Absolutely. There are different options.
If you want something simple, just contacts and calendar, check out Radicale. I’ve been running radicals for years and its great.
If you want something more like a whole google suite replacement (contacts, calendar, drive, docs, photos, etc), look at Nextcloud
I’ve been using Ubuntu server on my server for close to a decade now and it has been just rock solid.
I know Ubuntu gets (deserved) hate for things like snaps shenanigans, but the LTS is pretty great. Not having to worry about a full OS upgrade for up to 10 years (5 years standard, 10 years if you go Ubuntu pro (which is free for personal use)) is great.
A couple times I’ve considered switching my server to another distro, but honestly, I love how little I worry about the state of my server os.
BBSes are back!
Ytdlp works with Spotify too iirc, and there are Spotify downloaders out there too.
I self host vaultwarden and its great. Its an easy self host, and in my experience, it has never gone down on me.
That being said, my experience is anecdotal. If you do go the vaultwarden route, realize that your vault is still accessible on your devices (phone, whatever) even if your server goes down, or if you just lose network connectivity. They hold local (encrypted at rest) copies of your vault that are periodically updated.
Additionally, regardless of the route you take you should absolutely be practicing a good 3-2-1 backup strategy with your password vault, as with any other data you value.
Karakeep might work for you
Rsync and NFS for me.
Totally fair.
Another great option is Yourls. I’ve been using it for years and it’s been fabulous
Check out OliveTin. I use it in a similar fashion to track when I take my daily meds and for other personal health tracking.
It’s a simple webapp that fires off shell scripts on your server. I store my data as CSV, but you can tailor the scripts to store and retrieve/present your data however you’d like.
Edit 2: adding that I host this on a Raspberry pi zero w. It’s ultra cheap. It’s only accessible on my lan by choice. I use a wireguard tunnel on my stupid cheap (~$1.50/month) vps to access it remotely.
Edit 1: fix link formatting
Careful with that you though. I thought the same thing but someone pointed out in another thread that depending on your system, it may update the firmware over USB when you do system updates.
Glad I’ve got an Brother laser that has no network connectivity.
Is this law broad enough to also catch up Proton and its services?
This attack by governments on encryption is getting more and more concerning.
So, this took way longer than I thought it would, mostly because I needed the time to sit down and actually type this up.
Full credit, I followed the instructions in this video from Wolfgang’s Channel
Prerequisites (this is based on my setup, the api key requirement will vary based on your domain registrar/service):
I’m running NGINX Proxy Manager, using this docker-compose.yml, which I got straight from the NGINX Proxy manager website.
version: '3.8'
services:
app:
image: 'jc21/nginx-proxy-manager:latest'
restart: unless-stopped
ports:
- '80:80'
- '81:81'
- '443:443'
volumes:
- ./data:/data
- ./letsencrypt:/etc/letsencrypt
I’ve got my domain managed by Cloudflare (yes, I know they’re evil, what company isn’t?), so these instructions will show setup using that, but NGINX Proxy Manager supports a whole bunch of domain services for the HTTP-01 challenge.
With all prerequisites in place, here are the steps:
Once you get a success message, you can start creating proxies with NGINX Proxy Manager for your internal domain. To do that you will need the ip address and port you are forwarding the domain to for your lan service. If you are using Docker containers, you’ll need the Docker ip, which you can get from the command line with:
ip addr show | grep docker0
You should get an ip address like 172.17.0.1
Otherwise you’ll just need the ip address of the machine you’re running the service on.
To set up a proxy redirect:
homepage.abcde.com, then press enter to confirm the domainOnce the save is complete you should be able to input the new domain for you lan services and get a secure connection.*
*Bear in mind some services require you to specify a valid domain for the service within the config/settings. Double check any services you may be running for this if you plan to use a reverse proxy with them.
This is exactly how I have mine set up and I really like it.
I’ve got an internal and external domain with a wildcard cert so if it’s a local only service I can easily create a newservice.localurl.com, and if it’s external I can just as easily set up newservice.externalurl.com
This looks awesome. I’m going to check it out.