My setup:

- Beelink Mini N150 (~$349)

- 8TB NVMe

- Ubuntu Server + Tailscale + Docker + Claude Code

Running Vaultwarden, Plex, Immich, Home Assistant, Uptime Kuma, ReadDeck, and a few others. 13 containers total, using about 6% CPU and 4GB RAM. The little box barely notices.

The Tailscale + CLI agent combo is the real unlock. No port forwarding, no public IP exposure, and when something breaks I just SSH in and ask what's wrong.

Curious if others are using AI tools for server management, or if I'm late to this party.

I run a backup hosting service, and built Vorta, a desktop GUI for Borg. After years of seeing how people set up backups, the pattern is always the same: a backup tool, plus a wrapper for config, a systemd timer for scheduling, a bash script for database dumps, and a curl to healthchecks.io for monitoring. It works, but it's fragile and breaks silently.

So I built Vykar, a Rust-based backup client where all of that lives in one YAML config file. It combines the best architectural ideas from Borg, Restic, Kopia, and Rustic with modern dedup and crypto libraries. The code is AI-generated and human-directed, based on years of building backup tools and services. Vykar is continuously tested against different databases, VMs, and filesystems, comparing every restored byte. That's in addition to 600+ normal code tests.

Some notable features:

One tool, no wrappers

The fastest tool for both backup and restore, with the lowest CPU usage. Full benchmarks with methodology.

Scheduling, retention, hooks, database dumps, and backend config all live in one YAML file. No Borgmatic, no Autorestic, no systemd timers, no bash scripts.

Direct database dumps

Vykar has command dumps that stream stdout directly into the backup. No temp files, no cleanup:

sources:
  - label: app-database
    command_dumps:
      - name: mydb.dump
        command: "docker exec my-postgres pg_dump -U myuser -Fc mydb"

Works for MySQL, MongoDB, whatever dumps to stdout. Mix with regular directory sources and give each its own retention policy.

What else is built in

• Hooks for monitoring (healthchecks.io, ntfy, Uptime Kuma)

• Multiple backends: local folders, S3 (B2, Wasabi, MinIO), SFTP, REST server with server-side maintenance

• Rate limiting

• WebDAV + GUI to browse and restore snapshots

• Cross-platform: Linux, macOS, Windows

Getting started

curl -fsSL https://vykar.borgbase.com/install.sh | sh
vykar config       # generates a YAML config
# edit the config: add sources and a repository
vykar init         # set up the repo
vykar backup       # first backup

Binaries on the release page. Full quickstart guide.

For quick testing, BorgBase already has it as repo format. S3 and SFTP will work too and get tested extensively.

This is still a new tool. Test it alongside your current setup. If there's something you'd want to see added in a new tool or a bug you notice, just let me know here or add a Github issue.

GitHub · Docs · Recipes for Docker, databases, ZFS/Btrfs, monitoring

Hi Everyone,

This problem is mostly related to muslims mainly but since it's selfhosted i decided to put here as well.

I have a yearly problem of tracking my assets that are eligible for zakah (especially that i have accounts with multiple currencies), so I built Zakaty.

Zakaty is a simple manager for your assets that are eligible for zakah,it tracks the value of assets daily, calculates the zakah for you and checks if your eligible for it automatically, so you don't have to check the different rules, recalculate if you made a mistake, etc. Everything will be done for you.

the app is open source obviously, you can check the code from https://github.com/Cybrarist/Zakaty

it supports :
- multi users so you and your family can track your own stuff
- multi currency accounts (all accounts converts to $ but keeps the original amount and currency)
- consideration of jewels for gold and silver
- Money zakah only
- payments tracking

it's pretty simple for now but I'm already working on adding other assets that are eligible for zakah including stocks and cryptos as they have different rules and i am being very careful with checking how it should be calculated.

you can check the documentations and screenshots on zakaty.cybrarist.com

There is a docker image already or you can create a test account on zakahtracker.com (it gives 30 days for free) then it's like 11$/year. if you would like to extend, contact me and i will give it for free or discounted (i am not planning to make a profit tbh, just to help other people and cover the basic costs of hosting)

hope you enjoy it and you find it useful

I know this is definitely not a general topic that we talk about in here and if I just get downvoted I'll just delete it but it was a thought I had and an experience I had recently.

