101010.pl

Lanie Molinar CarmeloTo people who use <a href="https://allovertheplace.ca/tags/HomeAssistant" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeAssistant</a>, do you need <a href="https://allovertheplace.ca/tags/NodeRed" class="mention hashtag" rel="nofollow noopener" target="_blank">#NodeRed</a> to get the most out of it? Found <a href="https://pimylifeup.com/home-assistant-docker-compose/" rel="nofollow noopener" target="_blank">this guide to setting up HomeAssistant in #Docker</a> that helped me get both installed, but Node-Red's interface is pretty much unusable with a <a href="https://allovertheplace.ca/tags/ScreenReader" class="mention hashtag" rel="nofollow noopener" target="_blank">#ScreenReader</a>, and I'm thinking of uninstalling it. <a href="https://allovertheplace.ca/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a> <a href="https://allovertheplace.ca/tags/SelfHosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosted</a> <a href="https://allovertheplace.ca/tags/RaspberryPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi</a> <a href="https://allovertheplace.ca/tags/RaspberryPi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi500</a> <a href="https://allovertheplace.ca/tags/RPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPi</a> <a href="https://allovertheplace.ca/tags/RPi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPi500</a> <a href="https://allovertheplace.ca/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://allovertheplace.ca/tags/Stormux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Stormux</a> <a href="https://allovertheplace.ca/tags/ArchLinuxARM" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArchLinuxARM</a> <a href="https://a.gup.pe/u/selfhosting" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhosting</a> <a href="https://lemmy.ml/c/selfhost" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhost</a> <a href="https://lemmy.world/c/selfhosted" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhosted</a>

Lanie Molinar CarmeloI'm curious to hear what others are <a href="https://allovertheplace.ca/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a>! Here's my current setup:Hardware & OS<ul><li>Hardware: <a href="https://allovertheplace.ca/tags/RaspberryPi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi500</a> (8 GB RAM, 512 GB SD card) <a href="https://allovertheplace.ca/tags/RPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPi</a> <a href="https://allovertheplace.ca/tags/RPi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPi500</a> <a href="https://allovertheplace.ca/tags/SingleBoardComputers" class="mention hashtag" rel="nofollow noopener" target="_blank">#SingleBoardComputers</a> <a href="https://allovertheplace.ca/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a></li><li>OS: <a href="https://allovertheplace.ca/tags/Stormux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Stormux</a>, an accessible <a href="https://allovertheplace.ca/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> distro based on <a href="https://allovertheplace.ca/tags/ArchLinuxARM" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArchLinuxARM</a> <a href="https://allovertheplace.ca/tags/LinuxAccessibility" class="mention hashtag" rel="nofollow noopener" target="_blank">#LinuxAccessibility</a> <a href="https://allovertheplace.ca/tags/AccessibleTech" class="mention hashtag" rel="nofollow noopener" target="_blank">#AccessibleTech</a></li></ul>Infrastructure & Networking<ul><li>Dashboard: <a href="https://allovertheplace.ca/tags/Glance" class="mention hashtag" rel="nofollow noopener" target="_blank">#Glance</a> (<a href="https://allovertheplace.ca/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#Docker</a>) <a href="https://allovertheplace.ca/tags/DockerApps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DockerApps</a></li><li>Reverse Proxy: <a href="https://allovertheplace.ca/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Caddy</a></li><li>DNS: <a href="https://allovertheplace.ca/tags/Cloudflare" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cloudflare</a></li><li>Domain Registrar: <a href="https://allovertheplace.ca/tags/Porkbun" class="mention hashtag" rel="nofollow noopener" target="_blank">#Porkbun</a></li><li>Networking & Remote Access: <a href="https://allovertheplace.ca/tags/Tailscale" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tailscale</a> (non-Docker), love its SSH agent and magic DNS features. <a