,"downvotes":3,"published":"2024-09-03T03:10:58.324945Z","newest_comment_time":"2024-09-04T05:03:10.030184Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"hidden":false,"creator_blocked":false,"unread_comments":4},{"post":{"id":352816,"name":"Problem connecting to host from Docker container","body":"I followed this [Guide](https://blog.gurucomputing.com.au/Smart%20VPNS%20with%20Headscale/Introduction/) to setup headscale with caddy. And tried to add Keycloak with this [guide](https://blog.gurucomputing.com.au/Authentication%20with%20Keycloak/Authentication%20with%20Keycloak/) from the same guy.\n\nSadly my docker containers do not seem to be able to connect to the keycloak server. What happens is that if i try to download the openid configuration from the host (via wget) or from my local PC it just works.\nBut the headscale server gets a timeout when trying to connect to the endpoint. When i use the internal docker name to connect to the keycloak container the connection works fine but then i get an error because its not the external url.\n\nI experimented a bit and managed to reproduce the issue with a different container (running an ubuntu container and also getting a timeout when trying to download the config from keycloak). If i run the container with the host network i works just fine. \n\nDoes anyone know how to fix this?\n\nPS: i also tried the example from the guide with gitea an its also the same problem\n\n\nUpdate: I tried most suggestions and for some reason it just didn't work. My solution that is working now is that I bind the container ports to localhost only (by using p.e.: ports: -\"127.0.0.1:4567:8080\") and using the caddy server in host network mode. Now all containers can connect like expected and are working flawlessly.\nThanks for all your suggestions :)","creator_id":112210,"community_id":225,"removed":false,"locked":false,"published":"2023-09-13T14:45:25.965504Z","updated":"2023-09-29T10:39:08.941281Z","deleted":false,"nsfw":false,"ap_id":"https://sh.itjust.works/post/5020724","local":false,"language_id":37,"featured_community":false,"featured_local":false},"creator":{"id":112210,"name":"Jerry1098","banned":false,"published":"2023-06-13T19:17:11.213121Z","actor_id":"https://sh.itjust.works/u/Jerry1098","local":false,"deleted":false,"bot_account":false,"instance_id":24},"community":{"id":225,"name":"selfhosted","title":"Selfhosted","description":"A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.\n\nRules:\n1) Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.\n2) No spam posting.\n3) Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.\n\n4) Don't duplicate the full text of your blog or github here. Just post the link for folks to click.\n5) Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n6) No trolling.\n\n\nResources: \n* [selfh.st](https://selfh.st/) Newsletter and index of selfhosted software and apps\n* [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n* [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n* [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show/)\n\n> Any issues on the community? Report it using the report flag.\n\n> Questions? DM the mods!","removed":false,"published":"2023-06-05T11:23:43.291224Z","updated":"2024-10-23T06:42:07.331884Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.world/c/selfhosted","local":false,"icon":"https://lemmy.world/pictrs/image/8286e071-7449-4413-a084-1eb5242e2cf4.png","banner":"https://lemmy.world/pictrs/image/9111ecb9-344c-4836-bbda-a87c27f3bdb9.jpeg","hidden":false,"posting_restricted_to_mods":false,"instance_id":8,"visibility":"Public"},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":352816,"comments":9,"score":17,"upvotes":20,"downvotes":3,"published":"2023-09-13T14:45:25.965504Z","newest_comment_time":"2023-09-15T12:43:27.359384Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"hidden":false,"creator_blocked":false,"unread_comments":9},{"post":{"id":50756,"name":"Guide to Self-Hosting Lemmy with Individual Containers & Existing NGINX Instance.","body":"# Problem Statement\nThe official docker-compose and Docker documentation for self-hosting Lemmy is not suitable for my use-case. It:\n- Spins up its own single-use containers for `pictrs`, `postgres` and `nginx`.