Foss on danbat.es

Getting into Self-Hosting: More apps

Wed, 14 Jan 2026 17:45:00 +0000

Now that my first apps are reliable and accessible, what next?

More apps!

File server

Nextcloud has a bunch of integrated offerings, but I mainly care about the central one: a solid file server for my personal cloud. This broadly takes over from my OneDrive and Google Drive, and is a single port of call for any documents and data I want to back up that don’t fall into other applications.

Knowledgebase & Notes

There are a lot of options out there for notetaking and personal knowledgebases. I landed on Trilium Notes for its hierarchical structure, quick navigation with commands, easy to use WYSIWYG editor, wide range of note types, and template support. It is one user per instance, so you’ll have to spin up more if anyone wants a separate one.

Audiobook Server

Liberating my music got me thinking about other audio streams I’m reliant on a large corporation for. For quite a while I had an Audible plan I’d pause for 3 months, get billed for a month on, then pause for another 3 months. I’ve never been a serial audiobook listener, but I have 30-odd titles on the platform¹.

It’d be great to have full control of the audiobooks I purchased, and luckily Libation does just that, downloading and decrypting my audible library.

The definitive audiobook streaming app seems to be Audiobookshelf, and for good reason. It’s a solid streamer with online metadata matching, and quite a strong beta mobile app (at least on Android).

Another nice feature is that it doesn’t have its own system for storing media, so any directory of Audiobooks you point it to should work with it.

eBook Server

I was also in the Kindle ecosystem for a few years, so it would be great to move over my books from there into something I own and control.

Grimmory is an e-book server with all the bells and whistles you can really ask for. My killer features are OPDS (open publication distribution system) support², and an easy way to mass-input new books that they call a ‘bookdrop’ folder. KOReader progress sync, online metadata matching, organisation into distinct libraries and shelves, and a competent (and customisable) built-in reader are all excellent for user experience too. It’s an insanely feature-rich application in this niche.

Further apps

This setup ticks most of my boxes, but there’s always more to be done. These are the applications I’m looking at next:

Collabora for online editing and collaboration of documents on Nextcloud.
Dashy for a centralised dashboard for all my self-hosted apps. I’m not 100% certain I need this, but it’ll be interesting to try out.
A Radarr/Sonarr stack including Jackett, qBittorrent (and a VPN, likely AirVPN), with Radarr importing Letterboxd lists.
Learning Wireguard to work toward replacing Tailscale

You’ve made it to the end, thanks for reading this all! Please hit me up if you’d like to discuss anything self-hosting =)

Edit 27/03/2026: So it looks like booklore got nuked by its maintainer on their way out… so I’ve switched to the young successor project/fork Grimmory, and updated this post accordingly.

It’s how I first got into the Foundation, Witcher, and Bobiverse series. The latter of which is sadly an audible exclusive. ↩︎
Which makes it super easy to get books onto my KOReader-running devices. ↩︎

Getting into Self-Hosting: Infrastructure

Tue, 13 Jan 2026 19:39:00 +0000

So I’ve got my photos and music syncing and streaming, but there are a holes to patch before I can actually rely on these services:

How safe is my data now? Not very, it’ll be safer with Regular Backups
How do I access my services when I’m not on the local network? I don’t - A VPN would help.
The first time I know a service is down is when I need to use it and can’t. Container & connectivity monitoring
And how will I know if I’m over-extending my little N150? Real-time system resource monitoring

It’s time for some Infra!

Backups

I’m running a daily backup of everything on my server that’s annoying, difficult or impossible to replace via Duplicati over SSH to a 1TB Hetzner Storage Box¹.

With this I don’t have to think about manual backups, nor automated ones since I have duplicati alert me with an email for backup failures. Everything I’ve added or modified in the day will be backed up overnight, and if it isn’t, I’ll get a report in my inbox.

VPN Access

It’s been pretty unanimously agreed that a VPN is the safest way to access self-hosted services out and about. This is where my FOSS philosophy falls apart a bit as Tailscale is just an insanely easy to use freemium option. Being free for up to 3 users and 100 devices, and plenty of client support, it’s a no-brainer, at least until I commit to rolling my own Wireguard.

TLS Certificates

Tailscale makes it easy to connect to my services, but the experience of accessing them still feels a bit second-rate because they’re all on HTTP, requiring an exception to be set in the browser the first time they’re accessed; as well as being on forgettable port numbers. All in all, having to visit something like 192.168.1.123:12345 isn’t a great user experience, especially when regularly met with “Your connection is insecure” messages.

What’ll fix all this is proxy with signed certificates and some nice clean subdomains for each service. I’ve found Nginx Proxy Manager to be of great utility for this. Adding new ‘proxy hosts’ is a breeze, and it looks after my Let’s Encrypt certificate. All I had to do was point the base domain to my server’s local IP, and expose my server’s subnet to my tailnet (Tailscale’s name for a group of devices interconnected on their platform).

