Skip Navigation

Search

Selfhosted @lemmy.world
Nico198X @piefed.europe.pub

How to fork a docker image?

Solved!

more expanded details can be seen here:

https://github.com/TheoLeCalvar/peertube-plugin-hardware-transcode-vaapi/issues/6#issuecomment-3246562059

Thank you, all!


hey all!

i need some guidance. can you help point me in the right direction?

there a docker image that is basically fine, except i just want to add a group to it so that group will exist in the container.

how do i do this? is there a way to do this that will just pull the original image as is, so it will update when the original image updates, and then just add the group i need?

thanks in advance!

Selfhosted @lemmy.world
confusedpuppy @lemmy.dbzer0.com

Caddy + DeSEC.io + DNS Challenge

For a couple weeks I've been struggling to get TLS over Caddy with DNS challenges. My ISP blocks incoming data on ports 80/443 and I was looking to use an uncommon port (5050) for my personal needs.

I've followed the instructions here and I've made sure to use the proper DeSEC.io module in my docker build.

When I start my docker container and check the logs, I get an error that says the challenge failed because of an incorrect TXT record. However when I check DeSEC.io's website, the TXT record that was created matches the Caddy log error message and even shows that the TXT record has been last touched "less than a minute ago."

I've tried minimizing my Caddyfile to the bare minimum and I still can't seem to get TLS working.

::: spoiler Dockerfile

                                    
    
FROM caddy:2.10.0-builder AS builder

RUN xcaddy build \
    --with github.com/caddy-dns/desec
FROM caddy:2.10.0

COPY --fr
  
Selfhosted @lemmy.world
Nico198X @europe.pub

Podman quadlet adding files to container

i just ended up going with a new image with the components installed, which i've been informed is best practice.


Hey there!

i have an Owncast container that needs two extra files added to it every time it starts up because the base image doesn't include them. they can be downloaded from within the container. i just need a way to tell the container to always do that when it starts up.

i've tried adding this to my quadlet:

[Container]

Exec=apk update && apk add --no-cache mesa-va-gallium mesa-dri-gallium

but it doesn't work.

does anyone know how to correctly automate this?

thanks!

Selfhosted @lemmy.world
Nico198X @europe.pub

Owncast, SELinux, Podman, Hardware Accelaration

SOLVED: turns out mesa is not enough for this. i also had to install:

mesa-va-gallium mesa-dri-gallium

now we're good!


hi all!

i've hit a wall here and could use your input if you have any thoughts!

i'm running Owncast latest via rootful Podman on a distro with SELinux.

i'm trying to implement hardware acceleration via the server's AMD GPU, but it is not working.

AMD Radeon RX 7600

Kernel: 6.15.4-1-default

i've turned VAAPI on in the web admin settings.

the container comes with ffmpeg 6 and libva.

For SELinux, i've run:

setsebool -P container_use_devices true

In my quadlet i've added:

[Container]

AddDevice=/dev/dri

Exec=apk add mesa

the devices appear rw in the container:

/app # ls -l /dev/dri

total 0

crw-rw---- 1 root 486 226, 0 Jul 9 15:58 card0

crw-rw---- 1 root 489 226, 128 Jul 9 15:58 renderD128

here is the error i'm getting:

`time="2025-07-09T15:58:46Z" level=error msg="[AVHWDevi

Selfhosted @lemmy.world
Allero @lemmy.today

ELI5: How to put several servers on one external IP?

I'm pretty new to selfhosting and homelabs, and I would appreciate a simple-worded explanation here. Details are always welcome!

So, I have a home network with a dynamic external IP address. I already have my Synology NAS exposed to the Internet with DDNS - this was done using the interface, so didn't require much technical knowledge.

Now, I would like to add another server (currently testing with Raspberry Pi) in the same LAN that would also be externally reachable, either through a subdomain (preferable), or through specific ports. How do I go about it?

P.S. Apparently, what I've tried on the router does work, it's just that my NAS was sitting in the DMZ. Now it works!

