I used to self-host because I liked tinkering. I worked tech support for a municipal fiber network, I ran Arch, I enjoyed the control. The privacy stuff was a nice bonus but honestly it was mostly about having my own playground. That changed this week when I watched ICE murder a woman sitting in her car. Before you roll your eyes about this getting political - stay with me, because this is directly about the infrastructure we're all running in our homelabs. Here's what happened: A woman was reduced to a data point in a database - threat assessment score, deportation priority level, case number - and then she was killed. Not by some rogue actor, but by a system functioning exactly as designed. And that system? Built on infrastructure provided by the same tech companies most of us used to rely on before we started self-hosting. Every service you don't self-host is a data point feeding the machine. Google knows your location history, your contacts, your communications. Microsoft has your documents and your calendar. Apple has your photos and your biometrics. And when the government comes knocking - and they are knocking, right now, today - these companies will hand it over. They have to. It's baked into the infrastructure. Individual privacy is a losing game. You can't opt-out of surveillance when participation in society requires using their platforms. But here's what you can do: build parallel infrastructure that doesn't feed their systems at all. When you run Nextcloud, you're not just protecting your files from Google - you're creating a node in a network they can't access. When you run Vaultwarden, your passwords aren't sitting in a database that can be subpoenaed. When you run Jellyfin, your viewing habits aren't being sold to data brokers who sell to ICE. I watched my local municipal fiber network get acquired by TELUS. I watched a piece of community infrastructure get absorbed into the corporate extraction machine. That's when I realized: we can't rely on existing institutions to protect us. We have to build our own. This isn't about being a prepper or going off-grid. This is about building infrastructure that operates on fundamentally different principles:

Communication that can't be shut down: Matrix, Mastodon, email servers you control

File storage that can't be subpoenaed: Nextcloud, Syncthing

Passwords that aren't in corporate databases: Vaultwarden, KeePass

Media that doesn't feed recommendation algorithms: Jellyfin, Navidrome

Code repositories not owned by Microsoft: Forgejo, Gitea

Every service you self-host is one less data point they have. But more importantly: every service you self-host is infrastructure that can be shared, that can support others, that makes the parallel network stronger. Where to start if you're new:

Passwords first - Vaultwarden. This is your foundation. Files second - Nextcloud. Get your documents out of Google/Microsoft. Communication third - Matrix server, or join an existing instance you trust. Media fourth - Jellyfin for your music/movies, Navidrome for music.

If you're already self-hosting:

Document your setup. Write guides. Make it easier for the next person. Run services for friends and family, not just yourself. Contribute to projects that build this infrastructure. Support municipal and community network alternatives.

The goal isn't purity. You're probably still going to use some corporate services. That's fine. The goal is building enough parallel infrastructure that people have actual choices, and that there's a network that can't be dismantled by a single executive order. I'm working on consulting services to help small businesses and community organizations migrate to self-hosted alternatives. Not because I think it'll be profitable, but because I've realized this is the actual material work of resistance in 2025. Infrastructure is how you fight infrastructure. We're not just hobbyists anymore. Whether we wanted to be or not, we're building the resistance network. Every Raspberry Pi running services, every old laptop turned into a home server, every person who learns to self-host and teaches someone else - that's a node in a system they can't control. They want us to be data points. Let's refuse.

What are you running? What do you wish more people would self-host? What's stopping people you know from taking this step?

EDIT: Appreciate the massive response here. To the folks in the comments debating whether I’m an AI: I’m flattered by the grammar check, but I'm just a guy in his moms basement with too much coffee and a background in municipal networking. If you think "rule of three" sentences are exclusive to LLMs, wait until you hear a tech support vet explain why your DNS is broken for the fourth time today.

More importantly, a few people asked about a "0 to 100" guide - or even just "0 to 50" for those who don't want to become full time sysadmins. After reading the suggestions, I want to update my "Where to start" list. If you want the absolute fastest, most user-friendly path to getting your data off the cloud this weekend, do this:

The Core: Install CasaOS, or the newly released (to me) ZimaOS. It gives you a smartphone style dashboard for your server. It’s the single best tool I’ve found for bridging the technical gap. It's appstore ecosystem is lovely to use and you can import docker compose files really easily.

The Photos: Use Immich. Syncthing is great for raw sync, but Immich is the first thing I’ve seen that actually feels like a near 1:1 replacement for Google Photos (AI tagging, map view, etc.) without the privacy nightmare.

The Connection: Use Tailscale. It’s a zero-config VPN that lets you access your stuff on the go without poking holes in your firewall.

I’m working on a Privacy Stack type repo that curates these one click style tools specifically to help people move fast. Infrastructure is only useful if people can actually use it. Stay safe out there.

top 97 comments

sorted by: hot top controversial new old
[–] 144 points 10 months ago (13 children)

I agree with your post 100% I think. Removing oneself from big tech/data services like Google and Microsoft is resisting the regime. It's especially useful for folks that may not be able to get out and protest, meet with their representatives, etc.

As for me, I'm running my *arr/media stack for myself and my close friends and family. Fuck Disney, Netflix, and Paramount. For our household, HomeAssistant keeps the lights on and SyncThing backs up our files to the NAS.