Now I can visit for example https://immich.mydomain.tld with zero friction.

Monitoring

But what if any of these important containers crash? I’ll know about it since I’ve got Uptime Kuma monitoring all my containers via docker socket. If any are down for 5 minutes² and fail 3 consecutive 1 minute health checks, I’ll get an email about it. This is all shockingly easy to configure in-app.

What if my broadband goes down? I’m monitoring that too. Reachability to both google.com and bbc.co.uk should be a reliable signal as to whether I can connect to the open internet. Further keeping an eye on my ISP, I’ve got Speedtest Tracker running (hourly on an odd minute) to check what speeds and ping I’m actually measurably getting.

With all these containers, it’s nice to have one dashboard where I can actually see what system resources are in use. So far Glances has been a pretty slick one-page app for this.

This is somewhat overkill since I’m only using about 10% of the total storage, but it’s fast and relatively cheap for fast remote storage. I had tried using Backblaze and similar competitors since they have a shockingly low price per terabyte, but I had repeated issues backing up to especially Backblaze due to their connectivity provider. I also wanted to see about finding a reliable and trustworthy european host, and Hetzner has ticked those boxes so far. ↩︎
IMHO there’s no need to check more often than this, if something stays down that’s when I need to care about it. This isn’t a commerical application, the main user is me. And I’d rather not add more traffic, resource utilisation, and data from my monitoring that I arguably don’t need. ↩︎

Getting into Self-Hosting

Mon, 12 Jan 2026 10:00:00 +0000

So I got into self-hosting…

I like configuring things, and hate subscriptions, so I’d been thinking about it for a while.

Hating subscriptions, to start I only had two to rid myself of: Google One Basic, and Spotify Premium (which got a bump in October).

The Hardware

Looking for a small, quiet, power efficient box with easy storage expansion, I landed on the Bee-link Me Mini. It has an Intel N150 processor, a pretty common (and powerful for its size and efficiency) little chip for mini-PCs with a base power usage of 6W, six M.2 slots for NVMe SSDs, two 2.5Gig ethernet ports, and barely makes a sound with its single fan.

Despite the six slots, I actually don’t need a ton of storage right now, maybe 100GB at most. But when I do, for reliability it’s best to have identical drives, so I need a drive manufacturer I can assume will still be around in a few years. With this in mind, I landed on three 1TB MP4LL’s from Teamgroup which were going for just under £50 a piece from OverclockersUK in August.

The Operating System

One of the things that gave me the confidence to get started with this project was HexOS, a beta NAS (network attached storage) operating system built ontop of TrueNAS Community Edition (formerly ‘Scale’), that seeks to provide an easy and flexible NAS experience. In retrospect, I’m probably in the camp of NAS-builders who could get away with learning TrueNAS, as I’ve spent the majority of my time using HexOS there rather than the HexOS ‘Deck’, but you live and you learn.

TrueNAS (and by extension HexOS) has a nice pre-packaged ‘Apps Market’ that can simplify docker container installation, though more often than not you’re just writing a docker-compose file as a form in their UI.

First Applications

Photos: Immich

My main use for Google One Basic is Google Photos, and Immich is an amazing drop-in self-hosted replacement. It’s pretty popular too, so you can generally find some nice CLI tools for working with it. One example being Immich-Go which made importing my photos from Google Takeout pretty painless.

Music: Navidrome

Replacing Spotify Premium was less obvious. It took me some time to figure out that I didn’t want to copy over my library and listening habits like for like. Long playlists with sometimes one song per artist, and letting the algorithm dictate how I discover music (song by song), had started feeling less appealing.

Albums and Extended Plays are the intended listening experience for the most part, so I went through my library picking out every album I definitely wanted to have access to, and every album with at least 2 songs I knew I liked. In the end I had about 87 albums/EPs/singles to cover every song or group of songs I liked enough to listen to the rest of the album.

Wanting to actually support the artists I enjoy, and own the music I pay for, I buy everything I can on Bandcamp, and download albums in .FLAC from there. When this isn’t an option, I’ll hop on Soulseek.

Looking for an actively developed, solid music streaming server with open compatibility, I landed on Navidrome. It supports most of the OpenSubSonic API, supports scrobbling to Last.FM¹, and just works well.

For clients, I’m using Symfonium on Android, and Supersonic on Desktop.

To keep ontop of song metadata and to fetch covers and synced lyrics, I’m using MusicBrainz Picard with the ‘Picard Sözler’ plugin to grab synced lyrics if any are available.

If you give it an API key in the environment variables. You can find me as danbat-es over there, and you may recognise my profile picture from a previous post. ↩︎