this post was submitted on 26 Jun 2026
223 points (91.4% liked)

Selfhosted

60482 readers
799 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

A few months ago I decided to self-host everything for my software house instead of paying for cloud infrastructure. Here's what's running on a Raspberry Pi 4B (4GB) at home:

Astro static site + nginx Full mail stack (Postfix + Dovecot + Roundcube) in Docker MariaDB with automated backups GoAccess analytics with custom Python bot/human separation Dynamic IP blocklist generated at every deploy Certbot managed on a separate Orange Pi Zero 3 (HAProxy + SSL termination)

The Orange Pi Zero 3 as a dedicated HAProxy node was the best €25 I spent — SSL overhead completely offloaded from the Pi, all subdomains routed through one config, clean network separation between "what faces the internet" and "what runs the services." Storage: all boards boot from SSD via USB3. No SD cards in production. The ISP situation: Eolo wireless, 20Mbps down / 100Mbps upload. Yes, upload is 5x download. For a web server that's actually ideal. Real stress test — June 22, 2026 A post on r/italy hit 20k views in 24 hours. Numbers that day:

555 human visitors (vs ~180 daily average) 151 unique IPs 72.2% return rate 9.98 MB bandwidth 0 downtime 0 errors in the mail stack

PageSpeed from Google's infrastructure:

Desktop: Performance 100 / SEO 100 Mobile: Performance 97 / SEO 100

No CDN. No Cloudflare. No edge nodes. Just nginx on a Pi. The honest limitations:

Single point of failure — yes, if the Pi dies the site goes down Mail deliverability on residential ISP is hard (Brevo relay helps) No redundancy — we run backups, not replicas

All traffic data is live and public: stats.lake8.dev/geo.html Happy to answer questions on any part of the stack.

top 50 comments
sorted by: hot top controversial new old
[–] tidderuuf@lemmy.world 42 points 1 week ago (3 children)

Last time I tried something like this my ISP cut me off by sending me an email after they cut me off about how if I am running a business website it has to be through their business plan not residential plan.

I never saw the email because they cut me off before I could ever view it.

I wasn't even hosting a business site but it was for a wedding announcement and RSVP shit.

Little guys have a hard time these days.

[–] DenimFootpath@lemmy.dbzer0.com 12 points 1 week ago (1 children)

What if you hid your traffic by using a wireguard VPN like mullvad as your exit node? Your ISP wouldn’t be privy to the services you host all they could see is that your using wireguard or a vpn

[–] SpacePirate@feddit.nu 5 points 1 week ago

Not a ad but want to leave this here because I think it's relevant. Najalla has a VPN service that is very unique, instead of giving you multiple exit points with different IPs and maybe 1 portforward they give you One static IP with full access to portforwarding for like 5€/Month

I am in no way affiliated with them but I am just a customers of thier service and enjoy it!

[–] irmadlad@lemmy.world 4 points 1 week ago (1 children)

Was this a well known ISP or a local ISP That's weird. Did they have a policy against that? Even when I didn't have a business account with my ISP, they didn't seem to care,

[–] tidderuuf@lemmy.world 2 points 1 week ago

It was Comcast. Luckily I don't have them anymore. Thank God for municipal fiber.

load more comments (1 replies)
[–] i_stole_ur_taco@lemmy.ca 20 points 1 week ago (2 children)

Waddaya mean no cloud?

YOU ARE THE CLOUD NOW

[–] pmk@piefed.ca 4 points 1 week ago

If clouds are far away, then self-hosting could be "fog"? Clouds at ground level that you walk around in.

[–] Tommy2970@feddit.it 3 points 1 week ago

Exactly. I didn't move to the cloud. The cloud moved to my living room.

[–] Grail@multiverse.soulism.net 17 points 1 week ago (2 children)

Why are all your comments full of em-dashes?

[–] Kazumara@discuss.tchncs.de 15 points 1 week ago* (last edited 1 week ago) (1 children)

And one even starts with:

You’re completely right

Hahaha

[–] Grail@multiverse.soulism.net 7 points 1 week ago

You're completely right — OP's comments do sound like an AI! Keep going, champ, and let U̸̡̢̖̜̬̐Ș̵̲̈̀̎̈́ know what project you'd like to work on next!