href="https://allovertheplace.ca/tags/NetworkSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#NetworkSecurity</a></li></ul>Security & Monitoring<ul><li>Ad Blocking: <a href="https://allovertheplace.ca/tags/AdGuardHome" class="mention hashtag" rel="nofollow noopener" target="_blank">#AdGuardHome</a> (non-Docker). Previously used PiHole but find AdGuardHome slightly faster. <a href="https://allovertheplace.ca/tags/PrivacyTools" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivacyTools</a></li><li>Server Monitoring: <a href="https://allovertheplace.ca/tags/Beszel" class="mention hashtag" rel="nofollow noopener" target="_blank">#Beszel</a> (non-Docker). Tried Grafana/Prometheus/Alertmanager (accessible but overkill) and Netdata (poor screen reader accessibility). Beszel isn't perfect but best compromise so far. <a href="https://allovertheplace.ca/tags/ServerMonitoring" class="mention hashtag" rel="nofollow noopener" target="_blank">#ServerMonitoring</a></li><li>Server Overview: <a href="https://allovertheplace.ca/tags/Cockpit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cockpit</a> (non-Docker)</li><li>Security Tools: <a href="https://allovertheplace.ca/tags/Fail2ban" class="mention hashtag" rel="nofollow noopener" target="_blank">#Fail2ban</a>, <a href="https://allovertheplace.ca/tags/FirewallD" class="mention hashtag" rel="nofollow noopener" target="_blank">#FirewallD</a>, <a href="https://allovertheplace.ca/tags/ClamAV" class="mention hashtag" rel="nofollow noopener" target="_blank">#ClamAV</a>, and <a href="https://allovertheplace.ca/tags/Rkhunter" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rkhunter</a> (non-Docker). Tried CrowdSec but couldn't get it working on Stormux. <a href="https://allovertheplace.ca/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a></li><li>Service Uptime Monitoring: <a href="https://allovertheplace.ca/tags/UptimeKuma" class="mention hashtag" rel="nofollow noopener" target="_blank">#UptimeKuma</a> (Docker), accessible and easy to use. <a href="https://allovertheplace.ca/tags/MonitoringTools" class="mention hashtag" rel="nofollow noopener" target="_blank">#MonitoringTools</a></li></ul>Authentication & Identity Management<ul><li>Authelia (Docker): Just set this up for two-factor authentication and single sign-on. Seems to be working well so far! </li><li>LLDAP (Docker): Lightweight LDAP server for managing authentication. Also seems to be working pretty well! <a href="https://allovertheplace.ca/tags/AuthenticationTools" class="mention hashtag" rel="nofollow noopener" target="_blank">#AuthenticationTools</a> <a href="https://allovertheplace.ca/tags/IdentityManagement" class="mention hashtag" rel="nofollow noopener" target="_blank">#IdentityManagement</a></li></ul>Productivity & Personal Tools<ul><li>Docker Management: <a href="https://allovertheplace.ca/tags/Dockge" class="mention hashtag" rel="nofollow noopener" target="_blank">#Dockge</a> (Docker). More accessible than Portainer; main issue is built-in terminal isn't readable with screen readers. <a href="https://allovertheplace.ca/tags/DockerCompose" class="mention hashtag" rel="nofollow noopener" target="_blank">#DockerCompose</a></li><li>Docker Logs Viewer: <a href="https://allovertheplace.ca/tags/Dozzle" class="mention hashtag" rel="nofollow noopener" target="_blank">#Dozzle</a> (Docker), great web interface and easy searching.</li><li>Git Hosting: <a href="https://allovertheplace.ca/tags/Forgejo" class="mention hashtag" rel="nofollow noopener" target="_blank">#Forgejo</a> (non-Docker), my personal Git server. <a href="https://allovertheplace.ca/tags/GitServer" class="mention hashtag" rel="nofollow noopener" target="_blank">#GitServer</a></li><li>Backups: <a href="https://allovertheplace.ca/tags/IDrive" class="mention hashtag" rel="nofollow noopener" target="_blank">#IDrive</a> (non-Docker), backs up all my devices easily. <a href="https://allovertheplace.ca/tags/BackupSolutions" class="mention hashtag" rel="nofollow noopener" target="_blank">#BackupSolutions</a></li><li>Notes: <a href="https://allovertheplace.ca/tags/Joplin" class="mention hashtag" rel="nofollow noopener" target="_blank">#Joplin</a> server (Docker). Accessibility improving; love the VSCode extension. <a href="https://allovertheplace.ca/tags/NoteTakingApps" class="mention hashtag" rel="nofollow noopener" target="_blank">#NoteTakingApps</a></li><li>Bookmarks: <a href="https://allovertheplace.ca/tags/Linkding" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linkding</a> (Docker). Accessible bookmark manager with good browser extension support. <a href="https://allovertheplace.ca/tags/BookmarkManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#BookmarkManager</a></li><li>Recipes: <a href="https://allovertheplace.ca/tags/Mealie" class="mention hashtag" rel="nofollow noopener" target="_blank">#Mealie</a> (Docker), starting to learn cooking! 