Secure homelab Kubernetes with wildcard TLS and no open ports
A guide to using k3s, Traefik, and cert-manager with DNS-01 challenges to issue trusted wildcard certificates without exposing internal services to the internet.
Self-hosting
Running your own apps, servers and homelabs instead of renting SaaS.
Offline AI assistants: balancing model accuracy with reliable knowledge bases
Survival LLM demonstrates the trade-offs of offline AI, achieving mixed results on emergency queries while highlighting the critical role of local knowledge libraries.
Designing transparent permissions for self-hosted document systems
A new open-source DMS architecture explains access rights by department and inheritance, solving the common problem of opaque file permissions in shared drives.
Self-hosting Vaultwarden requires manual certificate and backup oversight
A new guide details setting up Vaultwarden with Caddy, highlighting that administrators must manage their own TLS renewals, backups, and security configurations.
Gitea and n8n exposure: why configuration matters more than asset counts
ZoomEye data shows over half a million public Gitea and n8n instances, but the real risk lies in default settings that expose stored credentials.
Hold My Docs stores wiki pages as Git commits for easy recovery
A new self-hosted wiki called Hold My Docs saves every page edit as a Git commit, keeping documentation accessible even if the application fails.
Migrating from Easypanel to Tugport: five breakages and lessons learned
A developer migrated 57 services from Easypanel to Tugport using a single command. The process revealed five specific bugs involving environment variables, health checks, and network conflicts.
Self-hosting Paperless-ngx on k3s requires careful GitOps storage handling
A developer details the pitfalls of running Paperless-ngx on k3s with Flux, highlighting critical annotation needs for persistent storage and common bootstrap errors.
OneMemory offers a shared SQLite store for AI agents via MCP and REST
A new self-hosted tool called OneMemory lets developers share memory across AI agents using a single SQLite file, accessible via Model Context Protocol or REST API.
Unpatched Tailscale SSH flaw allows root escalation across networks
A new report details a critical vulnerability in Tailscale and headscale that lets attackers gain root access on target servers via SSH port forwarding, with no patch currently available.
New dataset reveals real idle resource usage for self-hosted apps
SelfHost Atlas released an open dataset measuring actual RAM and disk usage of self-hostable apps on fresh servers, contrasting them with documented minimums.
Inside n8n's execution engine: how the workflow scheduler actually works
A technical breakdown of n8n’s internal execution model, covering its serializable run objects, scheduling logic, and queue architecture for self-hosted automation.
Debugging silent MQTT automations in Home Assistant safely
A guide to isolating topic mismatches and payload errors in Home Assistant using safe, temporary test topics instead of live device controls.
Death Plan Switch offers self-hosted contingency for solo admins
A new MIT-licensed tool helps solo administrators leave instructions for trusted contacts if they stop checking in, relying on scheduled jobs and email confirmations.
Mailrelay turns incoming email into webhooks for self-hosted automation
A new open-source tool called mailrelay accepts SMTP traffic, parses emails, and triggers webhooks based on configurable rules for local automation.