  • source
  • hideshow 13 child comments
  • [–] 25 points 10 months ago* (last edited 10 months ago) (5 children)

    Quick question. Home assistant.

    We are hooked on "Hey Google turn off the lights"

    Is there a way to remove the Google from that but still use the voice aspect?

    Edit: great!!!! Thanks for the direction folks!!!

  • source
  • parent
  • hideshow 5 child comments
  • [–] 34 points 10 months ago* (last edited 10 months ago) (1 child)

    Yes, Home Assistant has this.

    https://rhasspy.readthedocs.io/en/latest/

    Works great. My biggest challenge was finding a decent microphone setup and ended up like many do with old Playstation 3 webcams. That was a while back and I would guess it's easier to find something more appropriate today.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 9 points 10 months ago (1 child)

    I know others have answered, but I wanted to give you a link. I have their device and it works great for turning things off and on out of the box. You can run it locally—if you have the hardware—or use their reasonably priced cloud subscription. I do the latter wanting to support them monetarily.

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 38 points 10 months ago (5 children)

    Spot on. Self-hosting is the most effective form of quiet, material protest we have. Every time your family uses Syncthing instead of OneDrive, you’re starving the machine of the telemetry it needs to function.

    Running that stack for your inner circle is essentially building a "digital mutual aid" node. You're taking the burden of surveillance off their backs and putting it on your own hardware where you can actually defend it. That's the work.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 2 points 10 months ago (4 children)

    Can your neighborhood communicate when the Internet goes down like Iran?

  • source
  • parent
  • hideshow 4 child comments
  • [–] 56 points 10 months ago (10 children)

    Just FYI unless you self-host headscale, tailscale is centralised and not private. They claim it is end to end encrypted but their proprietary centralised control server distributes the keys, so they could very easily MITM you.

    Tailscale is good tech and good crypto, but Applied cryptography cannot solve a security problem. It can only convert a security problem into a key-management problem, and tailscale does not do decentralised key management.

  • source
  • hideshow 10 child comments
  • [–] 11 points 10 months ago (5 children)

    Are you serious? I had no idea Tailscale was a "trust me bro" kind of operation. I've always heard "serious" people boosting it.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 13 points 10 months ago* (3 children)

    Well they are a serious company with serious engineering capabilities. Just know that whoever runs the control server can control your network, and almost everyone uses Tailscale's centralised control server, so they control the networks of almost all of their customers. Most of their customers are for internal use by companies which don't care about relying on SaaS products. But if you self-host for resilience, using Tailscale doesn't make much sense without also self-hosting the control server through the unofficial headscale implementation.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 10 months ago (2 children)

    Can you help me understand what head/tail scale do? I’m at the “get friends and family on” stage so I’ve been struggling figuring out how to get friendly domain names working through Wireguard.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 10 months ago* (1 child)

    Note: I have only done this with Tailscale. I have not looked into this with headscale.

    You can invite them to your network, or share a machine to their network. The second option is probably more likely what you will do with Tailscale since it is unlimited and the first option has a limited number of users for the free tier. The biggest hurdle will be them getting devices added to their tailnet so those devices can access your machine.

    I imagine it's maybe a little easier with headscale. I haven't gone down that route yet. I would probably want to have my DDNS point to a VPS and have that be the entry point to my network. I could point it to my ISP IP, but one more layer that isn't very expensive is probably smarter security wise.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 33 points 10 months ago (1 child)

    I was just thinking this week, that those who self host (and more importantly, those who program the code we self host), are at the front line of the modern digital resistance: in the sense that the world is burning due to the greed of the tech bros that run our daily lives. Convienience for the masses is what gives them power over us, and any one who rejects their systems is helping to fight back.

    Voting with your wallet helps, so not giving them your money is the first step. Then managing and keeping your own data private is the next one.

  • source
  • hideshow 1 child comment
  • [–] [S] 6 points 10 months ago

    You're right. We’ve been traded convenience for our autonomy for way too long, and it’s created this massive power imbalance where a few tech bros basically own the digital roads we walk on. Voting with your wallet is a huge first step, but like you said, the real work starts when we actually take responsibility for our own data.

    That’s exactly why I’m moving toward helping local businesses and groups build out their own nodes. It’s one thing to stop paying for a subscription, but it's another thing entirely to stand up your own infrastructure that doesn't report back to a corporate mother-ship. Every person who rejects the "default" and builds a private alternative is a small win for the rest of us, it’s about making the corporate extraction model fail by simply making it unnecessary.

  • source
  • parent
  • [–] 27 points 10 months ago (2 children)

    To the folks in the comments debating whether I’m an AI: I’m flattered by the grammar check

    This is the world we live in. If you can actually string words together into grammatically correct sentences, then you are AI. It matters not whether you are or you aren't. Like the witch hunts of Salem, all that is necessary is the accusation. I personally don't care if you used AI, the message resonates. Don't let 'em give you shit about your pony tail.

  • source
  • hideshow 2 child comments
  • [–] 3 points 10 months ago (1 child)

    It is freeing really. I used to proof read my comments, then paste in google search to check for easy to catch typos. When AI arrived, I was even putting my text through them so they are more "common tongue" and not my personal shorthands.

    Now I just post it.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 49 points 10 months ago

    Don't stop at self-hosting. We need all forms of community building, from organizing like-minded people to gardening, off-grid energy, etc.

