Selfhosted

Hi, I finally set up tailscale on my raspbery pi, in exit node mode so I have access to my whole network. I also set AdGuard an the very same pi with dhcp. I finally bought home assistant voice device, didn't arrive yet, but cant wait to experiment with it.

I still have to setup Authelia for sso, I want to setup a device on my network as a (proton) vpn gateway (zero knowledge right now) and then I want to start learning about pfsense to properly segment my network (into subnets) and have more control.

i just moved almost all of my containers (except for my omada controller) to my VM running fedora and podman off my VM running ubuntu and docker. why? i was in a product sales call (being sold to) and didn't have any actual work tasks to do during that time. Now there's an additional VM on the network.

Trying to decide if I'll move omada as well or just shift everything back. I shouldn't have fiddled with the stack while I was bored. A video game or something would've been a better idea.

I recently setup a full matrix server. What I am currently worried about is my server. I am currently shopping for a used dual Xeon server. I am hosting close to 40 docker containers on 2 1 liter PCs with very low specs. I would love to bring it all in house to a single server with a separate NAD which I do have currently holding 60 terabytes of storage space.

I have a question on top of my matrix setup. Has any one integrated VoIP? I am trying to bring all communication in house.

Went through and verified that a number of things were backing up and updating correctly. I feel a little less weight on my shoulders knowing things are working as they should.

Trying to get the right combo of iptables rules to shuttle traffic from vps to home lab server (as I think I'll need to do once my ISP upgrade puts me behind CGNAT for the first time...

Got it working sorta, but I didn't like seeing my vps private link address instead of the remote in logs.

I installed Jitsi Meet on my YUNOhost server and am very impressed. It works really well and needed basically no setting up after installing.

I finally bought a tiny PC to replace my aging APU border router/firewall (OpenBSD), so I'm trying to wrap my head around building a router currently inside the network that it will be protecting.

I have Debian installed as hypervisor, Incus, and sticking with OpenBSD for the firewall. pf makes too much sense to me too switch to firewalld. I'll also move the network-related containers off my main lab host once this is up and running.

Finally found what's causing my laptop's DNS servers to change automatically in the background. It was the systemd-resolved FallbackDNS setting. Disabled it in a config and now I can access all my custom DNS names.

I finally dealt with the AI scrapers hammering my Forgejo instance - https://jade.ellis.link/blog/2025/05/18/actually-stopping-forgejo-ai-scraping Hopefully next week I'll be able to get back to actually programming Continuwuity rather than fighting fires.

Weirdness: My Authentik instance had a PostgreSQL upgrade prerequisite in order to update it.

I'd followed instructions 3-4 times completely unsuccessfully and had to keep reverting to backup.

So, I gave up for a couple weeks and left it be in order to get over my frustration.

Yesterday, I followed the instructions again. As far as I can tell, I did nothing different than I'd tried previously and it worked first try and then I was also able to upgrade Authentik.

NOTE: The instructions aren't exactly difficult! So, I don't see how I'd have gotten it wrong!