Authentik handles SSO for all my apps like immich, linkwarden, owncloud etc. Openid when available but some web apps are done via forward proxy auth. Jellyfin uses LDAP via authentik which isn’t sso technically.

Other than me, no one else mounts samba shares directly. All personal files are synced to server and other devices with owncloud (OCIS).

Yes its config file only, but if you get the File editor app, it’s quite easy to just copy and paste a few lines into the editor.

Once it’s setup it never changes.

I’ve not looked for an LDAP solution but stuff like this is why i went with authentik over other solutions. Because authentik has LDAP built in, i can use this when needed (jellyfin) but then use openid for other apps (which us superior in almost every way for home lab use)

There are auth libraries that you can just plug into your app so you don’t even have to worry about that part yourself and just focus on the app

https://authjs.dev/getting-started

I use this tutorial to setup external only and internal only URLs both with SSL

https://youtu.be/liV3c9m_OX8

https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos

Check here

https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos

Check compatibility here.

Borgbase has good options for Borg and restic backups.

I highly recommend using one of these 2 for proper backups. Borg with borgmatic scripts are fantastic

Borgmatic

You can self host the Borg server in docker (or bare metal) on another server if you have one (or a friends) and then borgbase offers very good paid backup storage

I use a second server locally, a friend and borgbase as backup locations.

You have angered the helmsman Charon. Your misdeeds have been noted.

If i remember correctly on my gitea (now forgejo) the default is open registration which really shouldn’t be the case for projects that are targeted towards self hosters.

My inital install was a long time ago so I don’t remember for sure

I ran nextcloud for years on good hardware and its always been the weakest self hosted app I have. I moved to seafile for a bit and then ultimately owncloud OCIS.

OCIS is a modern app that is massively better since its written with modern languages / frameworks

Unless its password protected apps like masterpdf and nitropdf for windows can edit anything in the pdf

Every foss pdf editor I’ve tried has been janky. Nothing gives true pdf editing capabilities.

Masterpdf is available on linux, its paid and not Foss but actually works

Borg backup runs every hour on all my docker folders

I definitely don’t need to but it also costs nothing and retention policy only keeps 5 minute backups for an hour. Then hourly back up for a day. Daily backups for a week, etc. Up to 2 years

I think I remember people saying they got it working with this

https://github.com/winapps-org/winapps

That being said, stuff like Fusion 360 changes quite often and even if it works now it might break compatibility with the future update.

FreeCAD has come a long way since with the 1.0 release and the 1.1 release also has lots of good quality of life improvements.

Exactly this, I have hourly Borg backups and also since my install is entirely on a zfs array I have zfs autosnapshot every 5 mins with retention policy. Takes almost zero cpu or memory overhead extra and means and can do just about anything via command line and revert it back with ease.

That being said, I still don’t auto update. Unless having an issue, I just sit down every few months and update everything manually because if its already working why update. If you want the newest features, how will you even know what they are if you don’t at least glance at the release notes?

Traekif can reverse proxy just about anything include ssh.

That being said I don’t. For stuff like ssh I connect with wireguard first then ssh. For stuff like immich I directly expose that behind traefik so I can share images with others. For stuff like vaultwarden I have that behind traefik but internal only so you need wireguard first then you connect to vaultwarden.local.domain.com

FreshRSS self hosted. Just navigate to the website in your browser, install it to android via a browser ‘app’. Assign the app to a gesture.

Now i swipe from the left and my RSS opens. Fully self hosted with no tracking beyond the websites you visit.