\n- Makes a bunch of assumptions about the deployment network topology that doesn't always work in a more managed setting.\n\nI'm not a pro nor an expert in sysadmin, Docker or web technologies, so it took many hours of deciphering the (very) sparse documentation to figure out how to make Lemmy fit my deployment scenario. Here, I'd like to just share my own `docker-compose`, `lemmy.hjson` and my NGINX reverse proxy configuration, and hope it helps someone out there.\n\n# How I Host My Services\n- Each service is single-instance, multiple-use. For example, my `postgres` container serves not just Lemmy, but other containers that require a DB service as well.\n- I have an existing reverse proxy with nginx, already provided by the awesome [swag](https://docs.linuxserver.io/images/docker-swag) image.\n- Each container gets an assigned internal LAN hostname, assigned internal LAN IP, and specified MAC address for house-keeping and manageability purposes.\n- I have full control and authorship of all my services, and only services are exposed to the public internet through either CloudFlare or `nginx`. Hence, storing key values in my docker-compose is not a major security risk. If my LAN is breached, then I have bigger things to worry about besides a few passkeys being compromised. If you are operating in a multi-user LAN environment where security is paramount, then please use [Docker Secrets](https://docs.docker.com/engine/swarm/secrets/) instead of storing your secrets in plaintext.\n\n# Some Parameters You'll Need\nMy template values are assumed as such. For API keys and passwords, use your own generator or some UUID generation service. If you're using Linux and have the `uuidgen` package, just generate keys on your terminal with\n```\nuuidgen -r | sed 's/-//g';\n```\nThe second command just removes the `-` character from stdout. **All provided values below are dummy values! Please generate your own whenever applicable.**\n\nTo generate MAC addresses, use any MAC address generator tool, or an online [service](https://codebeautify.org/generate-random-mac).\n\nNeedless to say, change the following parameters to suit your own deployment.\n\n## General Networking\n- Your internal DNS IP: `192.168.0.1`\n- Your LAN subnet mask: `192.168.0.0/16`\n- Your Docker container subnet mask: `192.168.1.0/24`\n- Your Docker host IP: `192.168.1.1`\n- Your [localhost](https://en.wikipedia.org/wiki/.local) domain name: `.local`\n- Your Docker bridge name (this must be an existing bridge): `custom_docker_bridge`\n\n## Your SMTP settings\nHere, I am assuming you have a gmail account that you want to use as your mailbox to send admin emails. Follow this [guide](https://support.google.com/accounts/answer/185833?hl=en) to generate an app password for Google to authenticate you.\n- smtp_server: `smtp.gmail.com:587`\n- smtp_login: `your@gmail.com`\n- smtp_password: `abcdefghijklmnop`\n- smtp_from_address: `no-reply@yourdomainname.yourtld`\n\n## Your Lemmy Site Name & Admin Account\n- admin_username: `admin`\n- admin_password: `c97f337aaa374d8a9c47fce0e197fd29`\n- site_name: `lemmy.yourowndomainname.yourtld`\n\n## For `pictrs`\n- PICTRS__SERVER__API_KEY: `e7160a506a9241abb1e623d4180d6908`\n- Container IP: `192.168.1.2`\n- Container MAC: `30:b1:fb:dd:af:ee`\n- Container Hostname: `PICTRS.local`\n- Persistent Volume: `/some/host/directory/pictrs`\n\n## For `postgres`\n- POSTGRES_USER: `postgres_admin`\n- POSTGRES_PASSWORD: `eefb3bce7ea54b8497307d0e0234b6c8`\n- POSTGRES_DB: `postgres_db`\n- Container IP: `192.168.1.3`\n- Container MAC: `a9:95:c4:a3:e5:4f`\n- Container Hostname: `POSTGRES.local`\n- Persistent Volume: `/some/host/directory/postgres`\n\n## For `lemmy`\n- Container IP: `192.168.1.4`\n- Container MAC: `77:26:eb:bf:c9:f7`\n- Container Hostname: `LEMMY.local`\n- Persistent Volume (for your `lemmy.hsjon`): `/some/host/directory/lemmy/lemmy.hjson`\n- DB name: `lemmy_db`\n- DB user: `lemmy_admin`\n- DB password: `ebd3526474cf4cc6af752971f268d0f3`\n\n## For `lemmy-ui`\n- Container IP: `192.168.1.5`\n- Container MAC: `bd:77:70:e6:ca:d8`\n- Container Hostname: `LEMMYUI.local`\n- LEMMY_UI_LEMMY_EXTERNAL_HOST (this is your public-facing domain name that points to your Lemmy UI): `lemmy.yourowndomainname.yourtld`\n- LEMMY_UI_LEMMY_INTERNAL_HOST (match with above): `LEMMY.local:8536`\n\n# Templates for `docker-compose`\n\n## For `pictrs`\n```\nversion: \"3.7\"\nservices:\n pictrs:\n container_name: pictrs\n image: asonix/pictrs:0.4\n environment:\n - PICTRS__SERVER__API_KEY=e7160a506a9241abb1e623d4180d6908\n ports:\n - 8080:8080\n restart: unless-stopped\n hostname: PICTRS.local\n dns: 192.168.0.1\n mac_address: 30:b1:fb:dd:af:ee\n networks:\n custom_docker_bridge:\n ipv4_address: 192.168.1.2\n volumes:\n - /some/host/directory/pictrs:/mnt\nnetworks:\n custom_docker_bridge:\n external: true\n name: custom_docker_bridge\n```\n\n## For `postgres`\nThis assumes you don't already have a postgres instance.\n```\nversion: \"3.7\"\nservices:\n postgres:\n container_name: postgres\n image: postgres:latest\n # This is the default postgres db that is created when you spin up a new postgres container. This will not be used by Lemmy, but the credentials here are important in case you ever lose your password to `lemmy_admin`.\n environment:\n - POSTGRES_USER=postgres_admin\n - POSTGRES_PASSWORD=eefb3bce7ea54b8497307d0e0234b6c8\n - POSTGRES_DB=postgres_db\n ports:\n - 5432:5432\n restart: unless-stopped\n hostname: POSTGRES.local\n dns: 192.168.0.1\n mac_address: a9:95:c4:a3:e5:4f\n networks:\n custom_docker_bridge:\n ipv4_address: 192.168.1.3\n command:\n [\n \"postgres\",\n \"-c\",\n \"session_preload_libraries=auto_explain\",\n \"-c\",\n \"auto_explain.log_min_duration=5ms\",\n \"-c\",\n \"auto_explain.log_analyze=true\",\n \"-c\",\n \"track_activity_query_size=1048576\",\n ]\n volumes:\n - /some/host/directory/postgres:/var/lib/postgresql/data\nnetworks:\n custom_docker_bridge:\n external: true\n name: custom_docker_bridge\n```\n\n## For `lemmy` Backend\n```\nversion: \"3.7\"\nservices:\n lemmy:\n container_name: lemmy\n image: dessalines/lemmy:latest\n hostname: LEMMY.local\n dns: 192.168.0.1\n mac_address: 77:26:eb:bf:c9:f7\n ports:\n - 8536:8536\n networks:\n custom_docker_bridge:\n ipv4_address: 192.168.1.4\n restart: unless-stopped\n volumes:\n - /some/host/directory/lemmy/lemmy.hjson:/config/config.hjson:Z\nnetworks:\n custom_docker_bridge:\n external: true\n name: custom_docker_bridge\n```\n\n## For `lemmy-ui` Frontend\n```\nversion: \"3.7\"\nservices:\n lemmy-ui:\n container_name: lemmy-ui\n image: dessalines/lemmy-ui:latest\n environment:\n - LEMMY_UI_LEMMY_INTERNAL_HOST=LEMMY.local:8536\n - LEMMY_UI_LEMMY_EXTERNAL_HOST=lemmy.yourowndomainname.yourtld\n - LEMMY_UI_HTTPS=false\n - LEMMY_UI_DEBUG=true\n hostname: LEMMYUI.local\n dns: 192.168.0.1\n mac_address: bd:77:70:e6:ca:d8\n networks:\n custom_docker_bridge:\n ipv4_address: 192.168.1.5\n restart: unless-stopped\nnetworks:\n custom_docker_bridge:\n external: true\n name: custom_docker_bridge\n```\n\n# Template for `lemmy.hjson`\n```\n{\n database: {\n uri: \"postgres://lemmy_admin:ebd3526474cf4cc6af752971f268d0f3@POSTGRES.local:5432/lemmy_db\"\n }\n pictrs: {\n url: \"http://PICTRS.local:8080/\"\n api_key: \"e7160a506a9241abb1e623d4180d6908\"\n }\n email: {\n smtp_server: \"smtp.gmail.com:587\"\n smtp_login: \"your@gmail.com\"\n # Password to login to the smtp server\n smtp_password: \"abcdefghijklmnop\"\n smtp_from_address: \"no-reply@yourdomainname.yourtld\"\n tls_type: \"tls\"\n }\n # These will be used for the first-ever time the container is created. This is the admin account used to login to https://lemmy.yourowndomainname.yourtld and manage your Lemmy instance.\n setup: {\n # Username for the admin user\n admin_username: \"admin\"\n # Password for the admin user. It must be at least 10 characters.\n admin_password: \"c97f337aaa374d8a9c47fce0e197fd29\"\n # Name of the site (can be changed later)\n site_name: \"lemmy.yourowndomainname.yourtld\"\n # Email for the admin user (optional, can be omitted and set later through the website)\n admin_email: \"admin@yourowndomainname.yourtld\"\n }\n hostname: \"lemmy.yourowndomainname.yourtld\"\n # Address where lemmy should listen for incoming requests\n bind: \"0.0.0.0\"\n # Port where lemmy should listen for incoming requests\n port: 8536\n # Whether the site is available over TLS. Needs to be true for federation to work.