[–] Tommy2970@feddit.it 5 points 1 week ago (7 children)

Ciao! I'm Italian 🇮🇹 — my English is very "pasta asciutta" level. I use AI to help me write without saying something cosmically wrong. Sorry for that. But me and my dog are 100% real. 🐕

[–] Grail@multiverse.soulism.net 2 points 1 week ago (1 children)

Ah, yeah, we don't like AI here.

[–] Tommy2970@feddit.it 4 points 1 week ago (2 children)

Ciao! I'm Italian — my English is not exactly my strongest skill. But if AI-assisted translation bothers you, I can always switch to Google Translate 😊 Hope that's reassuring enough.

[–] Brownie@lemmy.zip 5 points 1 week ago (1 children)

Ah, yeah, we don't like Google here either.

[–] Tommy2970@feddit.it 5 points 1 week ago (1 children)

Ah, yeah, we don’t like Google here either. Ciao! At this rate I'll have to rewrite everything in carrier pigeons. :-)

[–] Brownie@lemmy.zip 4 points 1 week ago (1 children)

The Lemmy council approves

[–] Tommy2970@feddit.it 2 points 1 week ago

Honored. 🙏

[–] BakedCatboy@lemmy.ml 4 points 1 week ago (4 children)

Yeah Google translate preserves a lot more of your communication style. AI overuses so many phrases it can get annoying reading something that was processed through it.

load more comments (4 replies)
load more comments (6 replies)
[–] Tommy2970@feddit.it 11 points 1 week ago (1 children)

This is BASIC — my Lagotto Romagnolo. Official lake8.dev mascot and uptime monitor. He also finds truffles. 😍

[–] x00z@lemmy.world 3 points 1 week ago (1 children)

How did you get him to find truffles? :O

[–] Tommy2970@feddit.it 7 points 1 week ago (1 children)

He's a Lagotto Romagnolo — a breed selected for centuries specifically for truffle hunting. It's literally in his DNA. Training starts as a puppy: you hide small pieces of truffle in the garden and let him find them. Now the only way to make him truly happy is to let him run free in the woods — and you run behind him 😄 When he finds one, he expects a proper reward. I'm from Bologna, so his payment is a tortellino per truffle. Fair trade. 😁

[–] irmadlad@lemmy.world 5 points 1 week ago (1 children)

tortellino per truffle

Hell, I'll find you truffles if you feed me that. LOL

[–] Tommy2970@feddit.it 5 points 1 week ago

Deal! Work hard, find truffles, get tortellini con burro e tartufo. Best salary package in the industry. 😀

[–] Tommy2970@feddit.it 9 points 1 week ago

Here's my "cloud infrastructure" Air conditioning — NO Sterile environment — NO Dedicated server room — NO Enterprise-grade monitoring — is BASIC (BASIC is my Lagotto Romagnolo. He checks uptime personally.)

[–] originalucifer@moist.catsweat.com 9 points 1 week ago (1 children)
[–] Tommy2970@feddit.it 6 points 1 week ago
[–] ropatrick@lemmy.world 8 points 1 week ago (1 children)

I like posts like this (certainly the spiffy world map looks like you are in a movie!), and I like the self hosting idea, but here's the issue I see with self hosting stuff...

Its so complex. To me its bordering on inaccessible for the regular user. What you have described is very technical, and I see this all the time in the self host section; very cool looking dash, doing cool stuff, but then the description is like its literally in a different language. I'm usually lost before I have read three lines.

In your post, I'm actually not even sure what you have built. Mail server? Website? I'm fairly techie but I find it hard to understand. Is "software house" your business?

Its great and I commend your work, but its mind boggling and my overarching feeling when I see these posts is usually: "damn, way too complex, I wouldn't know where to start".

Thanks for the post however and for taking the time to document and answer questions. 👍🏼

[–] Tommy2970@feddit.it 2 points 1 week ago (1 children)

You're completely right, and thank you for saying it directly. Let me try again in plain English: I run a small software company from home. Instead of paying €50-100/month for hosting, email, and analytics services, I built everything on a €60 Raspberry Pi computer sitting next to my router. What's actually running on it:

The website you're reading about (like any website, just hosted at home instead of on AWS) Email — when someone writes to info@lake8.dev, it lands on that Pi Analytics — that world map showing where visitors come from

