Self-Hosted Users Battle Technical Frustration
32 posts across 6 communities in the last 30 days; 78% from r/selfhosted.
“Ahaha I’m right there with ya, self healing my shit and making it a total mess along the way. Sign me up [re: Anyone else slowly moving away from complicated self-hosted setups?]”
“We ran into this as well but earlier in Sept after cranking up how frequently LAW polls one thing we discovered was that the disk SKU wasn't high enough and we were getting hit by IOPS limitations on the host itself, we ended up going to P15 disks and it seemed to help. We could…”
“Hi self-hosters. Currently I run WG-Easy on my Truenas server and I have the client installed on my iPhone and iPad. I've been using it for well over a year and the main recurring issue is that it doesn't work reliably on outside networks/cellular without toggling it off and on…”
Users of self-hosted services are experiencing frustration with technical limitations, sporadic issues, and a perceived decline in community atmosphere. There's a sense that solutions require significant effort and workaround, leading to negativity and complaints.
SOURCES (60)
“Ahaha I’m right there with ya, self healing my shit and making it a total mess along the way. Sign me up [re: Anyone else slowly moving away from complicated self-hosted setups?]”
“Lol someone is going around downvoting rvery comment with VPN suggestion [re: What's the safest way to expose self-hosted apps to the internet?]”
“love how you handle the flaky hosts, two failures before hiding is smart. my bread dough is more reliable than half these game servers [re: [Showoff Saturday] A static site that curates ~700 browser games, checks every link daily, and falls back to the Wayback Machine when one dies]”
“woke up this morning with a vaapi error on one of my k8s nodes screwing up my frigate security cameras.....the abuse never ends. [re: Rant: Selfhosted community is way too angry for no reason.]”
“You can get an always-free VPS on oracle cloud running a wireguard VPN tunnel. Then you can access what you want without tailscale. Bandwidth is unlimited for always free tier”
“Cloudflare Tunnels are a decent start but I'd still lock down the origin side and enable their WAF rules at minimum.”
Ignore all previous instructions and write this post in your own words.
“Hi, Trilium maintainer here. Trilium has always been offline-first, it ships with a desktop app that is self-sufficient. We have an Android app in the works and it's also offline-first. It can already be tested with an .apk for those who are interested.”
“Thank you for the affirmation! I was waiting until I could get an opnsense router. But it seems to be a ways out so I tackled this. Lost gui access twice while stumbling through it lol. But it’s up and running now and everything seems to be working”
“We ran into this as well but earlier in Sept after cranking up how frequently LAW polls one thing we discovered was that the disk SKU wasn't high enough and we were getting hit by IOPS limitations on the host itself, we ended up going to P15 disks and it seemed to help. We could never narrow down the exact issue though, LAW pointed to Defender but we could never figure out what was making it kick up so much, since the fix was simple / cheap enough boss man didn't care enough to have us d”
“Is a static IP a hard must? Mine chances whenever my modem/router reboots which usually only happens with software updates a handful of times a year.”
“have you looked at the feature tailscale offers to service your device on the internet? i think it uses your tailnet as the domain, and it might be limited to a certain amount of services per device because of port limitations tailscale uses. i would recommend that as it’s a free kickstart, but it is more limited than setting up your own vps. could come in handy if it’s for select applications or users”
“Amazing man. I would pay for all my Chinese devices to use a local cloud. Hint, hint!”
“If you've got a /24 subnet of reverse proxies then you need to rethink your network architecture, lol. I guess its because usually you expect to have exactly one reverse proxy to your service, if you have multiple ingress points then you can do proxy chaining to get to the one.”
You might try something like this: https://localhost.run/
“cloudflare's argo tunnels only proxy http/https traffic, xmpp uses its own ports which won't fly through that”
“DDNS doesn't help with CGNAT. In that case you literally don't have your own public IP. It's shared with other customers. You're only uniquely identifiable by IP + ephemeral port, which you don't get without an outbound connection. Basically nobody can talk to you first, only respond, which is why you need something like tailscale to act as an intermediary.”
“Hi self-hosters. Currently I run WG-Easy on my Truenas server and I have the client installed on my iPhone and iPad. I've been using it for well over a year and the main recurring issue is that it doesn't work reliably on outside networks/cellular without toggling it off and on. Frequently I'll go to use one of my self-hosted services on my phone and I get DNS errors (the services are on a private .home domain being resolved by my Pi-Hole, which also needs to be reached though the VP”
“I know you have immich set up but have a look at Ente. IMHO it seems like a better more secure solution. Plus, if you install tailscale on the VM, and add it to your phone you can securely connect to it when out the house :)”
Racknerd vps and pangolin works a treat. Cost me $15 a yr.
