Rebuilt my media server from scratch
https://redd.it/1xfvdtz
@r_SelfHosted

eMudhra Crisis: What self-hosters should check on their reverse proxies and containers

By now you've probably seen the news, eight intermediate CA private keys from eMudhra turned out to be trivial integers. One of them was literally the number 4. Chrome and Firefox pushed emergency revocations but if you run headless Linux servers, Docker containers, or reverse proxies, they don't get browser push updates.

Quick checks for your setup:

1. Update stale container trust stores

Old Docker containers built months ago still carry the CA store from the day they were built. Rebuild stale images or run:

sudo apt-get update && sudo apt-get install --only-upgrade ca-certificates

sudo update-ca-certificates --fresh

2. Add a DNS CAA record

Lock down your domain so rogue or compromised CAs can't legally issue certs for your hostname.

3. Enable OCSP stapling on your reverse proxy

Ensure your proxy validates revocations automatically. (If you run Caddy, you're already good, it handles OCSP stapling by default).

4. Turn on Certificate Transparency alerts

If your DNS is on Cloudflare, turn on "Certificate Transparency Monitoring" in the SSL tab. You'll get an instant email if ANY CA on earth signs a cert for your domain.

https://redd.it/1xfxf8v
@r_SelfHosted

NoteDiscovery 0.33.0, wikilink autocomplete and a few important fixes

Small update since latest version was released here: [https://www.reddit.com/r/selfhosted/comments/1x4rlyv/notediscovery\_v0320\_can\_now\_serve\_mcp\_itself\_over/](https://www.reddit.com/r/selfhosted/comments/1x4rlyv/notediscovery_v0320_can_now_serve_mcp_itself_over/) .

For those who don't know: **NoteDiscovery** is a self-hosted markdown notes app. Single user, files on disk. Wiki links, tags, search, themes, public share links, optional auth. Docker or plain Python. 100% free and open source.

This latest update is mostly a bunch of issues and PRs opened by some contributors which I'm grateful for, because they make the app even better for everyone else. I really appreciate it. 🙏🙏🙏

What's new:

* Typing **\[\[** suggests notes, and **!\[\[** suggests media. Arrow keys move through the list, Enter or Tab inserts the link, Esc closes it. Thanks to **smolvik1** ([https://github.com/gamosoft/NoteDiscovery/issues/312](https://github.com/gamosoft/NoteDiscovery/issues/312))
* Autosave no longer silently overwrites a note that changed on disk (another tab, a sync tool, an AI agent). It asks whether to reload or overwrite. Thanks to **Leylines-Prism** ([https://github.com/gamosoft/NoteDiscovery/issues/323](https://github.com/gamosoft/NoteDiscovery/issues/323))
* Renaming or moving a shared note, or a folder that contains one, keeps the share link. Thanks to **talhayme** ([https://github.com/gamosoft/NoteDiscovery/issues/318](https://github.com/gamosoft/NoteDiscovery/issues/318))
* Export as HTML works when the title has non-Latin text, emoji, or a curly apostrophe. Thanks to **talhayme** ([https://github.com/gamosoft/NoteDiscovery/issues/319](https://github.com/gamosoft/NoteDiscovery/issues/319))
* Creating a note no longer wipes another one. `#` is rejected in filenames, and `b` no longer overwrites `B`. Heading links (`[[Note#heading]]`) still work. Thanks to **talhayme** ([https://github.com/gamosoft/NoteDiscovery/issues/317](https://github.com/gamosoft/NoteDiscovery/issues/317))

Thank you so much!
Kind regards.

Website: [https://www.notediscovery.com](https://www.notediscovery.com/)

GitHub: [https://github.com/gamosoft/NoteDiscovery](https://github.com/gamosoft/NoteDiscovery)

Demo: [https://gamosoft-notediscovery-demo.hf.space](https://gamosoft-notediscovery-demo.hf.space/)

https://redd.it/1xfx38c
@r_SelfHosted

Beginner question on storage pools

Please forgive what is likely an extremely basic question. If this isn't the right place to post a question like this, please let me know and I'll delete it.

