Oh yeah sorry ! For the ease of use part I ment the NAS stuff which already comes bundled with all the necessary software to keep things easy but less customizable !

Yeah if you get IT enterprise hardware for free it’s kinda similar to repurposing, sooo that’s a great deal and lucky you !!!

But I would never put 1$ myself into specific server stuff ! Except if one day I want to contribute to the self-hosted/opensource community and host something like newpipe that needs to be publicly available.Then yeah, proper hardware and software stuff is mandatory !

Sorry if my comment came by rude, that wasn’t my purpose !

Yeah… Never had a specific “server” certified hardware and always repurpose my hold hardware stuff. Never failed me !!

However, there are some functions specific to NAS’ like low power and other stuff people mention but I already forgot.

IMO all this NAS and certified server stuff is good for Enterprise shit and the like… But for homelabbing it’s probably overkill and way to much overpriced for the little gain…

Except maybe for the ease of use and plug and play function? Each one it’s own I guess !

Ohhhhh ! Sometimes I just need to sh*up !

Thanks for the clarification.

Huh? Yeah it is… It’s a self-signed intermediate CA, signed by a self-signed rootCA.

In my case a miniCA in my lan.

I don’t get that…

I have self-signed SSL certificate and intermediateCA installed on all my devices and works flawlessly with every application that accept those (on android the manifest.XML has to allow user based certificate which is in most cases).

One exception on Android was the use of MPV which doesn’t do that and never will? However, the web player video type from official application works without issues…

I have navidrome, jellyfin, Ironfox, LibreTube, KoReader, Findroid… All work flawlessly with self-signed certs !

The issue here (as said in the second answer of his linked jellyfin post) is that them needs a reverse proxy that takes care of the SSL handshake and not jellyfin directly. So OP was missing a lot of good information in them’s first post…

Production is my testing lab, but only in my homelab ! I guess I don’t care to perfectly secure my services (really dumb and easy passwords, no 2fa, not hiding plain sight passwords…) because I’m not directly exposing them to the web and accessing them externally via Wireguard ! That’s really bad practice though, but any time soon will probably clean up that mess, but right now I can’t, I have to cook some eggs…

There are 2 things though I actually do have some more complex workflow:

• Rather complex incremental automated backup script for my docker container volumes, databases, config files, compose files.

• Self-hosted mini-CA to access all my services via a nice .lab domain and get rid of that pesky warning on my devices.

I always do some tests if my backups are working on a VM on my personal desktop computer, because no backup means that all those years of tinkering for nothing… This will bring up some nasty depression…

Edit: If have a rather small homelab, everything on an old laptop, still quite happy with the result and works as expected.

Really cool stuff !! Something I need to try out for sure !

Just to bad they didn’t add a multiuser setup example :( !

If you are doing any kind of multiuser mail node, you should have a separate SMTP system in front of this one that performs any necessary validation.

Maybe something worth a shot is a direct Wireguard server/client connection. While I don’t know how it works with double NAT (wireguard client with double nat) making your home server act as a direct tunnel would solve all your issues.

• Access your services from everywhere without middleman.

IIR, tailscale uses wireguard under the hood and you’re already hosting things on your home server, so maybe this could be worth a try :) !

Back in the day, that’s what I did ALOT on Windows. Specially because of piracy and my younger me having no idea what he was doing XD !

Still happens on Linux with EndeavourOS but not for the same reasons ! There are millions times more ways to break stuff on Linux but I always learn Something new during the process.

Story time:

Learned the other day that some config files are loaded in a specific order and depending what display manager is installed. That was kinda eye opening to understand cause my system didn’t load .profile when .bash_profile was present and I didn’t understood why ! Thanks Archwiki !

I was quite impressed by how it looks and the free option ! However, seeing Google tag manager and tiktok analytics domains and I’m already out !

I was in the same boat… I just wanted a simple god damn self-hosted cloudStorage without any nitty gritty or all the bloat that comes with most local/self-hosted cloud solution…

Syncthing is good, but not really a cloud storage solution (I love syncthing and I use It to sync all my backups !!).

Give SFTPGo a try :) It also has a WebDAV functionality if you wan’t to use it that way ! It just plain file storage with security features. However, not sure there are any application available, I mostly used it as web application :).