🍳📖  <a href="https://allovertheplace.ca/tags/CookingApps" class="mention hashtag" rel="nofollow noopener" target="_blank">#CookingApps</a></li><li>RSS Feeds: <a href="https://allovertheplace.ca/tags/Miniflux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Miniflux</a> (non-Docker), excellent accessibility. Originally wanted better podcast support but other options had major accessibility issues. <a href="https://allovertheplace.ca/tags/RSSReader" class="mention hashtag" rel="nofollow noopener" target="_blank">#RSSReader</a></li><li>Automation & Workflows: <a href="https://allovertheplace.ca/tags/N8N" class="mention hashtag" rel="nofollow noopener" target="_blank">#N8N</a> (Docker). Haven't explored deeply yet—open to ideas! <a href="https://allovertheplace.ca/tags/AutomationTools" class="mention hashtag" rel="nofollow noopener" target="_blank">#AutomationTools</a> <a href="https://allovertheplace.ca/tags/WorkflowAutomation" class="mention hashtag" rel="nofollow noopener" target="_blank">#WorkflowAutomation</a></li><li>Pastebin Service: <a href="https://allovertheplace.ca/tags/PrivateBin" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivateBin</a> (non-Docker). Considering alternatives or CLI tool for easier console access. <a href="https://allovertheplace.ca/tags/PastebinAlternative" class="mention hashtag" rel="nofollow noopener" target="_blank">#PastebinAlternative</a></li><li>File Sharing & Editing: <a href="https://allovertheplace.ca/tags/Samba" class="mention hashtag" rel="nofollow noopener" target="_blank">#Samba</a> (non-Docker), easy file management from my Windows 11 mini PC. <a href="https://allovertheplace.ca/tags/FileSharing" class="mention hashtag" rel="nofollow noopener" target="_blank">#FileSharing</a> <a href="https://allovertheplace.ca/tags/Windows11" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows11</a></li><li>Search Engine: <a href="https://allovertheplace.ca/tags/SearXNG" class="mention hashtag" rel="nofollow noopener" target="_blank">#SearXNG</a> (non-Docker), accessible and searches multiple engines at once. <a href="https://allovertheplace.ca/tags/PrivacySearchEngine" class="mention hashtag" rel="nofollow noopener" target="_blank">#PrivacySearchEngine</a></li><li>IRC Client: <a href="https://allovertheplace.ca/tags/TheLounge" class="mention hashtag" rel="nofollow noopener" target="_blank">#TheLounge</a> (non-Docker). Some accessibility issues but best I've found so far for always-connected IRC. <a href="https://allovertheplace.ca/tags/IRCClient" class="mention hashtag" rel="nofollow noopener" target="_blank">#IRCClient</a></li><li>Read Later Service: <a href="https://allovertheplace.ca/tags/Wallabag" class="mention hashtag" rel="nofollow noopener" target="_blank">#Wallabag</a> (Docker). Biggest issue is Wallabagger Chrome extension doesn't work for me yet. <a href="https://allovertheplace.ca/tags/ReadItLater" class="mention hashtag" rel="nofollow noopener" target="_blank">#ReadItLater</a></li></ul>Notifications & Development Workflow<ul><li>Notifications via: <a href="https://allovertheplace.ca/tags/Ntfy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ntfy</a> (Docker) and Zoho's ZeptoMail (<a href="https://allovertheplace.ca/tags/Zoho" class="mention hashtag" rel="nofollow noopener" target="_blank">#Zoho</a>)</li><li>Development Environment: Mostly using VSCode connected to my server via Remote-SSH extension. <a href="https://allovertheplace.ca/tags/VSCodeRemote" class="mention hashtag" rel="nofollow noopener" target="_blank">#VSCodeRemote</a></li></ul>Accessibility Focus ♿️🖥️Accessibility heavily influences my choices—I use a screen reader full-time (<a href="https://allovertheplace.ca/tags/ScreenReader" class="mention hashtag" rel="nofollow noopener" target="_blank">#ScreenReader</a>), so I prioritize services usable without sight (<a href="https://allovertheplace.ca/tags/InclusiveDesign" class="mention hashtag" rel="nofollow noopener" target="_blank">#InclusiveDesign</a>, <a href="https://allovertheplace.ca/tags/DigitalAccessibility" class="mention hashtag" rel="nofollow noopener" target="_blank">#DigitalAccessibility</a>). Always open to discussing accessibility experiences or recommendations!I've also experimented with:<ul><li>Ollama (<a href="https://allovertheplace.ca/tags/Ollama" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ollama</a>): Not enough RAM on my Pi.