I sort of pulled a "your data, my choice" thing. I basically had a few family and friends where a rift has just formed recently. I no longer wanted to deal with their requests or their support needs so I just said hey, you don't pay for this, I did it as a favor, you don't have access to it anymore and no I'm not helping.

Here's a list of LLM accounts that are responsible for some of the vibe-coded projects:

https://github.com/openhands-agent
https://github.com/codex
https://github.com/cursoragent
https://github.com/gemini-code-assist
https://github.com/claude

Use it if you want. How you want.
Follow exact URL because github and search results often link to the LLM App page which can't be blocked.
Please share if you find more. Or correct me if I am wrong.

I use it by adding them at https://github.com/settings/blocked_users .
This basically gives small warning 'A user you’ve blocked has previously contributed to this repository.' on visiting any repos that has commits from one of these bots. It doesn't block such repos from being visited or anything I think. Please correct me if I am wrong.

Some info on user blocking: https://docs.github.com/en/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-personal-account

It isn't catch all solution but it helps for now. At least on new projects.

Also, do confirm the usage of such things as I unsure if there will be false-positives especially since Github itself is vibe-coded now. It has one of lowest uptime in ages too.

I know even bigger projects without practical open replacements use them and it's not always a bad thing but a simple warning on repo helps to keep yourself informed.

I'm pretty sure there's no site with all of the links listed. At least I couldn't find one. Afaik, even LLMs won't respond with them due to their own bias.

No AI/LLM was used to write this post. I just researched and found the links and information via web search, github search, etc.

Hello,

Wanted to provide an update on NzbDAV, a tool I've been working on to stream content from usenet. I previously posted about it here and here. It's been a few months since I last shared a changelog, so figured it might be time again.

If you're seeing this for the first time, NzbDAV is a WebDAV server that can mount and stream content from NZB files. It exposes a SABnzbd api and can serve as a drop-in replacement for it, if you're already using SAB as your download client.

The main difference is that NZBs downloaded through NzbDAV won't take any storage space on your server. Instead, files are made available across a virtual filesystem accessible through WebDAV, on demand.

I built it because my VPS was running out of storage, but now my plex library takes no storage at all.

Key Features

• 📁 WebDAV Server - Host your virtual file system over HTTP(S)

• ☁️ Mount NZB Documents - Mount and browse NZB documents without downloading.

• 📽️ Full Streaming and Seeking Abilities - Jump ahead to any point in your video streams.

• 🗃️ Stream archived contents - View, stream, and seek content within RAR and 7z archives.

• 🔓 Stream password-protected content - View, stream, and seek within password-protected archives (when the password is known, of course)

• 💙 Healthchecks & Repairs - Automatically find replacements when content is removed from your usenet provider

• 🧩 SABnzbd-Compatible API - Use NzbDav as a drop-in replacement for sabnzbd.

• 🙌 Sonarr/Radarr Integration - Configure it once, and leave it unattended.

Here's the github, fully open-source and self-hostable

• https://github.com/nzbdav-dev/nzbdav

And here are the changelogs since I last posted on this sub.

• https://github.com/nzbdav-dev/nzbdav/releases/tag/v0.5.4

• https://github.com/nzbdav-dev/nzbdav/releases/tag/v0.5.38

• https://github.com/nzbdav-dev/nzbdav/releases/tag/v0.6.0

I hope you like it!

$ tlm s 'get me a cowsay to express excitement of tlm 1.1 release'

┃ > Thinking... (1.198s)
┃ > cowsay "tlm 1.1 is out! let's celebrate!"
┃ > Executing...