\n tls_enabled: true\n}\n```\n\n# Template for `nginx`\nThis assumes your NGINX's `http` directive is pre-configured and exists elsewhere.\n```\nserver {\n listen 443 ssl;\n listen [::]:443 ssl;\n\n server_name lemmy.*;\n\n # Assuming your ssl settings are elsewhere\n include /config/nginx/ssl.conf;\n\n set $lemmy_frontend_hostname lemmyui.local;\n set $lemmy_frontend_port 1234;\n\n set $lemmy_backend_hostname lemmy.local;\n set $lemmy_backend_port 8536;\n\n set $upstream_proto http;\n\n location ~ ^/(api|pictrs|feeds|nodeinfo)/ {\n set $prox_pass $upstream_proto://$lemmy_backend_hostname:$lemmy_backend_port;\n proxy_pass $prox_pass;\n }\n\n location / {\n\n # Default to lemmyui.local\n set $prox_pass $upstream_proto://$lemmy_frontend_hostname:$lemmy_frontend_port;\n\n # Specific routes to lemmy.local\n if ($http_accept ~ \"^application/.*$\") {\n set $prox_pass $upstream_proto://$lemmy_backend_hostname:$lemmy_backend_port;\n }\n if ($request_method = POST) {\n set $prox_pass $upstream_proto://$lemmy_backend_hostname:$lemmy_backend_port;\n }\n proxy_pass $prox_pass;\n proxy_http_version 1.1;\n proxy_set_header Upgrade $http_upgrade;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header Host $host;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n }\n}\n```\n\n# Conclusion\nThat's it! If you're looking for more in-depth tutorials for how each of these work, it is unfortunately out of scope for this post. Hope this helps someone in their journey to self-host Lemmy. Cheers.\n\nEdit #1 - (2023-07-29) `nginx.conf` needed some additional parameters for `proxy_http_version` and ` proxy_set_header`, otherwise Lemmy's `root_span_builder` will start to throw `Incoming activity has invalid signature` errors. I believe the important line is `proxy_set_header Host $host;`","creator_id":270134,"community_id":225,"removed":false,"locked":false,"published":"2023-07-18T08:17:24.128Z","updated":"2023-07-29T03:09:02.080790Z","deleted":false,"nsfw":false,"ap_id":"https://lemmy.wildfyre.dev/post/63","local":false,"language_id":37,"featured_community":false,"featured_local":false},"creator":{"id":270134,"name":"milkjug","banned":false,"published":"2023-07-16T16:31:55.203959Z","actor_id":"https://lemmy.wildfyre.dev/u/milkjug","local":false,"deleted":false,"bot_account":false,"instance_id":1473},"community":{"id":225,"name":"selfhosted","title":"Selfhosted","description":"A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.\n\nRules:\n1) Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.\n2) No spam posting.\n3) Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.\n\n4) Don't duplicate the full text of your blog or github here. Just post the link for folks to click.\n5) Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n6) No trolling.\n\n\nResources: \n* [selfh.st](https://selfh.st/) Newsletter and index of selfhosted software and apps\n* [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n* [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n* [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show/)\n\n> Any issues on the community? Report it using the report flag.\n\n> Questions? DM the mods!","removed":false,"published":"2023-06-05T11:23:43.291224Z","updated":"2024-10-23T06:42:07.331884Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.world/c/selfhosted","local":false,"icon":"https://lemmy.world/pictrs/image/8286e071-7449-4413-a084-1eb5242e2cf4.png","banner":"https://lemmy.world/pictrs/image/9111ecb9-344c-4836-bbda-a87c27f3bdb9.jpeg","hidden":false,"posting_restricted_to_mods":false,"instance_id":8,"visibility":"Public"},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"counts":{"post_id":50756,"comments":27,"score":111,"upvotes":116,"downvotes":5,"published":"2023-07-18T08:17:24.128Z","newest_comment_time":"2023-07-31T10:09:06.176284Z"},"subscribed":"NotSubscribed","saved":false,"read":false,"hidden":false,"creator_blocked":false,"unread_comments":27}],"communities":[],"users":[]}

Search