</li><li>Habit trackers like Beaver Habit Tracker (<a href="https://allovertheplace.ca/tags/HabitTracking" class="mention hashtag" rel="nofollow noopener" target="_blank">#HabitTracking</a>): Accessibility issues made it unusable for me.</li></ul>I don't really have a media collection, so no Plex or Jellyfin here (<a href="https://allovertheplace.ca/tags/MediaServer" class="mention hashtag" rel="nofollow noopener" target="_blank">#MediaServer</a>)—but I'm always open to suggestions! I've gotten a bit addicted to exploring new self-hosted services! 😄What's your setup like? Any cool services you'd recommend I try?<a href="https://allovertheplace.ca/tags/SelfHosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosted</a> <a href="https://allovertheplace.ca/tags/LinuxSelfHost" class="mention hashtag" rel="nofollow noopener" target="_blank">#LinuxSelfHost</a> <a href="https://allovertheplace.ca/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSource</a> <a href="https://allovertheplace.ca/tags/TechCommunity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechCommunity</a> <a href="https://allovertheplace.ca/tags/FOSS" class="mention hashtag" rel="nofollow noopener" target="_blank">#FOSS</a> <a href="https://allovertheplace.ca/tags/TechDIY" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechDIY</a><a href="https://lemmy.ml/c/selfhost" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhost</a> <a href="https://lemmy.world/c/selfhosted" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhosted</a> <a href="https://a.gup.pe/u/selfhosting" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhosting</a>

Lanie Molinar Carmelo<a href="https://allovertheplace.ca/tags/SelfHosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosted</a> <a href="https://allovertheplace.ca/tags/LinkAce" class="mention hashtag" rel="nofollow noopener" target="_blank">#LinkAce</a> Bookmark Manager Running, but Unable to Check for Updates or Generate a Cron TokenHi all. Hoping someone in the <a href="https://allovertheplace.ca/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a> community can help here. I'm running LinkAce in <a href="https://allovertheplace.ca/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#Docker</a> behind non-Dockerized <a href="https://allovertheplace.ca/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Caddy</a> and <a href="https://allovertheplace.ca/tags/Authelia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Authelia</a>, and most things are working, but I'm seeing "Could not check for updates" at the bottom of each page, and when I tried to generate a cron token, nothing happened except for the generate button graying out. I am seeing one or two 404 errors in my logs, but I don't know if that's causing the problem or not. I don't know much about <a href="https://allovertheplace.ca/tags/PHP" class="mention hashtag" rel="nofollow noopener" target="_blank">#PHP</a> applications.Logs<pre><code>2025-02-22 23:25:26,460 INFO supervisord started with pid 1 2025-02-22 23:25:27,465 INFO spawned: 'php-fpm' with pid 8 2025-02-22 23:25:27,467 INFO spawned: 'caddy' with pid 9 [22-Feb-2025 23:25:27] NOTICE: [pool www] 'user' directive is ignored when FPM is not running as root [22-Feb-2025 23:25:27] NOTICE: [pool www] 'group' directive is ignored when FPM is not running as root [22-Feb-2025 23:25:27] NOTICE: fpm is running, pid 8 [22-Feb-2025 23:25:27] NOTICE: ready to handle connections {"level":"info","ts":1740266727.5264525,"msg":"using config from file","file":"/etc/caddy/Caddyfile"} {"level":"info","ts":1740266727.5280282,"msg":"adapted config to JSON","adapter":"caddyfile"} {"level":"warn","ts":1740266727.5280406,"msg":"Caddyfile input is not formatted; run 'caddy fmt --overwrite' to fix inconsistencies","adapter":"caddyfile","file":"/etc/caddy/Caddyfile","line":2} {"level":"info","ts":1740266727.529092,"logger":"admin","msg":"admin endpoint started","address":"localhost:2019","enforce_origin":false,"origins":["//localhost:2019","//[::1]:2019","//127.0.0.1:2019"]} {"level":"warn","ts":1740266727.529331,"logger":"http.auto_https","msg":"server is listening only on the HTTP port, so no automatic HTTPS will be applied to this server","server_name":"srv0","http_port":80} {"level":"info","ts":1740266727.5294206,"logger":"tls.cache.maintenance","msg":"started background certificate