This Week in Self-Hosted (2 February 2024)

In the News

A roadmap and appeal for help from The Matrix.org Foundation

Matrix, the open protocol for secure decentralised communications

A roadmap and appeal for help from The Matrix.org FoundationJosh Simmons

Remote user impersonation and takeover

### Summary Due to insufficient origin validation in all Mastodon, attackers can impersonate and take over any remote account. Every Mastodon version prior to 3.5.17 is vulnerable, as well as…

GitHubmastodon

Streaming media company Plex raises $40M as it nears profitability | TechCrunch

Media streamer Plex has raised new capital. The company, which began as a media organization startup, has morphed over the years to become a one-stop shop

TechCrunchSarah Perez

Thanksgiving 2023 security incident

On Thanksgiving Day, November 23, 2023, Cloudflare detected a threat actor on our self-hosted Atlassian server. Our security team immediately began an investigation, cut off the threat actor’s access, and no Cloudflare customer data or systems were impacted by this event.

The Cloudflare BlogMatthew Prince

Sendent for MS Teams: Integrating Nextcloud and Microsoft Teams - Nextcloud

Integrate Nextcloud with Microsoft Teams to effortlessly share files and folders stored on their private Nextcloud server directly from the Teams user interface.

NextcloudPeter Mocanu

Software Updates

• Discourse v3.2 | Community Platform: Improved chat experience, new features for Discourse AI (built-in personas, smarter search, provider selection), easier admin configuration, passkey authentication
• Fasten Health v1.1.0 | Medical Records: CCDA support, support for Kaiser Benefits/Claims, updates to sources search engine, delete individual accounts
• FeedCord v2.0.0 | Discord RSS: Support for multiple webhooks, support for Discord Forums, streamline configuration properties
• Ghost v5.78.0 | Content Management: Improved sending e-mail addresses for self-hosters
• Immich v1.94.0 | Photos: Hardware acceleration for machine learning, search on the 'People' page, new transcoding options, update external libraries on filesystem change
• LinguaCafe v0.6 | Language Learning: Fixed sidebar vocabulary, minimal vocabulary box on hover, YouTube subtitle imports, hotkeys for text reader
• Linkding v1.24.0 | Bookmarks: Support for Open Graph descriptions, tooltips for truncated titles, improved bulk tag performance, increased tag limit in autocomplete
• LinuxServer.io | Container Updates: New container – Shotcut
• LubeLogger v1.1.0 | Vehicle Maintenance: Numerical columns now sortable on all tabs, move records, export attachments to records, print records on individual tabs, new Markdown mode for notes
• Mealie v1.1.0 | Recipes and Meals: Add ingredient sections to copied ingredients, ability to edit existing mealplan meals, improvements to adding recipes to shopping lists
• Memos v0.19.0 | Notes: Container tag updates ('latest' to 'stable'), new syntax for embedding content, render HTML directly within codeblocks, tag renames, collapsible navigation bar
• Note Mark v0.11.0 | Note-Taking: Print and download notes, improved header/footer consistency, button to copy note to clipboard, clickable breadcrumbs
• OnlyOffice v8.0 | Office Suite: New spreadsheet functionality (goal seek, series, chart wizard), initial RTL support, improved collaboration
• OPNsense v24.1 | Firewall: OpenSSL 3, Suricata 7, new neighbor config feature for ARP/NDP, core inclusion of os-firewall and os-wireguard plugins
• Stirling PDF v0.20.1 | PDF Editor: New stamp functionality (add text or images to set locations, custom opacity and colors)

New Software

• FeedRiv: Feed reader specializing in tagging and rating content
• Fuiz: Open-source Kahoot! alternative
• Glasskube: Open-source package manager for Kubernetes
• JellyBox: Native Jellyfin music client for Apple devices
• Morphos Server: Self-hosted file converting server
• Twine: Open-source, multi-platform mobile RSS reader
• Wren: Minimal to-do/note-taking app w/ Telegram support

Community Content

Running a Mastodon instance entirely free forever | Josh’s Cool Dev Blog

The dev blog of Joshua Byrd

josh@thinkpad:~/src$

HTTPS with self-signed certificates for your Homelab services

In this article we will deep dive into understanding how we can setup HTTPS with self-signed certificates for our Homelab services.This is often required when you are running your own services and you want to access them over HTTPS.