Selfhosted @lemmy.world
Hercules @lemmy.world

How to install psql extention (VectorChord) in bitnami/postgresql

Hello,

Im planning on running a postgresql server on my k3s cluster using the bitnami/postgresql helmchart & container image. I already set it up for testing and it works really well.

But since newer versions of immich are moving to VectorChord I would like to install this extention so i can move my immich database to this postgresql server.

I already tried to search how i should/could install an extention in the bitnami/postgresql image but I haven't found something usefull to me. Im not a postgresql expert so maybe i missed some stuff :).

Does someone have experience with this or know in which direction i should like i would greatly appreciate it.

Thanks for your time and have a wonderfull day!

EDIT: Could someone explain me why im getting downvotes for this post? Is the way i wrote it not good? Is it a bad question? Is the software i mentioned unpopular?

Selfhosted @lemmy.world
gedaliyah @lemmy.world

Docker is renaming a mounted drive

So I recently moved most of my docker storage to a second hard drive, called "storage." After a system restart, docker is creating a folder called "storage," forcing the physical drive to be renamed "storage1." How do I prevent this from happening?

I am using Xubuntu.


Edit: As suggested, it was indeed my system spinning up Docker before mounting the internal disk. The solution (should work on most Unix-like systems) was to manually add a line to /etc/fstab as follows: First get the UUID for the problem drive

 undefined
    
~$ sudo blkid -s UUID


  

The output will show your drives and the UUID of each. Then edit the following file:

 undefined
    
~$ sudo mousepad /etc/fstab #{or use your choice of editor, i.e. nano}


  

Add the following line:

 undefined
    
/dev/disk/by-uuid/{UUID number copied from blkid output} /destination/of/your/drive ext4 defaults 0 0


  

Of course replace {UUID number copied from blkid output} and /destination/of/your/drive and set defaults & parameters as needed. These worked fo

Selfhosted @lemmy.world
Dave @lemmy.nz

How do I run docker compose on Bazzite?

I'm not really sure where the right place to ask is, but I figure this is a good place for docker related questions.

I have recently installed Bazzite as my daily driver, previously I was on Nobara. The main difference here is that Bazzite is immutable, so you can't (or shouldn't) install stuff in the normal way as it may get overwritten by updates.

I have a bunch of docker compose YAML files. I want to run these locally. But I also don't want to tweak anything in the files to get them running because they should be able to be copied to a prod environment as is or the local test environment isn't a good test. Prod would be either my Linux Mint server or an Ubuntu Server one.

Bazzite has a ujust script available for installing docker, but this doesn't include docker compose, and I'm not sure how to add that in.

Searching online shows everyone saying just use podman, it comes pre-installed and is a drop in replacement. The problem is that it doesn't work.

Maybe that's my question, w

Selfhosted @lemmy.world
DasFaultier @sh.itjust.works

Looking for ... inventory management, I guess?

Hey everyone,

I'm looking for a system that:

  • I can self host
  • Is slim, because I don't have beefy hardware (Intel J5040, 32GB RAM, shared by all VMs/containers)
  • can be used to create an inventory of all the tech/hardware that I have in my house (not exclusively IT, I also wasn't to track things like warranty for my chainsaws and the like)
  • does take at least the device make/model, serial number (for insurance cases) and warranty dates
  • is not some kind of enterprise-how-many-items-of-this-article-do-i-have-in-stock-things, because that seems to be the only thing I seem to be able to find, and they neither match my use case nor do they seem to be lightweight enough.

... and honestly, I don't even know where to start looking. Do you guys have any recommendations?

Of course, I could just use a spreadsheet, but where's the fun in that?

EDIT: Thank you all so much for the engaged discussion and all the suggestions, you're the best!

Selfhosted @lemmy.world
china🇨🇳 @lemmy.ca

How to forward real IP from Caddy server?