maintenance","cache":"0x40000bab00"} {"level":"warn","ts":1740266727.530186,"logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"} {"level":"warn","ts":1740266727.530195,"logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"} {"level":"info","ts":1740266727.530198,"logger":"http.log","msg":"server running","name":"srv0","protocols":["h1","h2","h3"]} {"level":"info","ts":1740266727.5412574,"msg":"autosaved config (load with --resume flag)","file":"/home/www-data/.config/caddy/autosave.json"} {"level":"info","ts":1740266727.541271,"msg":"serving initial configuration"} {"level":"info","ts":1740266727.5477707,"logger":"tls","msg":"cleaning storage unit","storage":"FileStorage:/home/www-data/.local/share/caddy"} {"level":"info","ts":1740266727.5541356,"logger":"tls","msg":"finished cleaning storage units"} 2025-02-22 23:25:28,555 INFO success: php-fpm entered RUNNING state, process has stayed up for > than 1 seconds (startsecs) 2025-02-22 23:25:28,555 INFO success: caddy entered RUNNING state, process has stayed up for > than 1 seconds (startsecs) ::1 - 22/Feb/2025:23:25:34 +0000 "GET /index.php" 200 ::1 - 22/Feb/2025:23:25:34 +0000 "GET /index.php" 404 </code></pre>Docker Compose file<pre><code>services: # --- LinkAce linkace: image: docker.io/linkace/linkace:latest container_name: linkace restart: unless-stopped depends_on: - linkace_db ports: - "0.0.0.0:3009:80" volumes: - ./.env:/app/.env - ./backups:/app/storage/app/backups # --- Database linkace_db: image: docker.io/library/mariadb:11.5 container_name: linkace_db restart: unless-stopped command: mariadbd --character-set-server=utf8mb4 --collation-server=utf8mb4_bin environment: - MYSQL_ROOT_PASSWORD=${DB_PASSWORD} - MYSQL_USER=${DB_USERNAME} - MYSQL_PASSWORD=${DB_PASSWORD} - MYSQL_DATABASE=${DB_DATABASE} volumes: - db:/var/lib/mysql # --- Cache linkace_redis: image: docker.io/bitnami/redis:7.4 container_name: linkace_redis restart: unless-stopped environment: - REDIS_PASSWORD=${REDIS_PASSWORD} volumes: db: </code></pre>.env (secrets redacted)<pre><code>## LINKACE CONFIGURATION # The app key is generated later, please leave it like that APP_KEY=redacted APP_ENV=development ## Configuration of the database connection ## Attention: Those settings are configured during the web setup, please do not modify them now. # Set the database driver (mysql, pgsql, sqlsrv, sqlite) DB_CONNECTION=mysql # Set the host of your database here DB_HOST=linkace_db # Set the port of your database here DB_PORT=3306 # Set the database name here DB_DATABASE=linkace # Set both username and password of the user accessing the database DB_USERNAME=linkace # Wrap your password into quotes (") if it contains special characters DB_PASSWORD=redacted ## Redis cache configuration # Set the Redis connection here if you want to use it REDIS_HOST=linkace_redis REDIS_PASSWORD=redacted REDIS_PORT=6379 APP_DEBUG=true # SSO configuration SSO_ENABLED=true SSO_OIDC_ENABLED=true SSO_REGISTRATION_ENABLED=true REGULAR_LOGIN_DISABLED=true SSO_OIDC_BASE_URL=https://auth.laniecarmelo.tech/ # Your Authelia base URL SSO_OIDC_CLIENT_ID=linkace SSO_OIDC_CLIENT_SECRET='redacted' SSO_OIDC_SCOPES=openid,profile,email </code></pre>Caddyfile snippet<pre><code>{ email laniecarmelo@gmail.com debug acme_dns cloudflare redacted http_port 80 https_port 443 admin :2019 { origins 127.0.0.1:2019 0.0.0.0:2019 stormux:2019 caddy.laniecarmelo.tech } } (logconfig) { log { output stdout format json } } (auth_headers) { header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" } (proxy_config) { header_up Host {http.request.host} header_up X-Real-IP {http.request.remote} header_up X-Forwarded-User {http.auth.user.id} # Pass user ID header_up X-Forwarded-Email {http.auth.user.email} # Pass email } (authelia_middleware) { forward_auth localhost:9091 { uri /api/verify?rd=https://auth.laniecarmelo.tech copy_headers Remote-User Remote-Email Remote-Groups Authorization } } bookmarks.laniecarmelo.tech { route { import authelia_middleware reverse_proxy localhost:3009 { # Directly proxy to LinkAce's web server import proxy_config } } import logconfig import auth_headers } </code></pre>Authelia config snippet<pre><code> - domain: "*.laniecarmelo.tech" policy: bypass networks: - 192.168.1.0/24 # Local network - 172.17.0.0/16 # Docker bridge network - 100.64.0.0/10 # Tailscale network - domain: "bookmarks.laniecarmelo.tech" resources: ["^/api.