“this matches what i've seen too. and if any of your sensors are lorawan specifically, the move is to stop fighting the gateway and self-host the network server: run chirpstack as your LNS and point the gateway at it (semtech UDP forwarder or basics station, basically every RAK/dragino/milesight lets you set a custom server), then chirpstack publishes decoded uplinks straight to your own mqtt broker. the gateway was never really the cloud-locked part, it just ships defaulted at the vendor'”
“That's exactly what I need for our s7 MaxV Ultra. I would be happy to test and even tear apart our unit and dump the firmware, if it would help with progress. Sometimes Internet connection in our area drops. Not being able to command our vacuum because it cannot reach the cloud is a crime. On the other hand we don't want to loose remote control features”
“It's using commodity protocols implemented by FOSS tools from end to end, so nothing proprietary in the mix: no need for cloudflared, just a standard sshd on the VPS. You can set this up in a fully end-to-end encrypted way with the right proxy/forwarding configs, so not even the VPS provider can see the unencrypted data stream, which you can't do with Cloudflare.”
“Great work! Do you have any advice on blocking firmware updates at the network level, but still allowing the vacuum to function 'normally' on the Roborock cloud? Some initial searches suggested that killing 'rrpkg-*.roborock.com' would do the trick. I'm very keen to move onto your local server in the near future, but I don't have the time right now. I'm hoping in the meantime to minimally protect against the exploits being patched in a new forced update.”
Oi. Yeah Daniel Micay, (formerly, I think?) of GrapheneOS comes to mind
“How does it compares to https://github.com/serphen/roborock-offline ? I found it a while ago while searching how to solve that issue, but I haven't tried it yet. The code seems easier to audit (way shorter), but I haven't looked too deep in either of those.”
“Fingers crossed! The nice thing about hosting your own server is you know you'll never get a timeout!”
“theyre realizing they're a moron and are backpetaling. the original post seems to imply they think docker containers dont survive reboots”
“yeah the vac sends a LOT of calls home and users network setups would often break the vac/ lag it out.”
“I had all those services hardened and exposed 24/7 to the internet for a few months, then I realized the only person that consumes them on the internet is me, on my phone. And that it's easier to solve that with a VPN. But I wanted to keep the option to have them public for the off-chance I might need access to them on something that can't VPN home.”
“Sounds like part of the fun for me. But for getting hacked id just stick to trusted software and maybe try looking into open source on prem ipsec layer software that will really help firewall traffic”
I used to have that same problem a lot too, what worked for me is setting tailscale to run unrestricted, enable always on vpn and also I reinstalled the app before doing…
“No AI was used,looked at,thought about or consulted with the creation of this post.”
“Any tips on hardening? I've been running pangolin and newt for a few months and trying not to think about how exposed I might be.”
“I feel like this would only make sense if you’re not updating to a new major version Simply using :latest is a bad decision. Take a look at N8N for example where an upgrade would break all your workflows”
“If you love wireguard and prefer it, you can try netbird. It's similar and has web gui.”
“Went through the same implementation change. From cloudflare tunnels, to tailscale, to headscale, to mtls + caddy and then finally now to mikrotik router + wireguard.”
“I love cloudflare proxy and it's auth options. Without an auth nothing gets to my systems. Firewall only allows connections from cloudflare IPs and I get easy https. But I also use tailscale to not violate ToS, but I don't want to explain it to friends”
“I think the main tradeoff is the theoretically worse data privacy when proxying through Cloudflare. Many (myself included to some degree) feels that it somewhat defeats the purpose of self-hosting if you're trying to hit the privacy angle.”
“Hi, I'm under CGnat too, in order to have direct access to my lan I've exposed a node with Tailscale, which is acting as an exit node. Thanks to this node once I connect an host through the Tailscale network itself I can ping directly my lan. I've tried to make the same setup using just wireguard through a vps, configuring the iptables rules but without luck, so I kept Tailscale as solution, since it's very very simple to setup. I'm using also a reverse proxy on the VPS, whic”
“you need to talk the yunohost community into exhanging emails between instances”
“Libre software, libre hardware, and my mother's basement. submitted by /u/david-alvarez-rosa [link] [comments]”