  • source
  • [–] 22 points 10 months ago (5 children)

    Great points, and there's some amazing discussions going on here!

    One thing I'd like to add is EVERYONE needs to start setting up some meshtastic nodes. It's really easy to setup (just hook up a USB cable from your computer to a esp32 board, visit a website to get the configuration, and that's pretty much it), it's cheap (as little as $30) and it is secure. Build 2 nodes (one to leave at home, and another for your backpack). This way you'll be able to communicate should the Internet become unavailable or unsafe. You can also use this at a protest so that you still have a means of communication without needing to bring your phone that the Feds will be able to track.

  • source
  • hideshow 5 child comments
  • [–] 1 point 9 months ago

    I started with Meshtastic, then started getting into MeshCore since it seems like it scales much better.

    It is disappointing that there’s already some fragmentation, considering that this is a small community to begin with. Hopefully both can flourish.

  • source
  • parent
  • [–] 1 point 10 months ago (3 children)

    Can you elaborate a bit? I checked their website but I'm a noob. I'm in Europe, I don't know if this network is in use here. Also I'm not sure I can see the use case for me now but I don't mind paying 30€ if it can be useful to others, and maybe to me later. To add a bit of context : I think we are quickly following the american trend at least in my country

  • source
  • parent
  • hideshow 3 child comments
  • [–] 3 points 10 months ago

    It works in Europe too. It uses LoRa (A Long Range radio protocol) to be able to send messages out to other nodes, which can bounce them out to further nodes. A node can be configured to relay through the Internet to reach people in other areas.

    I ordered the radio shown below from a kit on Amazon (it's a Heltec v4 and came with a battery that isn't pictured) and it took about 5 minutes to setup. Attaching the antenna to the board was the hardest part.

  • source
  • parent
  • [–] 1 point 10 months ago

    Haven't tried it yet but it has to operate on another frequency band and is quite limited in terms of duty cycles. I'll try anyway, and I don't think getting a licence to access higher duty cycles limits and power should be that hard.

  • source
  • parent
  • load more comments (1 reply)
  • [–] 44 points 10 months ago* (last edited 10 months ago) (21 children)

    What’s stopping people you know from taking this step?

    I'm a noob when it comes to IT. (Even though in my family I'm the one people ask when they have computer issues lol.) I would really like to get into self-hosting and all that, and I think if I found some good guides I would probably be able to make things work, but it still sounds very daunting to me. Like, I imagine days if not weeks of sifting through online resources to fix a thousand little errors and issues that would come up. (Maybe I'm mistaken, maybe it's all really easy even for noobs. Just trying to explain my feelings on the matter.)

    Edit: Woke up to 10 replies lol. Thanks for everybody's input and helpful links. I think this might become a future project for me, but not before winter 26/27 (for life reasons).

  • source
  • hideshow 21 child comments
  • [–] 32 points 10 months ago (1 child)

    It is a skill much like maintaining a car yourself, or your own lawn/garden.

    It’s pretty easy to get started, and there are certain ways of doing things that keep it pretty simple forever, at the cost of some flexibility.

    But no matter how you do it, there will be a non-zero amount of work involved indefinitely. Just like you need your cars oil changed, your garden mulched and weeded, or your server patched and cleaned up once in awhile.

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 25 points 10 months ago (2 children)

    I feel this deeply. I used to volunteer at a library teaching “Cyber Seniors” digital literacy, and the biggest hurdle was always the fear of “breaking” something. The truth is, the big tech companies want you to think it's too hard so you’ll keep paying them with your data.

    You don’t need to be a sysadmin to start. It’s not about days of fixing errors; it’s about taking one small win at a time; like setting up a password manager first. If you can follow a recipe, you can build a node. We’re working on better, no-jargon guides to make sure the “thousand little errors” don’t stand in your way. You don’t have to be an expert to be part of the resistance.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 10 months ago

    I agree with you, but something jumped out at me while reading this thread. To a degree, the fear of "breaking something" is completely legitimate, but it's based on not getting quick feedback from systems. For instance, if you are walking in a direction that you think is east, but the sun is setting ahead of you, you know you're headed in the wrong direction. Computers often don't provide such useful feedback, often leading users to "break things."

  • source
  • parent
  • [–] 8 points 10 months ago* (last edited 10 months ago) (1 child)

    I'm right there with ya. I'm thinking it might be a case of picking easy pieces (projects) of the puzzle to start with and then building from there. Like I'm considering setting a pi-hole soon - seems like an easier networking project. But yeah, I'm not really sure what's the best order of eaiest to hardest projects in terms of self hosting etc.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 10 points 10 months ago

    @phant Pi-hole is super easy to set up and easy to build on. It’s been very robust for me and also eye-opening due to the excellent UI. About 5% of the network traffic in my house is now blocked. Thousands of DNS requests per day. Most of that is trackers. Apps and “smart” devices are very determined to phone home so you’ll have to block many of these domains manually as they show up. Be forewarned, some apps and web sites will simply stop working if you block their tracking and other info gathering on your network. Luckily, there is good #FOSS to substitute.

