this post was submitted on 11 Sep 2026
3 points (71.4% liked)

Self Hosted - Self-hosting your services.

20876 readers
33 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules

Important

Cross-posting

If you see a rule-breaker please DM the mods!

founded 5 years ago
MODERATORS
 

I built InSpectre (https://inspectre.cc/), an open-source, self-hosted platform designed to discover, track, fingerprint, and security-scan every device on a local network without relying on third-party cloud services.

As a homelab administrator and sysadmin, I wanted a single dashboard to keep track of active LAN devices, catch vulnerabilities before they become problems, track household presence, and manage container infrastructure without sending telemetry outside my local network.

Key features:

Device Discovery and Fingerprinting: Uses active ARP sweeps combined with a passive ARP/DHCP sniffer to spot new devices immediately. It auto-classifies devices using OUI, DHCP parameters, and port patterns.

Security and Vulnerability Scanning: Integrates Nuclei and nmap (-sV) for scheduled CVE scanning per device with a severity-grouped dashboard.

Traffic Control and Blocking: Allows you to pause network access or set recurring block schedules per device via ARP MITM.

Presence Tracking: Groups multiple devices (phone, laptop, smartwatch) under individual people to provide a unified Home/Away status and per-person schedule controls.

Docker and Proxmox Monitoring: Streams logs, scans images with Trivy for CVEs, and manages container updates with automated rollbacks.

Integrations: Native Home Assistant MQTT auto-discovery, 16 notification channels (ntfy, Gotify, Telegram, Pushover, Discord, etc.), and custom JSON/YAML plugins.

Architecture: The app runs as four lightweight Docker containers (frontend, backend, probe, and Postgres). By default, zero bytes leave your LAN unless you explicitly configure an external notification integration. It is dual-licensed under AGPL-3.0 and Commercial.

Project repository: https://github.com/thefunkygibbon/InSpectre

I would love to hear your feedback on the architecture, features, or performance. What tools do you currently use for LAN visibility, and what features would make this more useful in your setup?

top 1 comments
sorted by: hot top controversial new old
[–] squeeb@quokk.au 1 points 1 day ago* (last edited 1 day ago)

So the docker container image-watcher and update-coordinator seems quite incongruous with the rest of the tool. It looks like a "network visibility tool" with the container manager just tacked on as scope creep.

I presume if the container is actioning the updates for you, it also requires docker socket privileges? I imagine that will give a number of people pause about installing it on their homelabs, as "cool looking vibe-coded personal project with docker socket privileges" is a ticking time bomb from a cybersecurity perspective.

If it does require docker socket (and Can't imagine how the container management would work if it doesn't) you night have more success getting uptake in users for feedback on the main features if you remove the tacked on container manager and just keep that part for your own personal implementation of the application.