https://awesome-selfhosted.net/platforms/php.html

• grafana dashboards https://github.com/nodiscc/xsrv/tree/master/roles/monitoring/grafana/files
• victoriametrics alerting rules https://github.com/nodiscc/xsrv/tree/master/roles/monitoring/victoriametrics/files

This is the correct solution for unattended file copy/sync, plug the external drive and wait till the copy finishes. The only difficulty is monitoring progress/completion/failure if that’s on a headless machine. I built a basic orchestration system with systemd .path/.mount/.timer/.service units, logging and monitoring around this, once you understand your exact needs and get it working, it works.

The free edition of Mattermost is artificially crippled [1]. Amongst other things, only the most recent 10k messages will be displayed, older messages will be hidden (borderline ransomware). They took a bad turn when they decided to start LARPing as a US defense contractor company (I mean look at this homepage [2], wtf). I wouldn’t recommend it for a new deployment.

I use SANE for scanning.

• install sane-utils
• configure /etc/sane.d/saned.conf, list the IP adresses or network allowed to connect
• start saned.socket

on your client (linux desktop)

• add the SANE server IP to to the config echo "192.168.xx.xx" > /etc/sane.d/net.conf
• list the scanners scanimage -L

The scanner is also automatically listed in scanning utilities like simple-scan etc. Don’t know about phones or other devices, I assume there are scanner auto-discovery utilities; phones also have cameras so thy can scan on their own. I don’t know about Web UIs, why not just use native printing/scanning features of guest devices?

https://github.com/nodiscc/toolbox/blob/master/SCRIPTS/llamacpp-summarize

FUD

Gitea is still MIT licensed and the Enterprise tier features only cater to large org needs [1]. Why would I want to deal with nightmarish SAML config when OIDC does a better job

Forgejo was forked because the maintainers were butthurt they didn’t have more say in the development roadmap and their large PRs didn’t get reviewed and merged fast enough. Which is a valid reason to fork

I wish more people understood this.

Do I use LLMs to write software for my personal use? Sure. I still try to build it in an “incremental” way the same way I would write software manually so I don’t get 10k SLOC written in a week, but at some point, even reviewing 100 LOC changes takes time, so I just take a cursory look at the diff, yolo-merge-and-run to test it. It’s not critical. This is fine. I’m just exploring the problem domain and solutions.

But would I go as far as sharing it, making a damn git repo and advertising it on Lemmy? Fuck no. This is unreliable, inscrutable slopware tailored for my own use. Anyone with a local LLM or a 20 euro claude/codex/z.ai subscription can do the same thing in a few minutes of work a day.

A single 10-line patch/contribution to a human-written project, with contributors who understand the code, or even a well-curated comment in a bug tracker that helps devs debug an issue or clearly expresses a need, has more value for the community than 50 vibe-coded projects.

I didn’t find one that would work entirely authelssly and which would allow negative entries

Have you considered filing feature requests for these on existing, well-maintained projects?

Yes, even writing a proper issue report probably entails more work and brainstorming than prompting your way to a shitty solution. No offense meant, I do it as well. I know using a LLM and pumping out a working solution to a complex problem in a week gives a feeling of euphoria and power; this wouldn’t have been possible at all a few years ago. But there is absolutely no value in proactively sharing and advertising it.

I appreciate OP being transparent about it though.

Yep. https://lemmy.world/post/46066942/23416719 Basic setup, works for me

they don’t go out of their way to make the self hosted option easy

Just follow the docs https://docs.nextcloud.com/server/stable/admin_manual/installation/source_installation.html ? The manual install is a simple webserver + PHP-FPM + postgres setup

I have automated it with an ansible role [1], there’s nothing complicated about it, really.

deleted by creator

Podman pods (or quadlets) managed by ansible.

True.

But by default the unattended-upgrades timer has a randomized trigger time (so that not all Debian machines in the world start hammering the mirrors at the same time). If you enable the auto reboot option in unattended-upgrades, your boxes will reboot at an unpredictable time. I prefer doing this at known times (middle of the night when I know nothing important is running/number of users is low).

This is a kernel bug, unattended-upgrades will take care of installing the new kernel once the fix is published, but you still have to reboot to load it. I’ve set up a cron job that runs needrestart nightly and reboots my servers if there is a pending kernel upgrade [1]

I suggest using llama.cpp instead of ollama, you can easily squeeze +10% in inference speed and other memory optimizations from llama.cpp. With hardware prices nowadays I think every % saved on resources matters. Here is a simple ansible role to setup llama.cpp, it should give you a good idea of how to deploy it.

A dedicated inference rig is not gonna be cheap. What I did, since I need a gaming rig; is getting 32GB DDR5 (this was before the current RAMpocalypse, if I had known I would have bought 64) and an AMD 9070 (16GB VRAM - again if I had known how crazy prices would get I’d probably ahve bought a 24GB VRAM card). The home server runs the usual/non-AI stuff, and llamacpp runs on the gaming desktop (the home server just has a proxy to it). Yeah the gaming desktop has to be powered up when I want to run inference, this is my main desktop so it’s powered on most of the time, no big deal

• use APT repositories when possible -> then unattended-upgrades
• For OCI images that do not provide tagged releases (looking at you searxng…), podman auto-update
• for everything else, subscribe to releases RSS feed, read release notes when they come out, check for breaking changes and possibly interesting stuff, update version in ansible playbook, deploy ansible playbook

It can protect APIs as much as any other URL. Or more simply you could disallow any unauthenticated API access in gitea or at the reverse proxy level?

cannot protect against bot traffic coming from many different residential proxies

It can block anything that doesn’t pass the proof-of-work/JS challenge. Most bots don’t interpret JS.

The scraping/bandwidth abuse problem can easily be worked around.

But there still are actual good reasons to not host a public forge.

For example, as long as pull requests are allowed (which is required for actual contributors), anyone can abuse the PR feature to fork your repository, then start pushing random shit into their fork (since the fork is an actual separate git repository).

Bad actors can do it on github all they want, it’s not my storage, not my server used to host potentially illegal content.

Self-hosting public services where you are the only authenticated user and sole publisher of content is easy (using your public forge as a mirror with account creation disabled is fine), hosting other’s people content is another can of worms. Think twice before you do that.

See you back on Debian in a few months

The rate limit for GraphQL is allowing up to 5000 points per hour

When using the automatic GITHUB_TOKEN created for each GH actions workflow, the limit is only 1000 requests per hour [1]. The list has 1080 projects whose source is hosted on github, and we must do 2 API calls for each one because for some reason the date of last commit to the default branch is not available directly from the repos API endpoint [2] (do not trust updated_at/pushed_at, it’s a lie). So we currently have to add a sleep of ~7 seconds between each API call to not hit the rate limit for the metadata update job that runs daily.

The limit of 5000 requests/hour only applies to personal access tokens which have far too many permissions on my personal account to be used in a shared/community project.

Someone in https://old.reddit.com/r/selfhosted/comments/15y7y36 mentioned https://analyzemyrepo.com/analyze/inventree/InvenTree which may be interesting to integrate somehow.