This is awesome! I’m now using the swarm to control my living room lights.

Used pixels go for under $300. I just got a 6a for $140.

Any phone that runs android gives alphabet money, just buy a used one.

I dont find needing to knowing how to use the most common way of setting up servicss is gate keepy.

If you dont want to learn things then it probably is better to just pay someone else to handle the setup i dont think there is anything wrong with doing it that way either.

You can use a service like duckdns.org for free to get a (sub)domain that can be used with funkwhale.

I use Dockge to manage everything.

I just switch between google accounts when my free session runs out of tokens for the moth. Never giving cursor or any of those “Ai” companies a dime but I take full advantage of their free tiers.

Funkwhale is the best option for replacing Spotify. It can be private or public and federated so you can follow users who want to share their playlists and such.

Navidrome is another good option although i don’t use it personally I hear nothing but good things.

Avoid subsonic directly but youll find funkwhale and other services support it as a protocol very well. Its just the subsonic server software itself and all of the forks seem to basically just be reinventing the same wheel over and over so they can charge for “premium” features.

Oh interesting! Thank you.

Thanks but i meant the site in the original post https://cheapskatesguide.org/articles/debian-netinstall-waf.html

It says

403 Error

Your IP address has been blocked. This MAY be because you have made yourself look like a robot by using an unknown VPN or Tor exit node.

I just wish i could read it, it seems to block based on my IP which isn’t really a good way to identify bots.

Well it cant be that good becauase it thinks im a bot.

Anubis works pretty well for me so far in blocking clankers.

Great idea, i really hope we see more of that type of local/selfhosting for average folks, its really the only way to save the internet from just being another corporate censorship heavy advertising platform.

I setup navidrome but never got around to using it much personally. It seems like a good option for a private collection, but im more about sharing mine these days.

I setup jellyfin with feishin and use finamp on mobile for music.

Im also running the latest alpha of funkwhale which i recommend checking out the stable version for a better impression but the alpha is functional if a bit ugly at the moment. My public service for funkwhale has the most users out of anything else i run so people def seem to like it.

I discovered mstream fairly recently and really like its simplicity.

I have MPD setup to stream as a radio on my homepage.

Overall i mainly just use jellyfin out of convenience because i already use it for shows and movies. But ive tried lots of dedicated music options and every subsonic fork still in existence, i keep coming back to jellyfin though.

I think if you already have jellyfin working navidrome isnt really as useful unless you dont like the way jellyfin handles music (wich objectively jellyfin isnt the best interface for music). Its not really that much extra overhead though tbh so you shouldnt hesitate to give it a try if you want to. Really anything thats just focused on audio streaming isnt going to add much overhead.

In that case you would need to add the peers to the wireguard node you have running in the home lab as well. Wireguard can route peer to peer and will take the shortest path available to it.

That said, i highly recommend first getting things working in a “spoke and hub” style wireguard configuration with either your homelab or the vps as a central peer, then add peers as endpoints after you have everyone with working connections to the central peer. Its just a heck of a lot easier to trouble shoot and get your head around thatway.

A central wireguard peer on your vps, connect home to vps and direct the wireguard. Add friends as peers on the VPS like such:

[Interface]
Address = 10.0.0.1/24
ListenPort = 51820
PrivateKey = <VPS_PRIVKEY>

# Home
[Peer]
PublicKey = <HOME_PUBKEY>
AllowedIPs = 10.0.0.2/32

# Friend
[Peer]
PublicKey = <CLIENT_PUBKEY>
AllowedIPs = 10.0.0.3/32

Use iptables to Split tunnel traffic

For the home network ip route add 192.168.1.0/24 via 1. 0.2 dev wg0

And for the vpn To route google a .d such

Enable NAT for clients

iptables -t natw POSTROUTING -s 10.0.0.0/24 -o eth0 -j MASQUERADE

You can set the iptables rules to run wjen it comes up

Forgive my formatting. Mobile clients being janky

It sounds like you’ve got the right plan. I use Anubis and fail2ban along with some manual rules on nginx to block AI bots. In my experience Anubis helps a lot, and you can monitor nginx logs over time to for scans and such to make additional ban rules on.

I did a few times just to test it out on peertube, i wrote a script to broadcast all videos in a given folder in random order. I would like to eventually have something going 24/7 but i havent gotten to setting that up yet

I’m pretty happy with Debian as my server’s OS. I recently gave in to temptation and switched from stable to testing, on my home systems I run Arch because i like to have the most up to date stuff, but with my servers that’s a bit less important, even so debian testing is usually pretty stable itself anyway so I’m not worried much about things breaking because of it.