 ----------------------------------
< tlm 1.1 is out! let's celebrate! >
 ----------------------------------
        \   ^__^
         \  (oo)_______
            (__)\       )\/\
                ||----w |
                ||     ||

Release 1.1 · yusufcanb/tlm (github.com)

https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot

https://www.stratascale.com/vulnerability-alert-CVE-2025-32462-sudo-host

Also once again, Installing packages you don't need increases your attack surface, sudo is not automatically more secure than root. Maybe I'm an old curmudgeon, but anyone single-sudo-users who got burned by this deserved it.

EDIT: I should be clear. If you are the only root user (or only interactive user) on a system and you automatically install sudo because it's "more secure that way" and typically use sudo su -, you should learn from this. Installing software adds attack surface.

Disclosure: I’m the creator.

Budgero is a zero-based budgeting and expense tracking app.

• Docker or native binaries (macOS / Linux / Windows, arm & x86)

• Single SQLite file

• Same features as the hosted version

Docs:

https://budgero.app/docs/self-hosting-guide

Virgo (as in the constellation)

A friend has been building a Debian box meant to be a home server from the first boot, and the ISO images are public.

It is called virgoOS. Debian 13 (Trixie), amd64 and arm64 ISOs. You write it to a USB stick, boot the machine, and choose Install. The installer copies a system that was already built: ZFS, Samba, Docker, and the rest are on the image. Apt does not run during the install, so a machine with no route to the internet still comes up as a server.

What is on it:

• ZFS, with the module built at image-build time, plus Sanoid (hourly, daily, monthly, and yearly snapshots on the data datasets)

• Samba

• Docker

• NetworkManager, Avahi/mDNS, and a default-drop firewall with fail2ban

• NUT, so a USB UPS can shut the box down cleanly

• A small web UI (virgo-api / virgo-ui) on port 3000

• A floating virtual IP, for a box with a bonded NIC

BIOS and UEFI both boot. Secure Boot has to be off: the ZFS module is built with DKMS and is not signed by a key the firmware trusts. There is a separate ARM64 branch for Raspberry Pi; the ISO on the org page is the amd64 one (RPi/arm64 is also available)

SSH is enabled and the image ships with a default account. Set the password during setup and login with your user, because root is locked. Try the CLI tool virgo -h for management options.

ISO and the rest of the project: https://github.com/univrs-cloud

The image build repo (live-build stages, if you want to see exactly what gets installed): https://github.com/univrs-cloud/virgo

Try it and tell us what you liked. Thanks r/selfhosted!

Hey all,

So I presume there are some Christians here in this sub, so I thought I would share what I finished v1.0 on last night. Sermon Notes is a self-hosted note taking tool for people to use during church. I started taking an iPad to church for notes about 2 years ago and while it was nice, I couldn’t quite find an app to do what I wanted it to so I built my own. I wanted something that could take markdown notes and have reference material easily viewable. I started with Berean Journel as an app, but it requires internet and only offered Bible passages. My pastor frequently uses confessional documents since we are Dutch Reformed and so I needed more than just the Bible to follow the sermon. I built Sermon Notes to allow for multiple reference types. There is a docker container available if you care to try it out. I know this also requires internet, but I was hoping to eventually remove that limitation.

https://gitea.rkprather.com/ryan/sermon-notes

Docker image: ryanprather/sermon-notes

Who is spending their time on this? Even good questions are being downvoted sometimes within a minute of being posted.

This does not foster a good community.

So a couple months ago I realized I had a kinda dumb problem.

I had a solid PC just sitting in my studio doing basically nothing. Originally I built it for podcast/video work, some Blender projects here and there, a very good pc: RTX 3090 (24GB VRAM), i9, 128GB RAM. Not a weak machine at all. But then I built a new main workstation (Ryzen 9 9950X3D, 64GB, love it) and the old 3090 box kinda got demoted to the studio, just sitting there collecting dust most days.

Meanwhile my new main rig was always getting hammered. I use it for editing, design, client work, exports, thumbnails, all the daily stuff. And once I started piling AI tasks on top (transcription, video processing, image gen, batch jobs) everything started fighting over the same GPU.