  • source
  • parent
  • [–] 6 points 10 months ago (2 children)

    Maybe I’m mistaken, maybe it’s all really easy even for noobs

    I'll be the first to admit, shit is complicated, especially networking, but it's not insurmountable. Do you already have a server deployed? How familiar are you with Linux?

    See what you think: https://linuxupskillchallenge.org/

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 10 months ago (1 child)

    Do you already have a server deployed? How familiar are you with Linux?

    No server. I just installed Linux a few months ago as dual boot after being a lifelong Windows user (since 3.1 lol). Currently using both OS but will move fully to Linux once I have some projects finished. Self-hosting might become a future project after that and if yes, I'll come back to this community and this thread!

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 10 months ago (3 children)

    Man, I'm pretty techy. I work in tech. I've learned programming, etc, I use Debian. but selfhosting seems so daunting, not to mention inconvenient. I need to get into it though 😓

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 10 months ago (2 children)

    It's not overly.

    I used "perfect media server 2017" the first time I set up a mass storage server for Plex.

    https://perfectmediaserver.com/

    My setup is a lot different now.. but dude laid out some step by step instructions. And apparently has continued to evolve his setup over time

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 10 months ago* (1 child)

    I'm not an expert but I have a decent set up going. If you think it would be helpful shoot me a DM and I'll find a way to show you what I've got set up and give any tips I can. It sounds like I started in a similar position to you and I'd be happy to share what I've learned so far.

    Edit: anyone else reading this is welcome to do the same.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 10 months ago* (last edited 10 months ago) (1 child)

    @Bonifratz @h333d Before I begun this self-hosting journey, I hosted Pi-Hole on a docker container on my PC (was Manjaro KDE that time I think). Then, I learnt how to set up AdGuardHome on a VM (on both Manjaro and Arch iirc), using virt-manager and KVM. Now, I'm using an old laptop to host Proxmox and some services like AdGuardHome, Prometheus, Grafana, Uptime Kuma, and a Debian-made game server customized by myself. I had help of a colleague to begin the Proxmox journey.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 10 months ago* (last edited 10 months ago)

    @Bonifratz @h333d It isn't easy, but it's so worth the effort, and I just begun the Proxmox journey and I have plenty of things to learn!Since this is a complex subject, you need to take your time and don't hurry the learning process. Begin with baby steps, and hosting services restricted to a LAN, just to be safe. When you are comfortable (after some weeks or months), think about sharing a service to the public, if possible, and what you have to do to properly secure your devices and network!

  • source
  • parent
  • [–] 3 points 10 months ago

    Hi! I am also slowly getting the hang of it (just set up my first NAS with truenas last weekend) but there are dozens of youtube channels focused on it. I like Serversathome and the accompanying Wiki helped me a lot. This mainly focuses on an arr stack but there is also wiki pages for immich and nextcloud. Right now I'm using cloudflare tunnels to access services (i know feeding the machine etc.). If anyone knows an alternative to cloudflare tunnels (without putting everything into the same tailscale network) I would be happy to hear about it!

  • source
  • parent
  • [–] 2 points 10 months ago

    Digital solidarity will be essential as we move forward. We will need both social solutions which facilitate community technical support and engineered solutions which make that support more effective. I like to imagine systems of distributed sever management where we build upon the computational capacity of those around us and the human capacity of those that care for them. I want to rely on people I love instead of opaque tech firms that only care about money. Compute power must not defeat humanity.

  • source
  • parent
  • Currently in that "sifting through online resouces" phase, but less because of broken stuff, and more because I want to set up everything prefectly the first time. Which is probs impossible lol. I am majoring in Cyber, so tech is my life, but this homelab is how I actually put what I've learned to use and learn even more than what college will probably teach me.

    I'm on winter break and having a blast (kind of 😅) setting up my Proxmox to have all the services I want. I have gotten stuck several times, but I can find info eventually, and keep moving forward. Thankfully there's a website that contains Proxmox setup scripts for almost every service imaginable, making a homelab way more accessible.

    Linux skills/terminal knowlege helps this process go by faster, and my networking knowledge helps too. But that's basically all I got lol. I can understand an okay amount of what scripts do, but I'm no programmer/scripter. I screw up mount points, look up how to check ssh key fingerprints every 10 mins, I fail to get VPN tunnel configs to work, a whole slew of issues. But I always end up learning something in the end, and get one step closer to that sweet sweet setup. So just learn and break things while you don't care about it. Who cares if I fuck up the jellyfin config? It only had like two videos in it anyway. Best to screw up now so when I go data hoarder I know how to save my info.

    Edit: Just got SMB to work for both my VM and LXCs, and I'm so happy. Every accomplishment with my homelab has me fistbumbing the air and floating on clouds. Make a homelab just the high it gives you when you do something right.

  • source
  • parent
  • [–] 20 points 10 months ago* (last edited 10 months ago)

    Thank you for kicking this hornet's nest. There is a lot of great info and enthusiasm here, all of which is sorely needed.

    We have massive and widespread attention paid to every cause under the sun by social and traditional media, with movements and protests (deservedly) filling the streets. Yet this issue which is as central and crucial to our freedoms as any rights currently being fought for (it intersects with each of them directly), continues to be sidelined and given the foil hat treatment.

