Self-Host Weekly (29 May 2026)

SPONSORED BY    1Panel

Weekly Highlights

If you missed it, the Pope dropped a mixtape this week (TIL the Vatican has its own top-level domain) outlining his thoughts on the co-existence of humans and artificial intelligence, and it's a banger:

MAGNIFICA HUMANITAS OF HIS HOLINESS POPE LEO XIV ON SAFEGUARDING THE HUMAN PERSON IN THE TIME OF ARTIFICIAL INTELLIGENCE

Setting aside a quote from Gandalf (Lord of the Rings) in a section titled We can all do our part, the 52-page document is a fascinating read and a well-articulated case against AI's unregulated growth and long-term impact on society.

The document itself is a fairly accessible read for both religious and non-religious people alike, but I personally found Simon Willison's highlights super helpful for those looking for the tl;dr version, which include the following snippets (among others):

• Indeed, current AI systems are more “cultivated” than “built,” for developers do not directly design every detail, but instead create a framework within which the intelligence “grows.”
• Development is not truly human if it increases consumption for some while shifting costs and burdens onto others...
• The apparent objectivity of the responses and suggestions these systems provide can lead us to overlook the fact that they reflect the cultural assumptions of those who designed and trained them...
• Data is the product of many contributors and should not be treated as something to be sold off or entrusted to a select few.

To be clear, I'm not advocating for or against AI or the Pope (although I should disclose that my cat's name is Leo, but for unrelated reasons). I simply find it wild to see a technological advancement so controversial that the Vatican felt compelled to weigh in (can they please do open source next?).

Unfortunately, the reality is that AI has created tension in the self-hosted community that doesn't seem to be going anywhere anytime soon. As we continue to wrestle with SEO-laden slopware and vulnerable codebases, these snippets from the Pope's closing thoughts feel oddly relevant:

• The need to disarm words
• Cultivating a healthy realism
• Reviving dialogue

In other news:

• Researchers found a severe vulnerability that leaves private images exposed on Gitea and Forgejo instances – update ASAP
• The Homarr (dashboard) team delivered on their promise to decrease the app's unusually large memory footprint after receiving public complaints a few months ago
• The creator of Hypermind is back with Hypermind-Swarm, a new take on P2P chaos – this time with built-in social features
• A newsletter reader released Ansible-HandsOn, a containerized homelab environment for learning and mastering Ansible (automation)
• This week's award for best project name: dumb, a privacy frontend for the Genius lyrics website

Happy selfh.st/ing!

Newswire

CVE-2026-27771: NoScope Discovered 30,000+ Gitea Instances Exposing Private Container Images for 4 Years

Gitea private container images were accessible to anyone on the internet, no credentials required, across healthcare, aerospace, and critical infrastructure worldwide.

NoScope

New Web and Mobile Strategy for LibreOffice - TDF Community Blog

LibreOffice is a desktop application, and we will continue making it. But we have constant requests for web and mobile versions, so here is our updated plan. These are minutes from the TDF Team and Board of Directors meetings on web and mobile strategy for LibreOffice: Who was present Team: Michael Weghorn, Jonathan Clark, Sophie Gautier, Neil Roberts, Mike Saunders, Guilhem Moulin, Heiko Tietze, Ilmari Lauhakangas, Dan Williams, Xisco Fauli, Christian Lohmaier, Vissarion Fysikopoulos, Juan José Gonzalez, Olivier Hallot, Florian Effenberger, Hossein Nourikah Board: Eliane Domingos, Mike Saunders, Paolo Vecchi, Simon Phipps, Sophie Gautier Summary The meetings, which took place April 20, April 22 and May 19, focused on discussing LibreOffice and TDF strategies for the evolving development landscape and the future of LibreOffice across all platforms – desktop, mobile, and cloud. Team roles were reviewed, and new assignments were proposed. Status of the current foundation team activities Since 2020, the development of LibreOffice within the foundation focused almost uniquely on the desktop version of LibreOffice (and to a lesser extent, the Android viewer app) and that part will continue unchanged. Therefore the foundation will continue to deliver two major LibreOffice releases per year. Engineering Steering Committee (ESC) The current