That's it. Three things, one small computer, zero monthly fees. There's also a green angle that rarely gets mentioned: the entire setup draws around 3-4W idle — less than a LED light bulb. A data center rack serving the same traffic would consume orders of magnitude more. Self-hosting at this scale isn't just cheaper, it's genuinely lighter on the planet. The complexity you're seeing is real — it took months to set up and I have 20+ years of experience. I'm not going to pretend it's for everyone. It isn't. But that's also why I built Lagotto BI — our actual product — which does the opposite: takes complex business data and makes it readable for people who just want to understand their business, not manage servers. So yes, "software house" is my small business. The Pi is just how I run the infrastructure behind it without paying cloud prices forever. Thanks for the honest feedback — it's genuinely useful. thk :-)

[–] ropatrick@lemmy.world 3 points 1 week ago (1 children)

Hey Grazie for following up, appreciate it. Sounds even more impressive now that I understand it fully.

I was thinking about it after I posted and I suppose the fact that its complex is part of why the big corporations can benefit so much from our data. They have full control and a million services to host your site, manage your email and analyse your data, and all it takes is a two minute sign up and you are in. Sounds great for the basic user, which is most of the world, but the price you pay is that your data and privacy is effectively gone. They have a captive audience and we go running to them. Its a shame.

I suppose if self hosting was easy, many more people would be doing it. I still love the idea but i think its still a bit technical and that puts me off.

Again, appreciate the response and time taken to explain. I can almost feel feeling of satisfaction you must have, knowing that you are saving money, protecting your privacy and running part of your business in such an excellent way! Great work.

Ciao!

load more comments (1 replies)
[–] SwissOS@sh.itjust.works 4 points 1 week ago (1 children)

Sounds great! Is there an easy to follow/understand tutorial on setting up HAProxy node?

[–] Tommy2970@feddit.it 2 points 1 week ago

Ciao! I don't have a tutorial yet, but it's on my list — actually, this question is a good motivation to write one! 😄 The short version: HAProxy on Orange Pi Zero 3 (Armbian), Certbot for SSL, reverse proxy to Raspberry Pi 4B behind NAT. The trickiest part is the ACL rules for multiple subdomains and the certificate renewal hook. I'll write a proper post about it on lake8.dev — I'll mention it here when it's ready.

[–] DarrinBrunner@lemmy.world 3 points 1 week ago (1 children)
[–] Tommy2970@feddit.it 2 points 1 week ago

lake8.dev 😀

[–] irmadlad@lemmy.world 3 points 1 week ago (1 children)

Awesome! You just started and you've accomplished all of this? That's respectable. Damn site better than when I first started. Git sum!

[–] Tommy2970@feddit.it 3 points 1 week ago (2 children)

Ha, thanks! To be fair — I've been writing code since 1995, and doing industrial software for the last 21 years. So not exactly a beginner. The self-hosted infrastructure side was genuinely new territory though, and yes, a lot came together quickly. "Git sum" is going on the wall. 😄

load more comments (2 replies)
[–] lung@lemmy.world 3 points 1 week ago (1 children)

Big oof on that mobile performance score, gotta get that fixed XD

load more comments (1 replies)
[–] confusedpuppy@lemmy.dbzer0.com 3 points 1 week ago (3 children)

For the past year I've been learning to self host minimally on a used Raspberry Pi 5. I do have a Pi 4 as well but that's dedicated to HomeAssistant for the small handful of lights and switches it controls.

Both Pi's run Alpine Linux with Podman containers. For my Pi 5 server it runs Caddy as my reverse proxy/SSL cert handler plus another contained for Kiwix. It's super simple. Caddy also has a basic file server for me to host my git repositories as well as hosting my static site.

The static site is based off a script I found called BashWrite but it hasn't been updated in a year so I decided to add some of my own changes to it here. I also fixed up some of the English grammar since the original creater wasn't an English native speaker.

I'm still focusing on the background stuff but I've put a lot of effort into security and hardening. I've written all the maintenance (backup, keep-alive, updating) myself using POSIX portable scripts which can all be found on my codeberg page. It's been a long process but I'm nearly there. I just have to switch from iptables to nftables and add secrets to my Caddyfile configuration to hide important keys that are currently sitting as plain text. After that I can focus on my blog/static site.

Since I'm not doing this for a business, I've decided to use a wildcard domain for my SSL cert plus an uncommon port as a low effort way to hide myself from bots/scraper. Also I set up Wireguard infront of my SSH connection to also hide from bots. My log activity only shows my own activity which is comforting to know, especially since I've seen just how active bots and scrapers are in comparison to a year ago when I was just getting started and beginning to learn things.