*"] policy: bypass - domain: "*.laniecarmelo.tech" policy: one_factor - client_id: linkace client_name: LinkAce bookmarking app client_secret: redacted public: false authorization_policy: one_factor scopes: [openid, groups, profile, email, offline_access] redirect_uris: - https://bookmarks.laniecarmelo.tech/auth/oidc/callback grant_types: [authorization_code] response_types: [code] response_modes: [form_post, query] userinfo_signed_response_alg: none consent_mode: explicit pre_configured_consent_duration: "1y" </code></pre>Does anyone know what might be causing this and how I can fix it? <a href="https://allovertheplace.ca/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://allovertheplace.ca/tags/ArchLinuxARM" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArchLinuxARM</a> <a href="https://allovertheplace.ca/tags/Stormux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Stormux</a> <a href="https://allovertheplace.ca/tags/RaspberryPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi</a> <a href="https://allovertheplace.ca/tags/RaspberryPi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi500</a> <a href="https://allovertheplace.ca/tags/RPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPi</a> <a href="https://allovertheplace.ca/tags/RPi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPi500</a> <a href="https://allovertheplace.ca/tags/tech" class="mention hashtag" rel="nofollow noopener" target="_blank">#tech</a> <a href="https://allovertheplace.ca/tags/technology" class="mention hashtag" rel="nofollow noopener" target="_blank">#technology</a> <a href="https://lemmy.ml/c/selfhost" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhost</a> <a href="https://lemmy.world/c/selfhosted" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhosted</a> <a href="https://a.gup.pe/u/selfhosting" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhosting</a>

teledyn 𓂀The more i think about it, it is obvious and I knew all along from the projector: it takes at minimum the <a href="https://mstdn.ca/tags/rpi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#rpi500</a> to have enough oomph to play even 720p AVI files, and all the codecs required, basically a minimal Linux system. The <a href="https://mstdn.ca/tags/Chromecast" class="mention hashtag" rel="nofollow noopener" target="_blank">#Chromecast</a> and <a href="https://mstdn.ca/tags/Roku" class="mention hashtag" rel="nofollow noopener" target="_blank">#Roku</a> must have at least a few codecs, and obviously have net access, it's just the usual mafiabusiness that locks me out?Perhaps there exists a <a href="https://mstdn.ca/tags/jellyfin" class="mention hashtag" rel="nofollow noopener" target="_blank">#jellyfin</a> dongle? Or must I now learn about <a href="https://mstdn.ca/tags/arduino" class="mention hashtag" rel="nofollow noopener" target="_blank">#arduino</a> 🤣<a href="https://mstdn.ca/tags/ionlywanttechthatworksforME" class="mention hashtag" rel="nofollow noopener" target="_blank">#ionlywanttechthatworksforME</a>

Lanie Molinar CarmeloHelp Needed with Cloudflare Zero Trust, Pages, and Workers for ReactFlux + MiniFlux SetupHi everyone, I'm new to <a href="https://allovertheplace.ca/tags/Cloudflare" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cloudflare</a> and have been trying to set up a <a href="https://allovertheplace.ca/tags/SelfHosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosted</a> project on my <a href="https://allovertheplace.ca/tags/RaspberryPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi</a> 500. I'm mostly self-taught, so I apologize if I misunderstand anything or miss important details. Here's my situation: Current Setup<ul><li>I'm running the self-hosted <a href="https://allovertheplace.ca/tags/RSS" class="mention hashtag" rel="nofollow noopener" target="_blank">#RSS</a> feed reader <a href="https://allovertheplace.ca/tags/MiniFlux" class="mention hashtag" rel="nofollow noopener" target="_blank">#MiniFlux</a> on my Raspberry Pi 500 (<a href="https://allovertheplace.ca/tags/ArchLinuxARM" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArchLinuxARM</a>, installed via Pacman). </li><li>The setup uses <a href="https://allovertheplace.ca/tags/Caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Caddy</a> as a reverse proxy, a <a href="https://allovertheplace.ca/tags/CloudflareZeroTrust" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudflareZeroTrust</a> tunnel, and Cloudflare Access for SSO. </li><li>My <a href="https://allovertheplace.ca/tags/CloudflareAccess" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudflareAccess</a> application is configured to allow all origins, methods, and