    We can't even adequately talk about things like disinformation, political extremism, and even mental health without addressing the role our technologies play, which has been hijacked by these bad actors, robber barons selling us ease and convenience and promises of bright, shiny, and Utopian futures while conning us out of our liberty.

    With the widespread, rapidly declining state of society, and the dramatic rise and spread of technologies like AI, there has never been a more urgent need to act collectively against these invasive practices claiming every corner of our lives.

    We need those of you recognize this crisis for what it is, we need your voices in the discussions surrounding the many problems and challenges we face at this critical moment. We need public awareness to have hope of changing this situation for the better.

    As many of you have pointed out, the most immediate step we need to take is disengagement with the products and services that are surveiling, exploiting, and manipulating us. Look to alternatives, ask around, don't be afraid to try something new. Deprive them of both your engagement and your data.

    Keep going, keep resisting, do the small things you can do. As the saying goes, small things add up over time. Keep going.

    [Edited slightly for clarity]

  • source
  • [–] 20 points 10 months ago (3 children)

    100%

    I do find it funny that I offer so many friends and family access to these services, and they generally just take the accounts and never use them.

  • source
  • hideshow 3 child comments
  • [–] 11 points 10 months ago

    This! I'd say that the best we can do is educate. Over the last 20 years people got taught to be lazy and go with the herd. They don't want to change, all their stuff is already "in the cloud" and "I don't have time to go tinker with that nerd stuff, I need something that works".

    "Why learn a new messaging app if everyone is using WhatsApp already"

    -- some of my friends and acquaintances 2025

  • source
  • parent
  • [–] 9 points 10 months ago

    Give them a reason to care : hosting series they want to watch but don't have access to, easier ways to share images and data (close relative works part time in an enterprise that banned emails from non corporate addresses, she used to send the photos she needs for work to her work laptop through email, it's the reason she uses Immich now) hosting banned movies, inaccessible old movies or any thing that may peek interest gets their finger in the cogs. Key aspect is : initial access must be EASY (an app launcher is often all that should be required)

  • source
  • parent
  • [–] -2 points 10 months ago

    Because you, and everyone, is in a huge bubble.

    Normal people don't give a shit where stuff is hosted, or if it's hosted at all. The vast majority of people couldn't care less what happens to their catpics if their phone gets crushed and they don't want to use a separate messaging platform just to talk to you.

    The things you think are important absolutely don't matter to them. Most people don't give a single second of thought to where their documents should live, and will just download it again on a second device instead of synchronizing anything.

    It's really nice that these things exist, but why would someone do anything with them if they literally don't have a purpose for it?

  • source
  • parent
  • [–] 55 points 10 months ago

    Hell yeah! I'd argue it's even true of 2026!

  • source
  • [–] 18 points 10 months ago* (last edited 10 months ago) (2 children)

    Great ! I think its time we created the Selfhosted manifesto!

  • source
  • hideshow 2 child comments
  • [–] 17 points 10 months ago* (last edited 10 months ago)

    Exactly, I’m glad more people are seeing it this way.

    The goal of capital is to gain power and leverage, they don’t really care about some numbers.

    It’s the dream of all tech companies to become a monopoly, they even say it with a straight face. They want as much control as possible? Why? So they can use the leverage for even more.

    The beautiful/horrifying part is, the system weeds out any company that does not do this. The only way is for the end users to push back.

  • source
  • [–] 17 points 10 months ago (2 children)

    Been wondering for a while if it was worth sticking around on this plane of existence. Feeling like nothing was going to get any easier or better, wondering if my life would just be watching horror rafter horror until the tech I loved stop working and the world went dark as they came for me and mine.

    Then I saw Benn Jordan's Anarchist Gift Guide video and realized the same thing as you: I may not have a lot of skills to offer the world, but I'm neurodivergent, a sysadmin for higher ed, and (used to, at least) like to tinker. I realized my disdain for the humanitarian and moral failings of the system we currently reside in could be married to my hobbies and feel like I was doing something more than just protesting, donating, and waiting to die.

    My goals are to fix up my home environment, get my 3D printers working, set up an exercise area, set up a Meshtastic relay and other support networks for my local area, update a media server for friends and family to enjoy, including a request system, and do anything else along the way the provide a system of communication and sanity that removes as much reliance on the government and corporations as I can.

    It finally got me to fix some bugs in existing services I already manage and this weekend my wife and I are starting the work on the exercise room, for the benefit of our bodies. Not saying Benn's video saved my life, but it gave me a purpose, again, in a world that feels increasingly aimed at reducing me to a sad data point on some graph. I hate what this world has become and avoid social media at all costs, but now I can do something locally that will feel like I'm doing something to help.

    I have a particular set of skills that make me a nightmare for groups like ICE. I just need coffee, my ADHD meth, and some weed gummies to see it through. Thanks for posting this! I will save it and refer to it as I go.

  • source
  • hideshow 2 child comments
  • [–] 16 points 10 months ago (1 child)

    My excuse was I don't act for what I believe in because I don't know how to. Your post showed me, I kinda do. I was doing it already, I should double down on it and most important help others on their journey. You're a force multiplier today. Tomorrow some folks who read your post will be as well.

