self-hosted

Bilingual

Using an open model feels surprisingly good
2 months ago
- The user has been using Claude and ChatGPT for two years but was never a strong advocate for open software.
- Using opencode on their own inference endpoint (Modal with Kimi K3) felt surprisingly good and freeing, as they owned the endpoint and data remained private.
- The motivation was to avoid upgrading their Claude/ChatGPT plan; instead, they tried Kimi K3, recently launched on Modal managed endpoints.
- Setup took about 5 minutes, and the experience felt like cutting ties to other providers, allowing them to breathe freely.
Self-hosting my photos with Immich
2 months ago
- The author wanted a local backup for Google Photos after the gphotos-sync tool stopped working in March 2025 due to OAuth restrictions, leading them to set up Immich, a self-hostable photo manager.
- Immich was installed on a Ryzen 7 Mini PC running Proxmox and NixOS, configured with 500 GB disk, 4 CPU cores, and 4 GB RAM, accessible via Tailscale VPN using tailscale serve to forward localhost:2283.
- For initial photo import, the official Immich CLI had issues with timeouts and ignoring Google Takeout metadata; the third-party tool immich-go was used successfully, as it pauses background tasks and handles Google Takeout archives.
- The Immich iPhone app was installed for automatic backup of new photos via Tailscale URL, with notifications disabled to avoid alerts during background uploads.
- Backups are set up via a systemd timer using rsync to copy /var/lib/immich to the author's PC, which follows a 3-2-1 backup scheme.
- Immich lacks photo editing features (e.g., rotate, crop), requiring manual download and use of GIMP, and sharing is still done via Google Photos.
- The author chose Immich over Ente because Immich is more popular in their network, and Ente's end-to-end encryption platform was deemed unnecessary given existing encryption at transit (Tailscale) and disk (LUKS) layers.
- The author finds Immich delightful and fast, but notes areas for improvement: the official immich-cli needs better reliability and Google Takeout support, and iPhone auto backup configuration is too complex.
Trifecta - Bert Hubert's writings
2 months ago
- Trifecta is a standalone, open-source image sharing solution with minimal dependencies and a small codebase that can be fully audited in a day.
- It offers full user and session management, drag-and-drop multiple images, posts with multiple images, optional titles and captions, and time-limited public sharing.
- Features include passwordless login via email, lost password recovery, a single tightly locked cookie, and deployment options as source, binary, Docker, .deb, or .rpm.
- The software uses a C++ backend with a minimalistic JavaScript frontend, stores data in SQLite, and connects to an SMTP server for emails.
- Designed for company, group, or personal use, NOT for public anonymous sharing; recommended to run behind a TLS-terminating web server.
- Database auto-configures; an admin user is created with a random password using the --rnd-admin-password flag.
- For security, it is recommended to run the Docker image with automatic updates via Watchtower.
how i write blog posts
2 months ago
- Uses Zola as static site engine but mildly dissatisfied, doesn't care to switch.
- Writes drafts from any device (desktop, laptop, phone) that automatically appear on a hidden subdomain of jyn.dev.
- Setup includes Caddy reverse proxy to live Zola server, with HTTPS and WebSocket support for live reloading.
- Content directory is sym-linked to Obsidian notes folder, synced via Obsidian Sync across all devices.
- Uses a 'blog post' template in Obsidian with Zola header; writes normal Markdown.
- Publishes by committing changes to git and pushing to GitHub.
- Typically writes outlines on mobile, cleans up into prose on desktop; sometimes uses nvim for complex HTML.
- Added autosave in nvim using a Lua timer.
- Caddyfile is simple; includes websocket proxy for live reloading.
- Downside: limited visibility on mobile for sync issues; uses tailnet to SSH into desktop to check server.
- Benefits: live reloading from any editor/device, easy sharing with friends for feedback, easy to take down by killing Zola server.
Show HN: Cygnus – A fast, lightweight self-hostable serverless runtime and PaaS
2 months ago
- Self-hosted serverless for Bun and Node with kernel-sandboxed cages and sub-100ms revival.
- Full Node compatibility via namespaces and seccomp, no container runtime.
- Single Rust binary handles TLS, SNI routing, and proxy with io_uring splice.
- Real egress networking using veth and nftables, no userspace proxy.
- Three deployment methods: dashboard, Git push with previews, and CLI.
- Instant blue-green rollback with five last deployments kept on disk.
- Scale to zero, idle apps reaped after 10 minutes, cold starts in 15-45ms.
Show HN: DeepSQL – A self-hostable AI DBA agent for Postgres and MySQL
2 months ago
- DeepSQL monitors workloads, optimizes slow queries, and delivers BI dashboards, reducing database costs by 38%.