TDF Community BlogMike Saunders

State of the Fin 2026-05-24 | Jellyfin

Welcome to the second edition of State of the Fin! This update will be slightly different to the previous one as we don’t have as many large updates to announce (yet)! Still, we want to keep you informed on what is happening and what the Jellyfin development team are working on. Please enjoy, and contribute through our standard channels if you have questions or comments.

Jellyfin LogoJellyfin Team

Your editor is a supply chain security risk now

Developer tooling is part of supply chain security now. Editors, extensions, CLIs, language servers, and AI tools sit next to credentials that publish packages.

Franck Nijhof (Frenck)Franck Nijhof

Why The Smart Home Bubble Popped

Circa 2015 or so, it seemed like you couldn’t move a finger without being bombarded with ads and articles about ‘smart homes’ and the ‘internet of things’ — all …

HackadayMaya Posch

AdGuard Home: Network-Wide Ad Blocking You Control

Run your own DNS server at home. See exactly what every device is doing, block ads network-wide, and take complete control of your network.

ivanmisic.netIvan Misic

Roku OS’s home screen now features a large, permanent ad

“I don’t want recommendations! I know what I want to watch.”

Ars TechnicaScharon Harding

More From selfh.st

Optimal Plex Settings for Privacy-Conscious Users

Update these settings to limit the data Plex collects about your account, content, and streaming habits

selfh.stEthan Sholly

Self-Hosted Software Names You’re Probably Mispronouncing

An unofficial guide to commonly mispronounced names in self-hosted software

selfh.stEthan Sholly

Feedback

Content Spotlight

Meet Tracearr, a real-time monitoring application for Plex, Jellyfin, and Emby media servers. With Tracearr, administrators can easily track and monitor streams for later analysis or detect credential sharing via geolocation data. Features include multi-server support, session history (user, media, date, and device), library analytics, map visualization, trust scores, and real-time alerts.

Tracearr can be deployed via Docker and requires separate PostgreSQL and Redis containers for data storage and caching.

Links: Website, Source Code

Videos and Podcasts

• Portainer to Dockhand: One Container Replaced Several | DB Tech
• Leaving VMware for XCP-ng? Here's What You Need to Know First | Lawrence Systems
• Profilarr v2: The Best Way to Manage Radarr & Sonarr in 2026 | Servers@Home
• 5 Proxmox Fixes Worth Doing This Weekend | VirtualizationHowTo
• Moving Unraid OFF USB Drives! (Internal Boot Setup Guide) | AlienTech42
• Technitium: The Self-Hosted DNS Server You Should Run | Christian Lempa

Command Line Corner

Use echo "!!" to create a script of the previously executed command – helpful for capturing complex commands that will need to be reused in the future:

$ rsync -av --delete /home/appdata /backup
$ echo "!!" > selfhost.sh
$ cat selfhost.sh
    rsync -av --delete /home/appdata /backup

Executive Sponsors

Thanks to following executive sponsors, whose continued support makes this newsletter possible:

• 1Panel – Modern, open source VPS control panel
• AFFiNE – Privacy-first knowledge base
• Atria – Event management and networking platform
• Dawarich – Location history tracking and insights
• Faved – Open source bookmark and link manager
• Komodo – Build and deploy software across servers
• Postiz – Agentic social media scheduling
• Servers@Home – Homelab resources and community
• tirreno – Open source security framework
• Uncloud – Deploy and scale containerized apps across servers

Submit Content

I'm always looking for new and existing self-hosted content to share in Self-Host Weekly. Submit the form below if you'd like to have your own content featured or have a suggestion for content types you'd like to see featured in future newsletters.