  • source
  • hideshow 1 child comment
  • [–] [S] 10 points 10 months ago

    That means a lot, the force multiplier thing is exactly why I posted this. Building for yourself is a great start, but bringing others along with you is how we actually scale the resistance. We need more nodes in the network, so keep doubling down.

  • source
  • parent
  • [–] 16 points 10 months ago*

    For those of you who are interested in this but don't know where to start I think https://www.freedombox.org/ may be a good starting point. It's been around for a long time, provides easy enough installation and a nice web interface for management. Its based on Debian and you can give it a try on their demo.

    Also the vision for the project aligns pretty much with what op is saying https://wiki.debian.org/FreedomBox/Vision

  • source
  • [–] 16 points 10 months ago (3 children)

    How can I learn more about this stuff because I think like a lot of people I’m not that tech savvy

  • source
  • hideshow 3 child comments
  • [–] 8 points 10 months ago

    Just start. Even the most tech savvy of us started not knowing any of this. More importantly do what you’re interested in and that benefits you. You don’t have to have some grand implementation. Start simple and the rest follows.

  • source
  • parent
  • [–] 2 points 10 months ago

    It's a bit steep, you can go on YouTube for a bit, then browse the documentation of any word you don't understand (AI can help a lot with understanding but will get confused at any troubleshooting task) the steps can be resumed quite easily:

    Find an OS:

    • see what kind of data you're working with (photos, videos, films,...) it all depends on your orientation/hobby/personality
    • find what kind of applications you'd want to run, for how many people roughly ( personally I knew I would aim to replace netflix and cloud for close family and maybe a couple friends and circumvent as much as possible things like WeTransfer and compressions when sharing pictures in chats)
    • see how much money and time you are willing to put in : first for the launch, then on a weekly basis (you can go for very cheap non redundant app first os like OP mentioned if you can pay to back it all up remotely/ have a separated NAS or see if you'd prefer to assume resilience mainly on your side)

    Then you have a rough idea of your needs (this is all YouTube knowledge thus far, you can start looking at videos of people trying to use, comparing, ranking different solutions and tutos for how it's like to set up for the first time and how do app work in those systems (docker, app stores, how big the community is around them, how much of a sysadmin you have to be to run and set it up...)

    Then from that you can start seeing how which install fits in your budget and time allocation. After that, sinking hours of troubleshooting and setup is almost straightforward, it's just going to be a list of side quests to complete the main one with a side of documentation.

    On my side I initially wanted to go full free software, I wanted to use my 10 years old windows desktop to run trueNAS (it was already running jellyfin in docker desktop, useless for the process but is a fun starter to dip a toe in to get a feel). I bought on eBay a couple hard drives (ended up buying very cheap enterprise SAS, I recommend, mind you you'll need a daughterboard)(you'll see that different OS require different RAM, SSD, HDD ratios to run smoothly so recycling old hardware often requires upgrades) I completely failed to make trueNAS work correctly and since it's enterprise first it has very... unfriendly conceptions about flexibility and user friendliness (brutal on the kind of budget and time I had).

    After abandoning the project for a couple of months (due to exams mainly, and the fact I couldn't repress myself from spending nights on unresolved issues) I decided to go the Unraid route (which is paid, yikes, but truly hasn't let me down once, the community is huge and the software is rock solid and really helps you not fuck everything up (which trueNAS will happily let you do), I truly recommend that investment, they have a generous trial period, it's really really great).

    After that it's just more setup for hours on end, transferring files to Immich, re-setting all the AI knowledge about faces (also for me a lot of metadata correction for very old family photos), letting disks and parity initialize, moving old backups from old drives into the new system, including the clean disks into the array, setting up prowlarr, radarr, sonarr, jellyfin.

    Then comes the other hard question : how to do you access remotely ? (By now you already have a better idea about how docker and local network works and how important it is to secure it properly; and you're about to learn how little your ISP cares about you)

    I tried boilerplate wireguard, it's wonderful but a very MANUAL setup with a DDNS. But honestly (even though I really did not want to spend another penny) the cloud flared tunnel with your own domain is kind of what you want (because they have neat zero trust features, for exemple to access any of the services I host that do not have to have in-app access (Immich, jellyfin, that have authentication built-in) are behind 2FA based on a short whitelist of email addresses which reduces immensely how much protection I have to care about.

    After that you can go on to nextcloud (requires remote access on a domain) and all the rest of the fun stuff.

    Now the thing is (like every hobby) there is a perfect solution, it's at least tens of thousands of euros and you need a guy to manage it, but it's bulletproof and will survive any attack.

    You are not that person, you try stuff that is on your level, you don't assume perfect functionality in one weekend and you take time to learn on every step of the way. In my quick little summary you can already feel (as I am a noob as well) that it's a very iterative process, often you'll half-ass something to move on, then come back to upgrade it when needed. You are very much building a machine, first from the hardware side, then mainly from the inside.

    At some point you'll have people around you start finding out how useful and interesting all this is, and it's a very rewarding feeling to see what you assembled (because you haven't typed a single command line in the terminal thus far) starting to get some use.

    Hope this helps as a little piece of motivation, and if you are to start now I hope you have some old RAM laying around, in any case, start small and build up :)

  • source
  • parent
  • [–] 16 points 10 months ago* (3 children)

    I don't have worries about password managers like bitwarden as the vault is zero knowledge and encrypted with a, to bitwarden, unknown key.