Hello,

I have hosted azuracast in my minipc and I want to forward the IP of the song requester, right now it's only taking one IP the "podman container ip" so basically Azuracast thinks that every request is coming from the IP address 10.89.1.1 which is the IP of interface created by podman.

 undefined
    
57: podman3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 0e:fa:6d:33:b9:39 brd ff:ff:ff:ff:ff:ff
    inet 10.89.1.1/24 brd 10.89.1.255 scope global podman3
       valid_lft forever preferred_lft forever
    inet6 fe80::b876:abff:fede:c3ef/64 scope link
       valid_lft forever preferred_lft forever

  

also I am explicitly forwarding the IP using X-Forwarded-Host.

 undefined
    
reverse_proxy http://localhost:4000/ {
        header_up X-Forwarded-Host {host}
    }

  

I don't know how to resolve it, any help would be appreciated :)

Edit: I didn't had to so any of this stuff, what I should have done is just enabling "reverse proxy" option in Azuraca

Selfhosted @lemmy.world
someacnt @sh.itjust.works

Nextcloud AIO inside container - domain verification fails

I am setting up nextcloud AIO in a podman container on my VPS. After some struggle, I got to the installation page, but domain checking is simply not working out.

After looking up, I decided to check the port from host machine. Strangely, curl localhost:11000 hangs indefinitely. nextcloud-aio-domaincheck container is running, and it mapped port as 0.0.0.0:11000->11000/tcp. The domaincheck server should be reachable, and I don't think firewall would be preventing localhost access.. The single line log from domaincheck container is:

 undefined
    
2025-03-20 13:47:43: (../src/server.c.1939) server started (lighttpd/1.4.76)

  

I am utterly lost here. Does anyone know what would be possible reasons, and how to troubleshoot the issue? Any pointers would be greatly appreciated. Thank you in advance!

EDIT: Just ran sudo podman exec nextcloud-aio-mastercontainer curl nextcloud-aio-domaincheck:11000, it seems to work in the internal network. At a loss how this does not get exposedd to the host

Selfhosted @lemmy.world
someacnt @sh.itjust.works

How do I debug network issues, regarding caddy in podman?

Disclaimer: I am running personal website on cloud, since it feels iffy to expose local IP to internet. Sorry for posting this on selfhosting, I don't know anywhere else to ask.

I am planning to multiplex forgejo, nextcloud and other services on port 80 using caddy. This is not working, and I am having issues diagnosing which side is preventing access. One thing I know: it's not DNS, since dig <my domain> works well. I would like some pointers for what to do in this circumstances. Thanks in advance!

What I have looked into:

  • curling localhost from the server works well, caddy returns a simple result.
  • curl <my domain> times out, currently trying to inspect packets - it seems like server receives TCP without HTTP.
  • curl <my domain>:3000 displays forgejo page, as forgejo exposes at 3000 in its container, which podman routes to host 3000.

EDIT: my Caddyfile is as follows.

 undefined
    
:80 {
    respond "Hello World!"
}

http://<my domain> {
    respond "This should respond"
}

http:/
  
Selfhosted @lemmy.world
The 8232 Project @lemmy.ml

How do I give Jellyfin permanent access to an external drive?

I didn't like Kodi due to the unpleasant controls, especially on Android, so I decided to try out Jellyfin. It was really easy to get working, and I like it a lot more than Kodi, but I started to have problems after the first time restarting my computer.

I store my media on an external LUKS encrypted hard drive. Because of that, for some reason, Jellyfin's permission to access the drive go away after a reboot. That means something like chgrp -R jellyfin /media/username does work, but it stops working after I restart my computer and unlock the disk.

I tried modifying the /etc/fstab file without really knowing what I was doing, and almost bricked the system. Thank goodness I'm running an atomic distro (Fedora Silverblue), I was able to recover pretty quickly.

How do I give Jellyfin permanent access to my hard drive?

Solution:

  1. Install GNOME Disks
  2. Open GNOME Disks
  3. On the left, click on the drive storing your media
  4. Click "Unloc
Selfhosted @lemmy.world
robolemmy @lemmy.world

I've set up docker services behind nginx proxy manager so they're accessible with https, but the http services are still open. How do I close them?