I am extremely new to selfhosting/homelabbing, and I am currently in the process of setting up my first media server. A have a small, cheap workstation pc that I'm going to put ZimaOS on and 4 4tb hard drives in a 5 bay usb enclosure that I am going to set up in a raid configuration.

My question is, if I set up the drives through Zima, is it possible to move that entire storage pool and access it through a different server down the road? Because I am so new to this and I have some data that I'd like to store fairly quickly, I wanted to start with something like ZimaOS to get the whole system up and running. I'd like to move away from zima somewhere down the road and get into something more advanced, so I don't want to put myself in a situation where getting my drives up and running on a new system is going to lose the data stored on them.

Has anyone gone through a route like this? Or have any insight or potential further reading to share?

https://redd.it/1xfxai1
@r_SelfHosted

In the rabbit hole I go
https://redd.it/1xg18p5
@r_SelfHosted

Immich: Clarification

Hi,

I have a home server running various services. I’ll be starting to handle sensitive data soon. I have 7 GB of personal documents, and I was thinking of using Nextcloud. Then I’ll move on to my photos.

I use OMV with Radi1. My concern is that, as far as the documents go, I’ll make an encrypted copy in the cloud as well, but I’d like to figure out how to handle the photos.

My photos take up 40 GB… they can even reach 100 GB, and I clean them out every 2–4 years. I’d also like to store my wife’s and daughter’s photos.
But now here’s the problem: in addition to managing them in RAID 1, I’d also need to have a backup of the photos somewhere else. What do you recommend? A Raspberry Pi? Or the cloud? But if I have them in the cloud, what’s the point of using Immich?

Do you guys back up your data? Thanks

https://redd.it/1xg07ud
@r_SelfHosted

Finally jumped on the Tailscale bandwagon, and wow… it just works.

Hey everyone,

I’ve been managing my homelab for a while now (running Docker via Portainer on a NAS, a few monitoring tools, dashboards, etc.), and I had been putting off revamping my remote access setup for way too long.

Between dealing with port forwarding headaches, dynamic DNS, and worrying about exposing entry points to the public internet, I finally decided to set up Tailscale.

Honestly? It felt almost too easy.

Installed in minutes.
Instant secure mesh between my NAS, phones, and laptops.
Zero ports opened on my router.
MagicDNS makes accessing internal services effortless.

I know Tailscale gets praised constantly on this sub, but count me in as another convert. If you're on the fence or procrastinating on remote access like I was: just do it.

Next step: looking into Headscale down the road to keep it 100% self-hosted, but for now, the out-of-the-box experience is incredible.

What was your biggest "why didn't I do this sooner" tool in your setup?

https://redd.it/1xftfhm
@r_SelfHosted

GhettoSMTP shutting down--alternatives?

I've been a ghettoSMTP user for a long time now, to get around the ever-present port 25 block. I use SMTP2GO for outbound with no issues, but I need a new inbound solution. What's everybody using?

https://redd.it/1xg6b1w
@r_SelfHosted

Waraq 0.1.0: scan paper with your phone, get searchable PDFs, keep everything on your own server

https://redd.it/1xg8g06
@r_SelfHosted

So tired of these AI crawlers
https://redd.it/1xgae5q
@r_SelfHosted

Docker image version tracker?

Is there a self-hostable tool that will track new versions of docker images and just list them? I don't want it to download images or update containers, just a page where I can go and see the latest versions available for each image. I prefer to update the containers myself.

Would be great ofc if it had filtering and if it could support different image repos (Docker Hub, GitHub, LinuxServer.io etc.)

https://redd.it/1xga8mf
@r_SelfHosted

What should I use Flux, ArgoCD or ....
https://redd.it/1xgc4mi
@r_SelfHosted