I agree with you, but this was specifically about jellyfin.

I don’t think so, but don’t quote me on that. My machines come with a 65w charger.

A micro sized PC with an i5 and 8gb or ram can cost under 100€, and it’s way more powerful compared to a pi. Power efficient too. That’s what I used for a long time for my jellyfin server.

I personally use my home lab to test and learn, and I try to mimic a corporate environment. I have multiple instances of DNS, proxy, etc and I have a “prod” and a separate “staging” k8s environment. I try as much as possible, without going nuts about it, to update and try new changes that might be breaking in the staging cluster.

I don’t think I’ve ever encountered what you say… I use WG it to access a network, not a device. I have a few dozen devices, physical and virtual, why should I set up wg on all of them? Tailscale, maybe, it’s a different story, but I prefer to “self host” and not rely on a 3rd party provider. Wireguard was relatively easy to set up too, a few years ago… and in the meantime, if I need to add a new client, it’s a two minute job.

Right, but I have wireguard on my opnsense. So when I want to reach https://jellyfin.example.com/ , if I am at home, it goes phone -> DNS -> proxy -> jellyfin (on the same network). If I am connected to the VPN, it goes from phone -> internet -> opnsense public ip -> wireguard subnet -> local subnet -> DNS -> proxy -> jellyfin. I see some unneeded extra steps here… Am I wrong?

Oh, I get that, but it just doesn’t make any sense to me to be physically next to the server, and connect to it via VPN…

My network is not publicly accessible. I can only access the internal services while connected to my VPN or when I’m physically at home. I connect to WG to use the local DNS (pihole) or to access the selfhosted stuff. I don’t need to be connected while I’m at home… In a way, I am always using the home DNS.

Maybe I’m misunderstanding what you’re saying…

I can stay connected, still works, but I don’t think I need the extra hoops.

I also have a different subnet for WG. Not sure I understand what you’re saying…

Same, wireguard with the 'WG Tunnel" app, which adds conditional Auto-Connect. If not on home wifi, connect to the tunnel.

60k stars for a free open source self hosted project? I’d say that’s a really healthy number. Jellyfin has 37k.

I did have backups, it was an easy fix. I had a pihole -up on a crontab for years, probably not the best idea :)

FW rule accept :53 from pihole only, deny :53 from all. I had some devices with hardcored DNS settings (8.8.8.8).

Pihole 6 broke my DNS (dnsmasq), and since I had a fw rule in opnsense to only use pihole’s DNS, and deny public DNS access, it was an early rise for me :)

Why not just use forgejo’s actions and runner?

I use lidarr + jellyfin + symfonium (android), and that works for me. I mainly listen to full albums, and don’t play around with playlists or recommendations though. I get flac quality and lyrics, remote access to my home-lab via VPN (no offline sync), Android Auto support…

Check out crowdsec. Like fail2ban, but with crowdsourced lists on top.

I did not know about opencloud.eu, and now I’m intrigued. I was always looking for a simple Google Drive alternative, but Nextcloud was too much. Will definitely keep an eye on it.

Got a .cc for my home-lab, and a very cheap .li for a website I’m building. Other than that i got .de, .eu and .com for my name and my kids names. Don’t know if they’ll ever use them, but meh, a .de is a few cents per month.

I use Wireguard, so when I am outside, connected to my VPN, I use the internal DNS (pihole) for accessing internal network services using their fqdn.