- One-line install and self-hosted in 15 minutes, running on any Linux box, EC2, or container within your VPC.
- Supports Postgres and MySQL read replicas with VPC-peering and read-only credentials, ensuring no data leaves your infrastructure.
- Teaches business rules in plain English and analyzes slow query logs (pg_stat_statements or MySQL slow log) to cluster, rank, and recommend improvements.
- Provides a built-in chat agent and integrates with Claude, Codex, and Cursor via MCP or CLI, with role-based access, query policies, and audit logs.
- Offers deep dives on cutting Aurora costs, replacing Tableau, and reducing observability bills.
I Revived My Broken MacBook into My Own Personal Cloud
2 months ago
- Revived a broken 2017 MacBook Pro with a broken keyboard into a personal private cloud.
- Installed Ubuntu 24.04 Desktop using an old Raspberry Pi SD card as installer.
- Fixed Broadcom Wi-Fi drivers with a script that runs on every restart.
- Deployed k3s and Flux CD for GitOps-style Kubernetes orchestration.
- Disabled lid sleep to keep server running continuously.
- Solved network issues: ISP used CG-NAT, requested a public IP and kept IP-update script running.
- Used a local DNS provider (Domene.shop) for SSL certificates via Let's Encrypt.
- Deployed OpenCloud (file storage) and Open WebUI (AI chat) on the cluster.
- Managed Kubernetes manifests with takk, an infrastructure-as-code framework in Python.
- Built a FastAPI bridge to connect Obsidian notes to the AI for querying files.
- Added monitoring with Prometheus MCP and alerting via takk (email on crash loops).
- Plan to add local LLM, self-healing agents, and hardened backups.
GitRoot
2 months ago
- GitRoot is a lightweight, powerful git forge requiring just one binary to run.
- All data is stored directly in Git as plain text files, not in a separate database.
- Access control is managed via a .gitroot/users.yml file, restricting edits by branch.
- Users can create branches and push changes; only the owner can merge into the default branch.
- Plugins are independent and optional, allowing customizable features like boards or web interfaces.
- GitRoot is in alpha version, not yet recommended for production use.
- The project is self-hosted on a GitRoot instance, with documentation available for contributions.
- Future goals include implementing features like web interface, issue management, and pull requests.
Hister: Own Search Engine
3 months ago
- Hister is a privacy-focused, self-hosted search tool that indexes web pages, browser history, and local files with full-text and semantic search capabilities.
- Features include automatic capture of visited websites, advanced querying options, offline result previews, support for multiple users, and browser extensions for Chrome and Firefox.
- It emphasizes data privacy by keeping all information local, with no telemetry or third-party services, and includes tools like content rules and a terminal UI for enhanced usability.
Show HN: Pug.sh – open-source product analytics
3 months ago
- Pug is an open-source product analytics tool that tracks page views, clicks, scrolls, and custom events, linking each event to a user profile.
- It offers auto-tracking with SDK initialization, requiring no event plan or instrumentation sprint, and supports identify() to merge anonymous history into user profiles upon sign-in.
- Pug provides six insight types: Trends, Funnels, Retention, Segmentation, User Flow, and Top K, all running on raw events in ClickHouse for fast, filterable answers.
- Users can pin insights as tiles on a shared dashboard with consistent time windows, period-over-period comparisons, and threshold alerts for KPIs.
- It can be self-hosted as a single Go binary with PostgreSQL and ClickHouse, or used via a free cloud service during open beta, with pricing announced later.
- The tool includes customer engagement features for campaigns based on profiles and events, with upcoming support for web push, SMS, Android/iOS push, and webhooks.
Show HN: Inkwell – An RSS reader for e-ink devices
3 months ago
- Inkwell is a self-hosted RSS/Atom reader that converts articles into static HTML for Kindle browsers.
- It uses background jobs to pre-extract articles and transcode embedded images for instant rendering on the device.
- The documentation covers installation via source or Docker, self-hosting setup, reading views optimized for Kindle, and admin features for managing feeds.
- It includes authentication methods for Kindle devices without typing and a detailed configuration reference for YAML and environment variables.

self-hosted

Using an open model feels surprisingly good

Self-hosting my photos with Immich

Trifecta - Bert Hubert's writings

how i write blog posts

Show HN: Cygnus – A fast, lightweight self-hostable serverless runtime and PaaS

Show HN: DeepSQL – A self-hostable AI DBA agent for Postgres and MySQL

I Revived My Broken MacBook into My Own Personal Cloud

GitRoot

Hister: Own Search Engine

Show HN: Pug.sh – open-source product analytics

Show HN: Inkwell – An RSS reader for e-ink devices