I'm using a docker compose file, and I have everything running just fine, containers talking to each other as needed, NPM reverse proxying everything via a duckdns subdomain... everything's cool.

Problem is, I can still go to, for example, http://192.168.1.30:8080/ and get the services without http.

I've tried commenting out the ports in the compose file, which should make them only available on the internal network, I thought. But when I do that, the containers can no longer connect to each other.

Any advice for me?

Edit:

Thanks for the quick & helpful suggestions!

While investigating bridge networks, I noticed a mention that containers could only find each other on the default container bridge by container name, which I did not know. I had tried 127.0.0.1, localhost, the external IP, hostnames, etc but not container names.

In the end, the solution was just to use container names when telling each container how to find the others. No need for creating bridge ne

Selfhosted @lemmy.world
Sol 6 VI StatCmd @lemmy.world

Nextcloud can't see config.php in new install directory

Update: Turned out I had like 3 versions of php and 2 versions of postgres all installed in different places and fighting like animals. Cleaned up the mess, fresh install of php and postgres, restored postgres data to the database and bobs your uncle. What a mess.

Thanks to everyone who commented. Your input is always so helpful.


Original Post

Hey everyone, it's me again. I'm now on NGINX, surprisingly simple, not here with a webserver issue today though, rather a nextcloud specific issue. I removed my last post about migrating from Apache to Caddy after multiple users pointed out security issues with what I was sharing, as well as suggesting caddy would be unable to meet my complex hosting needs. Thank you, if that was you.

During the NGINX setup which has gone shockingly smoothly I moved all of my site root directories from /usr/local/apache2/secure to /var/www/

Everything so far has moved over nicely... that is until nextcloud.

Selfhosted @lemmy.world
Sol 6 VI StatCmd @lemmy.world

Can't renew cert on a self-hosted lemmy instance D:

EDIT: Thanks everyone for your time and responses. To break as little as possible attempting to fix this I've opted to go with ZeroSSL's DNS process to acquire a new cert. I wish I could use this process for all of my certs as it was very quick and easy. Now I just have to figure out the error message lemmy is throwing about not being able to run scripts.

Thank you all for your time sincerely. I understand a lot more than I did last night.


Original Post

As the title says I'm unable to renew a cert on a self-hosted lemmy instance. A friend of mine just passed away and he had his hands all up in this and had it working like magic. I'm not an idiot and have done a ton of the legwork to get our server running and working - but lemmy specifically required a bit of fadanglin' to get working correctly. Unfortunately he's not here to ask for help, so I'm turning to you guys. I haven't had a problem with any of my other software such as nextcloud or pixelfed but for some re

Selfhosted @lemmy.world
DreadPotato @sopuli.xyz

Proxmox not conncected to internet, but is reachable on LAN

[SOLVED] Turns out I'm just a bigger moron than I thought. The MAC address of my server had accidentally been flagged in my router for black listing.

As the title says, my proxmox host is apparently not able to reach the internet anymore, not sure for how long this has been an issue, I rarely work on the host itself. It can ping other devices on my network just fine, and other devices can ping it. I can also SSH in to it and access the web interface. My VMs are connected to the internet without any issues. I don't need to access the host remotely/outside my home network, this is just for updating it etc.

I can't see the host under active devices in my router though.

I have been trying to figure why, but so far without any luck.

Selfhosted @lemmy.world
Tiritibambix @lemmy.ml

I want to ditch Nextcloud notes

Hi.

I'm curently using Nextcloud notes for its convenience. I use the app on my phone, and the webui on my pc.

I'm willing to ditch Nextcloud as a whole, so I want to replace my note taking habits.

I've tried Trilium, which lacks an Android app, and I feel the WPA makes the UI unpractical and hard to read.

I've tried Joplin, but it lacks a webui.

Are there other alternatives I've missed out ?

Solution: I ended up finding Flatnotes. It's dead simple to run and to use, has markdown and WYSIWYG, and the WPA is flawless.