    And I trust that bitwarden can secure their infrastructure better than me.

    About your question what I host at home:
    OPNsense
    Veeam Backup and Replication (not (F)OSS but I like it and it's reliable. We also use it at work so it helps my profession)
    The *arr Suite
    HortusFox (plant management)
    Immich
    Jellyfin
    Syncthing
    Resilio
    Unifi Network Application (Also not FOSS)
    Uptime Kuma
    Wallos (subscription tracker. Pretty awesome overview!)
    PiHole

    Can't remember when I started.
    I believe it was around 2019 or 2020.
    It started with a Raspberry because I wanted a NAS but was too cheap for a proper NAS appliance like a Synology NAS.
    Fucked the install up a few times
    Bricked the OS install during an upgrade (had 2 USB powered hard disks plugged in. But the PI had not enough to supply both and itself during writing to it so the network share sometimes failed)
    Installed Plex
    Found out Plex doesnt allow transcoding with the free version
    Found out Jellyfin and installed it on the Pi.
    Bad experience with Jellyfin and anime releases as they use ASS/SSA subtitles
    Later upgraded to an i5-11th Gen NUC to get HWA transcoding on Jellyfin
    Fucked up the Intel driver situation but HWA somehow worked
    Inplace upgraded the NUC from Debian 10 to Debian 12 and restored my docker container from backup
    (I assumed it would take like 4h or so to replace the SSD, install debian, install the core packages (like docker, etc.) and restore the files. In the end it took about 8h (after an 8h workday) and finished around 3am. But it worked. Very well on top.

    The hobby is expensive but rewarding.
    My stack:
    HPE 1930-24G PoE switch
    Unifi AP mini
    HP ProDesk SFF with an i5-7th gen (manually upgraded to something we were throwing out. Harvested the CPU. Crosschecked the BIOS support with the quickspecs by HP) (Proxmox with OPNsense virtualized)
    Intel i5-11th NUC (Docker host)
    Intel i3-13th NUC (primary Proxmox host. Holds the Veeam Backup server)
    Raspberry Pi 4 4GB (docker host with the sole purpose of doing pihole DNS)
    uGreen DXP4800+ with 4x15TB in RAIDZ2 (swapped the OS with a TrueNAS Scale SSD.)

    Newcomer:
    GL-iNet Slate 7 as my travel router. Configured a Wireguard VPN on it with the OPNsense guide. Worked very well.
    I have to commend the guide writer on it. But the steps were a bit confusing if you werent reading it carefully.

    Picture of my stack (literally) :)

  • source
  • hideshow 3 child comments
  • [–] 11 points 10 months ago (2 children)

    Can we all pitch in and send @Appoxo@lemmy.dbzer0.com a box of zip ties?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 15 points 10 months ago (5 children)

    I feel the same way, and honestly, I'm happy to see others do too.

    I'm almost done my exit from google, just the actual email left. Calendar, map data, photos, everything in drive is gone to my private infrastructure.

  • source
  • hideshow 5 child comments
  • [–] 1 point 10 months ago

    I recently tackled a full degoogle. I still have my email running, I really wouldn't recommend deleting it for legacy purposes. But the tens of thousands of emails I had are fully deleted from gmail. I unsubscribed from basically everything, and hardly get emails there anymore.

    I used Google takeout to get the emails exported. I had to do this per gmail account. They give you something called a .mbox file. I now use proton mail and pay for their service (I think paying makes sense for the service given the alternative is getting your data scraped for advertising revenue). I stored a backup of the .mbox file in my proton drive, and loaded the file in thunderbird (on linux with an encrypted drive) for whenever I need to search those old emails.

    Overall it's pretty easy. The hardest part was a bit of Thunderbird jank for first time setup. This guide was helpful: https://www.howtogeek.com/709718/how-to-open-an-mbox-file-in-mozilla-thunderbird/

    Good luck :)

  • source
  • parent
  • [–] 1 point 10 months ago (3 children)

    What are you doing for health data and stats?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 10 months ago*

    I know this is not one size fits all, but I switched to a Seiko watch like a year ago and I've been so much happier. I can weigh myself on my scale, take my blood pressure with a $40 Braun device from the pharmacy, and everything else I can intuit: I know for a fact when I'm not walking enough, when I feel bloated and over-salted, when I haven't slept long enough, when I get winded going up stairs, etc.; I don't need to quantify and graph it out to know I need to do better and what it will require of me.

    Again I'm not saying health stats aren't or shouldn't be important for you, but I do think the Web 2.0 / smart-everything era got us all so hooked on the constant feed of data points from all aspects of our lives that we came to feel things were required that really aren't.

    If you're diabetic, or have a heart condition, or the in and only way you will ever exercise is if you can gamify it or whatever, then of course, try to find a health tracking solution that minimizes the sale of your data to brokers or whatever (if that is even possible). But for many average people who've just gotten used to health tracking, I gotta say, take a walk on the wild side and try going without.

    I can't put a price or a good enough description on how much happier I am to have one less thing sending me notifications and pulling my poor, abused attention all throughout the day…one less entire category of stats to keep up with, micro-manage, get anxious over. I've still got my Apple Watch if I ever absolutely need it but so far I haven't needed it at all. I do not miss health data.