headers. It has a policy that allows specific emails or login methods (e.g., GitHub). </li></ul>What I'm Trying to Do<ul><li>I want to deploy ReactFlux, an alternative frontend for MiniFlux, on <a href="https://allovertheplace.ca/tags/CloudflarePages" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudflarePages</a>. </li><li>Before setting it up fully, I tested the <a href="https://reactflux.pages.dev/login" rel="nofollow noopener" target="_blank">ReactFlux demo</a> with my MiniFlux instance at <code>https://rss.laniecarmelo.tech</code>. However, ReactFlux couldn't log in. </li></ul>Suspected IssueI believe the issue is caused by Cloudflare Access protection blocking ReactFlux from accessing the MiniFlux API (<code>https://rss.laniecarmelo.tech/v1/*</code>). What I've Tried So Far<ol><li>I added another hostname (<code>rss.laniecarmelo.tech/v1/*</code>) to my tunnel configuration and created a new Cloudflare Access application with a policy set to "Bypass" for everyone. However, this didn't work—when testing the API endpoint in a private browser window, I'm still asked to sign into Cloudflare. </li><li>I also tried setting up the hostname with "Protect with Access" turned off but got the same results. </li><li>Next, I attempted to use a <a href="https://allovertheplace.ca/tags/CloudflareWorker" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudflareWorker</a> written in JavaScript to bypass authentication for <code>/v1/*</code>, but it doesn't seem to be doing anything (or isn't being triggered). </li></ol>What I Need Help With<ul><li>How can I properly configure Cloudflare so ReactFlux can access the MiniFlux API (<code>/v1/*</code>) while keeping the rest of my MiniFlux instance protected by Cloudflare Access? </li><li>I've been stuck on this for a couple of days and would really appreciate any guidance or suggestions! </li></ul>Thanks in advance for your help! <a href="https://allovertheplace.ca/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a> <a href="https://allovertheplace.ca/tags/ArchLinux" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArchLinux</a> <a href="https://allovertheplace.ca/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://allovertheplace.ca/tags/RSSReader" class="mention hashtag" rel="nofollow noopener" target="_blank">#RSSReader</a> <a href="https://allovertheplace.ca/tags/tech" class="mention hashtag" rel="nofollow noopener" target="_blank">#tech</a> <a href="https://allovertheplace.ca/tags/technology" class="mention hashtag" rel="nofollow noopener" target="_blank">#technology</a> <a href="https://allovertheplace.ca/tags/RaspberryPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi</a> <a href="https://allovertheplace.ca/tags/RPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPi</a> <a href="https://allovertheplace.ca/tags/RPi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPi500</a> <a href="https://allovertheplace.ca/tags/RaspberryPi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi500</a> <a href="https://a.gup.pe/u/selfhosting" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhosting</a> <a href="https://lemmy.ml/c/selfhost" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhost</a> <a href="https://lemmy.world/c/selfhosted" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhosted</a>

Lanie CarmeloHi <a href="https://caneandable.social/tags/SelfHosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosted</a> community. I've figured out a lot of my setup. I now have a new domain, laniesplace.us, just for <a href="https://caneandable.social/tags/HomeServer" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeServer</a> stuff. It's set up through Porkbun with Dynu for <a href="https://caneandable.social/tags/DDNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#DDNS</a>. I've now got <a href="https://caneandable.social/tags/Traefik" class="mention hashtag" rel="nofollow noopener" target="_blank">#Traefik</a>, <a href="https://caneandable.social/tags/TailscaleVPN" class="mention hashtag" rel="nofollow noopener" target="_blank">#TailscaleVPN</a>, <a href="https://caneandable.social/tags/Linkding" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linkding</a>, <a href="https://caneandable.social/tags/Forgejo" class="mention hashtag" rel="nofollow noopener" target="_blank">#Forgejo</a>, <a href="https://caneandable.social/tags/Dokuwiki" class="mention hashtag" rel="nofollow noopener" target="_blank">#Dokuwiki</a>, Code-Server, <a href="https://caneandable.social/tags/Portainer" class="mention