Akash RajpurohitAkash Rajpurohit

No, really: Invite anyone to your tailnet

Right around the turn of the new year, we rolled out a little update to our user invite system. The change: you can now invite people who don’t authenticate through GitHub to join a tailnet owned by a user who does. For users who have built out tailnets based on a GitHub login and had run into this issue, it’s a small headache relieved. But it also reflects a bigger milestone — we were finally able to remove the “limitations” section from our “Invite any user” documentation.

Bitwarden (@[email protected])

Passionate about Bitwarden UX and want to join our user research program? Check out our post on Reddit to learn more and sign up 🚀 https://www.reddit.com/r/Bitwarden/comments/1aews3m/hello_im_kevin_the_director_of_product_design_at/

Fosstodon

Weekend Discussion

selfh.st (@[email protected])

Weekend Discussion 💬 What self-hosted wiki software have you deployed for documentation in your homelab? #selfhost #selfhosted #selfhosting #wiki #opensource #discussion

Fosstodon

Content Spotlight: PiAlert

Meet PiAlert, a network security monitor and scanner with a web interface inspired by Pi-hole. Developed as an easy-to-run application (not just limited to the Raspberry Pi as its name suggests), PiAlert scans networks for new devices, always-connected device downtime, IP changes, and more – with support for over 80 notification services for customized and configurable alerts. The software can run in conjunction with other network-related applications and even import databases and configured leases from Pi-hole, UniFi controllers, and other generic DHCP implementations. Functionality can be easily extended with a supported Home Assistant integration or custom plugin system.

PiAlert can be installed via Docker or bare metal. Note that the project linked above and below is an actively-developed fork of the original, unmaintained project.

Links: GitHub, Documentation

What We're Watching

• Automate Homelab Deployment With Terraform & Proxmox | Jim's Garage
• The Downsides of Self-Hosting Your Applications at Home | DB Tech

What We're Listening To

The Homelab Show Ep. 118 – Backup Strategies – The Homelab Show

The Homelab Show Catch Up on the Vlog and Podcast

Smart Home and Automation

Companion app for iOS 2024.1: CarPlay is here!

Home Assistant arrives in CarPlay; open your garage with a simple tap!

Home AssistantBruno Pantaleão

Why Matter is Irrelevant to Home Assistant Users

If you are a Home Assistant user, here’s my personal take on why you shouldn’t care about Matter and why it is irrelevant to you for the foreseeable future.

SmartHomeScene.comSHS

Upcoming Events

FOSDEM 2024 - Home

fosdem-2024

Voice Assistant Contest - Let’s build and win some prizes!

We are organizing a voice assistant contest between the 17th of January and the 10th of March. You can win some Home Assistant Green, some Home Assistant SkyConnect, and a chance to be on a livestr…

Home AssistantJean-Loïc Pouffier

Fediverse Chatter

Privacy

Announcing the Mattermost Trustcenter

Our Trustcenter is your hub for everything and anything your organization needs to know about the security program at Mattermost

Mattermost.comDaniel Schalla

Data Privacy Week | Bitwarden Blog

What does your data privacy stack look like?

Bitwarden

Data Privacy Week: Who owns your data? - Nextcloud

With Data Privacy Week in full swing, we’re excited to be part of the conversation in regaining and maintaining privacy of your data.

NextcloudBrent Gervais

Command Line Corner: watch

Use the watch command to monitor changes to the output of another command over intervals of time. This is useful when monitoring things like script results, disk usage, and other tools that print a response as an output.

The command also comes with a number of helpful options including specifying an interval other than the default two seconds (-n), highlighting the differences between outputs (-d), or terminating the watch command when the output changes (-g). If not configuring the command with an option to automatically stop, use Ctrl + C to manually exit.

/$ watch date

Fri Feb 2 07:30:00 EST 2024
                 2

Click here to view an archive of commands shared in previous newsletters.

Other News in Tech

First look: Windows 11 is getting native macOS or Linux-like Sudo command

Microsoft is testing native support for Sudo command on Windows 11. This support was found in a leaked preview build of Windows Server.

Windows LatestMayank Parmar

Your home network might soon get a new — and simpler — name

.internal is for your intranet, not the internet.

The Verge

Share Your Content in a Future Newsletter

I'm always looking for new and existing self-hosted content to share in This Week in Self-Hosted. Reach out using the button below if you'd like to have your own content featured or have a suggestion for content types you'd like to see featured in future newsletters.