If i remember correctly on my gitea (now forgejo) the default is open registration which really shouldn’t be the case for projects that are targeted towards self hosters.
My inital install was a long time ago so I don’t remember for sure
I ran nextcloud for years on good hardware and its always been the weakest self hosted app I have. I moved to seafile for a bit and then ultimately owncloud OCIS.
OCIS is a modern app that is massively better since its written with modern languages / frameworks
Traekif can reverse proxy just about anything include ssh.
That being said I don’t. For stuff like ssh I connect with wireguard first then ssh. For stuff like immich I directly expose that behind traefik so I can share images with others. For stuff like vaultwarden I have that behind traefik but internal only so you need wireguard first then you connect to vaultwarden.local.domain.com
FreshRSS self hosted. Just navigate to the website in your browser, install it to android via a browser ‘app’. Assign the app to a gesture.
Now i swipe from the left and my RSS opens. Fully self hosted with no tracking beyond the websites you visit.
I’m on version 1.143.1 I skipped all the beta timeline stages and updated from 1.135 I think.
About 30k photos and 2k videos
The web interface was great, the android app (pixel 8) was very slow. Even local assets were slow.
Since update, its way faster. Feels really good, responsive, low latency. Sync and backups have been no issue at all.
Sync on android turned itself off after updating, but I turned it back on, selected the same folders to watch and it processed for a few mins and then everything continued to work with no issues.
On the previous version, sync was pretty good. Sometimes it didn’t trigger as a background process and i had to manually open the app but it worked. New sync also works well though haven’t yet uploaded a large number of things.
I’ve been using this which works great.
https://f-droid.org/packages/com.sbv.linkdroid/
Works with my single sign on setup as well which was critical. Creates a nice share target on android so any share button gives the option of sending the link to linkwarden
This along with borg warehouse is the GOAT setup. Many others exist of course.
Borgbase for offsite backup as well. Has been rock solid and I test download files from there every now and again with no issues. Never really did a full restore since its my 3rd line backup
I did his when I moved from unraid because I wanted better infra as code for my dockers etc. Kept unraid with all my drives and use NFS mounts from another machine with proxmox that runs a VM for my dockers
Owncloud infinite scale seems, well, much more scalable
I have traefik running with all config done via the docker compose files and I just couldn’t figure out how to get the bouncer middleware to work without causing problems. Doesn’t help that most examples seem to be based on the static yaml based config so I’m trying to convert jt. Would appreciate anyone who might know of a resource that explains with docker compose environment tags.
I also have middle ware for things like authentik which complicates things.
Others have already mentioned the question makes no sense but for others that are curious.
Headscale is a self hosted tailacale alternative and for a small number of devices plain wireguard is as well. I use plain wireguard on my router to allow LAN access from my mobile devices.
I want rock solid stability and simplicity since I use this for to debug issues if they crop up while I’m away.
The thing I like most about linkwarden is that it integrates with my existing single sign on (authentik). After you get to a certain number of apps, it becomes extremely annoying to not have this so I now look for SSO as a major factor when deciding what app to use.
The small android app that allows android share button to send links to the app and full archive options also make it fantastic
The native rewrite of the Android app is butter smooth. I think it’s still technically in beta, but I’ve been using it for more than a year.
Also, I don’t think I ever use the pop-up on mobile. Instead, I use the button on my keyboard. Gboard and FUTO Keyboard both show bit warden buttons at the top when I’m on a logon page
Mine works instantly on a pixel 8. There is a notification that is always active for the gotify app. I believe an always on notification is required for instant pushing with non google apps. Maybe you haven’t enabled it in the settings somewhere?
Gotify along with an external email service. I get each notification twice, immediately
This is what you’re really looking for:
https://github.com/owncloud/ocis
Full rewrite in Go. Lots of features. Much better performance. More stable than nextcloud.
deleted by creator
No reason not to have both. Things like vaultwarden do warrant an extra layer so setup wildcard domain for internal services x.local.example.com and then normal certs for external stuff like y.example.com.
To get internal stuff you then need your vpn as well to access it. You can now easily choose what risk you want on a per app basis.
Technotim has a good video on this
I use self hosted borg repo to backup to a local server and then also borgbase is a service that allows remote backup.
Borgmatic automates all of this.
I used this guide to use traefik with a wildcard certificate from let’s encrypt that is internal only. So I have
Immich.domain.com
And also
Vault.local.domain.com
This allows something like vaultwarden to only be accessible on my internal LAN while something like immich is exposed so I can share albums with anyone I want.
If I want to connect to vaultwarden while away from home, I connect to wireguard first then access via the local URL.
In docker I don’t even close the app’s ports, so even locally everything has SSL everywhere.
https://youtu.be/liV3c9m_OX8