It's really cool to see another minimal project like this and I think it's refreshing to see. A lot of the times I see people with dozens on intensive services running and I feel a bit out of place with my scaled down self hosted project.

My only question about your setup is about HAproxy. How important is a load balancer for your site? I don't think I will need one for myself since the traffic will mostly be for myself and a few people I know personally but I am still curious about how it works and how effective it is for your setup.

load more comments (3 replies)
[–] Decronym@lemmy.decronym.xyz 2 points 1 week ago* (last edited 1 week ago)

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters More Letters
Git Popular version control system, primarily for code
ISP Internet Service Provider
NAT Network Address Translation
SSH Secure Shell for remote terminal access
VPN Virtual Private Network
VPS Virtual Private Server (opposed to shared hosting)
nginx Popular HTTP server

[Thread #29 for this comm, first seen 26th Jun 2026, 07:20] [FAQ] [Full list] [Contact] [Source code]

[–] carlnewton@feddit.uk 2 points 1 week ago (1 children)

That's awesome! I would never have expected that kind of throughput. On the day of your popular post, did you feel the traffic while trying to use the internet yourself at all? I sometimes fear that I'm going to get hit by something that interrupts what I'm doing and I'll have to take the server down temporarily. It hasn't happened yet though. I use a cloudflare tunnel mostly because I don't have a static IP address, but it does help reassure me in the event of a DDOS and blocking bot traffic. Those services are free by the way (for the time being at least! Who knows about the future)

[–] Tommy2970@feddit.it 2 points 1 week ago

Honestly no — I didn't feel it at all. The Pi was handling the spike silently in the background while I was working normally. Upload bandwidth on Eolo is 100Mbps, and a static Astro site serving mostly HTML/CSS is incredibly light. Peak day was 555 human visitors with 9.98MB total bandwidth — that's nothing for a residential connection. The Cloudflare tunnel approach is smart especially without a static IP. We have a static IP included with Eolo (unusual for residential, I know) which simplifies things. For DDoS protection we rely on HAProxy on a separate Orange Pi Zero 3 doing rate limiting and our dynamic blocklist — but honestly at our scale a proper DDoS would still hurt. The "who knows about the future" concern about Cloudflare is real though. Building on free tiers of centralized services is convenient until it isn't — which is part of why we went full self-hosted in the first place.

[–] fluckx@lemmy.world 2 points 1 week ago (1 children)

How do you enforce consistent backups of the database? Do you dump the data periodically? Copying the data on the docker volume won't give you consistent ( and possibly corrupted ) backups IIRC if the database itself isn't stopped.

load more comments (1 replies)
[–] Mordred_85@lemmy.world 2 points 1 week ago (1 children)

Setup solido. Una domanda tecnica: syslog restituendo on-prem o tutto centralizzato su firewall logs verso la Pi? Io separo questi due (syslog localmente, applicazioni su VPS remoto) per motivi di privacy domestica. Curiosità su come lo gestisci.

Complimenti anche per non aver barato su "redundanza" : ammettere il single point of failure è più utile di 10 artikel su Kubernetes. 👍

[–] Tommy2970@feddit.it 3 points 1 week ago

Buona domanda. Onestamente il nostro setup di logging è semplice per design — niente syslog centralizzato, niente aggregazione remota. Tutto resta locale sul Pi: log nginx in /srv/logs/, log applicazioni via Docker, log di sistema via journald. Niente lascia la macchina tranne quello che spingiamo esplicitamente (statistiche giornaliere verso la dashboard pubblica via scp). L'aspetto privacy che citi è interessante — noi non abbiamo la preoccupazione della "privacy domestica" perché il Pi È il server, ma il principio di tenere i log locali lo condividiamo. Niente Elastic, niente Loki, niente syslog remoto. HAProxy sull'Orange Pi Zero 3 ha i suoi log locali separati — non li spediamo al Pi. Due nodi, due store di log indipendenti. Non è architetturato per la scala. È architetturato per semplicità e controllo — che per una software house di una persona è il tradeoff giusto. E grazie per il commento sulla ridondanza — fingere che un Pi singolo sia highly available sarebbe stato imbarazzante. Non lo è. Funziona abbastanza bene, e sapere dov'è il punto di failure conta più che fingere che non esista.

load more comments
view more: next ›