hashtag" rel="nofollow noopener" target="_blank">#Portainer</a>, <a href="https://caneandable.social/tags/Netdata" class="mention hashtag" rel="nofollow noopener" target="_blank">#Netdata</a>, <a href="https://caneandable.social/tags/Watchtower" class="mention hashtag" rel="nofollow noopener" target="_blank">#Watchtower</a>, <a href="https://caneandable.social/tags/Cockpit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cockpit</a>, <a href="https://caneandable.social/tags/Pihole" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pihole</a>, <a href="https://caneandable.social/tags/MiniFlux" class="mention hashtag" rel="nofollow noopener" target="_blank">#MiniFlux</a>, <a href="https://caneandable.social/tags/TheLounge" class="mention hashtag" rel="nofollow noopener" target="_blank">#TheLounge</a>, <a href="https://caneandable.social/tags/Filebrowser" class="mention hashtag" rel="nofollow noopener" target="_blank">#Filebrowser</a>, <a href="https://caneandable.social/tags/UptimeKuma" class="mention hashtag" rel="nofollow noopener" target="_blank">#UptimeKuma</a>, and the <a href="https://caneandable.social/tags/Homer" class="mention hashtag" rel="nofollow noopener" target="_blank">#Homer</a> dashboard service installed. I'm now trying to set up <a href="https://caneandable.social/tags/Authelia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Authelia</a> so I can have single sign-on to my services. For some, it's working now, but I can't seem to get Linkding to work no matter what I do. This is on a <a href="https://caneandable.social/tags/RaspberryPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi</a> 500 with 8 GB RAM and a 512 GB SD card, running <a href="https://caneandable.social/tags/Stormux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Stormux</a>, which is based on <a href="https://caneandable.social/tags/ArchlinuxARM" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArchlinuxARM</a>. Can anyone help? I'll reply to this post with all my relevant config files in separate posts. What's happening is this: Linkding is supposed to be available at bookmarks.laniesplace.us. When I go there, I see a 401 unauthorized error and a link to sign into Authelia. Once I sign in, though, it redirects back to the page with the 401 error. I've been trying to figure this out for hours with no luck. Files will be in replies to this post. <a href="https://caneandable.social/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfHosting</a> <a href="https://caneandable.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> <a href="https://caneandable.social/tags/HomeLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeLab</a> <a href="https://caneandable.social/tags/RPi" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPi</a> <a href="https://caneandable.social/tags/RaspberryPi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#RaspberryPi500</a> <a href="https://caneandable.social/tags/RPi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPi500</a> <a href="https://lemmy.ml/c/selfhost" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhost</a> <a href="https://a.gup.pe/u/selfhosting" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhosting</a> <a href="https://lemmy.world/c/selfhosted" class="u-url mention" rel="nofollow noopener" target="_blank">@selfhosted</a> <a href="https://a.gup.pe/u/linux" class="u-url mention" rel="nofollow noopener" target="_blank">@linux</a>

teledyn 𓂀if <a href="https://mstdn.ca/tags/jellyfin" class="mention hashtag" rel="nofollow noopener" target="_blank">#jellyfin</a> has keyboard navigation, it doesn't under <a href="https://mstdn.ca/tags/Ubuntu" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ubuntu</a> firefox or chromium; twenty tabs will highlight Cinema, but that's it, and just as well as further item focus is impossible to detect, which leaves needing a phone-app remote mouse, of which remote-touchpad WOULD work EXCEPT an <a href="https://mstdn.ca/tags/rpi500" class="mention hashtag" rel="nofollow noopener" target="_blank">#rpi500</a> is <a href="https://mstdn.ca/tags/Wayland" class="mention hashtag" rel="nofollow noopener" target="_blank">#Wayland</a> by default. So, for the want of keyboard nav, I must either abandon Wayland and hope r-t works, or go full-blown KDE Plasma to run <a href="https://mstdn.ca/tags/KDEConnect" class="mention hashtag" rel="nofollow noopener" target="_blank">#KDEConnect</a>!must IT always be so difficult? 🤣

Recent searches

Search options

Administered by:

Server stats:

#rpi500