  • source
  • parent
  • [–] 14 points 10 months ago (2 children)

    I just want to bring to attention something I was just finding out thanks to this post.

    I started self hosting some stuff by installing raw in arch and well... It was a pain, but worth it. Then later I found out about CasaOS, which is recommended by OP, and I agree, it was great to have it to install some more services and a lot easier. But just like OP I just found out about ZimaOS, which is announced even in casaOS project as a better system and an upgrade. So I went to check and the whole project is changing from open source in casaOs to proprietary in ZimaOs. Not content with that, in the latest release of ZimaOs they have added a one time payment to eliminate some limitations of the free version. It is still affordable and a "lifetime" license but if they have added a payment for full access once they might do it again, despite their current promises that they won't ever make a subscription style payment.

    So, careful with that project, I would recommend to avoid any solution that is proprietary or otherwise it won't be yours in the first place. I had in mind to change from CasaOs in Debian to OpenMediaVault to handle a DAS and install casaOS on top of that. But now I have to reconsider, so far I have already seen a few worth recommendations in this post that seem nice: FreedomBox and YunoHost to mention a couple that are FOSS.

  • source
  • hideshow 2 child comments
  • [–] 2 points 10 months ago* (1 child)

    I have been hosting tools with Yunohost for a few years now, it is great! Fully FOSS, tons of packages available and if there isn't an app for what you need today but you're comfortable building from raw, the community is always stoked to have more contributions https://github.com/YunoHost-Apps/

  • source
  • parent
  • hideshow 1 child comment
  • [–] 13 points 10 months ago

    It's not often I hear meet others on the same page, but I too see self-hosting as a form of resistance against corporate control and surveillance capitalism. Rather than trying to bring self-hosting to individuals, I've steered my efforts towards affecting technological change in groups and organizations instead. While this narrows the pool of those who can set up sovereign infrastructure, it gets more people using the open-source alternatives as part of their collaborative work.

    To support that, I’m building out such an IT reference architecture for nonprofits, activist groups, and communities. The networking model is such that services can be hosted on cheap hardware and accessed through Wireguard tunnels managed by Netbird (and experimenting with Pangolin now). This keeps the servers under positive control of the data owners and uses only one or two VPS instances to handle proxying and accesses. Now, every organization’s requirements are different, but this baseline is meant to be a flexible proof-of-concept that can be adapted to their unique threat model. For example, an org can opt for just using a cloud-hosted service for certain components if the self-hosting burden is too great and their threat model determines it to acceptable.

    The docs are here at https://sts.libretechnica.org/ and the source for the docs and all the Ansible playbooks are at https://gitlab.com/libretechnica/SovereignTechStack/. I invite anyone to contribute, analyze, pick-apart, improve this model. In fact, I’m specifically seeking thoughts on whether this reference model can adequately address the risks and threats that self-hosters face.

    This is the first time I’m sharing this publicly; I was inspired by this post to finally spread awareness of the project and get more like-minded people involved.

    P.S. @h333d Sorry about the people who think your post is gen-AI. I used to proofread stuff all day long before the advent of LLMs, so I quickly recognize artificial text and yours reads nothing like it. I appreciate the time you took to write your post and it was a refreshing read.

  • source
  • [–] 12 points 10 months ago

    I'm slowly making the switch over to self hosting most things. This is a good post.

  • source
  • [–] 12 points 10 months ago

    Dude like even 6 months ago Id read your post and would think alright man c'mon..

    But now you are 100% right it's getting tough and people will only realize when it's too late. Imagine a far right government with palantir in Europe. That's pretty much where we are heading and I try my best to get any of my data away from this sphere of influence

  • source
  • [–] 12 points 10 months ago

    Yeah I mean this is why I've always been concerned about privacy.

    The most flagrant example is the Pasco county "intelligence-led policing" where they used data acquired by databrokers and fed it into a prediction model that decided who was most likely to commit a crime, then harassed them at all hours of the day and night until they were coerced into committing a crime or they left town.

    I assume ICE is doing the same sort of things.

    This was always the inevitable result of all the data hoarding. Keep your data out of these databases and you just become nearly invisible to them.

  • source
  • [–] 23 points 10 months ago* (1 child)

    In a fascistic enough world where this would matter, people who abstain from the system are automatically flagged to be shot too, just fyi. You gotta also fill the normie services with conformist content to not become a detected anomaly if you really want to do it properly.

  • source
  • hideshow 1 child comment
  • [–] [S] 5 points 10 months ago

    This is the "Gray Man" strategy. If you have zero digital footprint in 2026, that absence of data becomes a data point itself. Anomalies get investigated.

    I think we need to separate Camouflage from Logistics.

    I’m not suggesting you delete your digital existence and live in a Faraday cage. By all means, keep the normie accounts. Post the cat photos on Instagram. Keep a Gmail address for the spam. Feed the algorithm just enough "conformist" content to look boring. That is your camouflage.

    But Resistance Infrastructure isn't about hiding, it's about capability.

    It’s about ensuring that when the "system" decides to de-platform your community group, or lock your bank account, or shut off the internet in your region during a protest, you still have a way to function.

  • source
  • parent
  • load more comments
    view more: next ›