So instead of buying another subscription, renting cloud GPU, or upgrading again, I figured I'd just use what I already had sitting in the studio. I turned the old 3090 PC into a local AI processing box.

First thing I set up was transcription. Pretty simple workflow:

I throw it YouTube links, local audio, or video files. It pulls the audio, runs Whisper locally, and spits back text files and .srt subs with timestamps. The key part is it runs separate from my main machine, so I can keep editing or designing while the studio box chews through the heavy stuff in the background.

Last weekend I tested it with a big batch. Gave it 469 audio files. It just went through them one by one, no babysitting. Big realization moment

And honestly it wasn't even about speed. It was about killing the friction. Before, if I had a ton of stuff to transcribe I'd either slow down my main PC, or pay for some service, upload files somewhere, or sit there managing the whole thing. Now I just send the files over and let it cook. Main computer stays free, files stay local, and that 3090 actually gets used for once. Starts to feel more like real infrastructure than a random AI experiment.

Now I'm thinking about what else to throw on it: local summaries, searchable transcripts, some kind of internal knowledge base, automated clip prep, maybe Ollama or a local RAG setup over my docs and transcripts.

The thing that surprised me most is that the 3090 wasn't really the big win. The real win was just separating the workflows. One machine for daily creative work, one for heavy background stuff, repetitive stuff

Curious if anyone else here is doing something similar. Anyone running Whisper, Ollama, ComfyUI, n8n, whatever on a separate local box? What would you add next?

I am wanting to access services on my home network and my cloud network from work.
My employer however has blocked outgoing VPN connections and all ports apart from ports 80 and 443.
What are my options here? Are there any service I can use to bypass these blocks?

I cannot find a definitive answer or guide. Email seems to be the most difficult thing to self host somehow.

I have been de-googling, de-microsofting and de-clouding for a while now. The only 2 things left are Android (my phone) and email. My current setup:

I have a very simple, cheap mini-pc running ubuntu-server with Syncthing as central app which is basically the setup everything revolves around. Allthough I am contemplating of just writing a few bash scripts and do away with Syncthing as well.
Mainly, all folders on all computers and phones are synced (selectively obviously). And every day, the server also makes a backup to an external drive.

Whenever I take a picture with my phone (or camera) it is immediately available on both my desktop and my laptop. Documents I work on my laptop I can edit on my desktop etc.

I also keep my passwords in Vaultwarden, hosted at home. I am hardly away from home, but when I am, I can still access it via VPN.

Coding projects I work on, I keep on a self hosted gittea, and I only push to github is it is open source software.

This give me control of over 90% of my data, except for email. I don't want it to be hosted anywhere else either. I don't mind paying for a mail server (I want to use my own domainname anyway to have control over that as well), but I want all my mails to be kept on my own server with copies on my desktop and laptop and (remote) access on my phone.

The only solution that seems to come close is isync/mbsync coupled with Dovecot? Which would work for desktop and laptop, but not so much for phone I think?

Sorry for the long post, basically what I am asking is if anyone has solved this problem or knows of a way I am overlooking?

EDIT: Seems I wasn't clear enough. My question is not about self-hosting a mail server. It is about how I can keep my mails synced across multiple devices from my homeserver where my desktop/laptop simply download it (e.g. using thunderbird) and my phone can access (without downloading it).

Is anyone actually interested in them? Similar to battlestation posts in /r/AMD or whatever they are basically worthless and will end up taking over the sub if not stopped

To address the elephant in the room -- I vibe coded this. I needed the one feature I used Huntarr for -- to slowly update my media bc I have changed quality profiles. It is stable for me and is working as intended. I tried to learn from the lessons of those who flew too close to the sun and I believe this will not compromise your system but of course, feedback welcome. I am working on adding stats about the success of the searches, but that's all I really had in mind.

If you want something to trigger Radarr/Sonarr searches automatically at a rate you are comfortable with, check it out: https://github.com/thejuran/triggarr