Securing Docker API with TLS

Docker API Certificate I had to setup remote access to the Docker API on one of my hosts & needed to check my notes on exactly what I did to get it setup. The first step was creating the CA to get the certificate from: I probably should have gone with more than 1 year, but will worry about that when it expires & i have no idea what broke. openssl genrsa -aes256 -out Docker_API-CA.key.pem 4096 openssl req -new -x509 -days 365 -key Docker_API-CA.key.pem -sha256 -out Docker_API-CA.cert.pem Now to get a client certificate that will be used by one of the services, i.e.: Homepage. openssl genrsa -out $service-client.key.pem 4096 openssl req -subj '/CN=$service-client' -new -key $service-client.key.pem -out $service-client.csr echo extendedKeyUsage = clientAuth > extfile-$service-client.cnf openssl x509 -req -days 365 -sha256 -in $service-client.csr -CA Docker_API-CA.cert.pem -CAkey Docker_API-CA.key.pem \ -CAcreateserial -out $service-client.cert.pem -extfile extfile-$service-client.cnf To run the docker API on :2376 & local socket i needed to edit one of the config files. If running rootless, this file needs to be edited: “~/.config/systemd/user/docker.service”. This will use the new TLS certificate created, run the API on port 2376, AND run the local socket as well. … Environment=DOCKERD_ROOTLESS_ROOTLESSKIT_FLAGS="-p 0.0.0.0:2376:2376/tcp" ExecStart=/usr/bin/dockerd-rootless.sh –tlsverify –tlscacert=~/.docker/certs/Docker_API-CA.cert.pem –tlscert=~/.docker/certs/Docker_API-Server-$hostname.cert.pem –tlskey=~/.docker/certs/Docker_API-Server-$hostname.key.pem -H unix:///run/user/1000/docker.sock -H tcp://127.0.0.1:2376 … ...

July 1, 2025 · Sean P. McAdam

w33k in g33k: June 27, 2025

I didn’t post last week (or the week before?) so I’m going to combine a few of the things I had written down. Flipper GitHub: beigeworm / BadUSB-Files-For-FlipperZero: “A Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.” Games Switch 2 release: I was planning to eventually pick one up, but happen to go to a place that had them in stock over the weekend & bit the bullet & purchased it. Got the bundle so it has Mario Kart World with it. GBATemp: How to Mod Your Nintendo Switch 2 (The Ultimate Totally Legit Guide) - Written by ChatGPT I’m going to have to see about the virtual game cards… I’m assuming it’s just digital games (which I would try to avoid & get the physical where possible), but will actually have to read up on that a bit more to see if I’m correct. WCCFTech: 3dSen NES Emulator 1.0 is Now Available, Turns Classic 2D Games Into Playable 3D Voxel Dioramas Looked like something fun to try out on NES ROMs. GitHub: HarbourMasters / SpaghettiKart: Mario Kart! YouTube: We started porting LEGO Island to… everything?: I remember playing this game when I was younger so I was curious to see what they’re doing with it. I will get the Invidious link for this before posting (hopefully) Miscellaneous ImmichFrame: “An awesome way to display your photos as a digital photo frame” GitHub: immichFrame \ ImmichFrame: ImmichFrame / Install_Client.md: Frameo Immich Kiosk: “Immich Kiosk is a lightweight slideshow for running on kiosk devices and browsers that uses Immich as a data source.” Hackaday: What Use Is An Original Raspberry Pi? I wanted to take a look & see if there were any ideas I could use for my spare Raspberry Pi’s. GitHub: alondmnt / joplin-plugin-jarvis I am excited to give this a try since it’s exactly what I’ve been hoping to find, to leverage my own build, upgrade, etc notes, & not have to search through everything I have listed. I am planning to have it use my local Ollama install & see what kind of results I get. Simon Willison’s Weblog: Edit is now open source: I thought it couldn’t hurt to try it out. GitHub: microsoft / edit GitHub: psviderski / uncloud: “A lightweight tool for deploying and managing containerised applications across a network of Docker hosts. Bridging the gap between Docker and Kubernetes ✨” GitHub: fabriziosalmi / certmate: “SSL Certificate Management System (API + UI)” I’m currently using Step CA & certbot, but might look into this. Actually… looking this over it appears to be more for public sites & DNS vs. local. My personal SSL certs are all .home, so this might not working for me. GitHub: ErsatzTV / ErsatzTV: “Stream custom live channels using your own media” GitHub: Shrikshel / server-tools I wanted to see if this would help manage a few different headless servers, but I think it’s more meant to manage an individual server. Raspberry Pi Geoff’s Projects: BASIC with WiFi/Internet support for the Pico W and Pico 2 W I was looking into this for my ClockworkPi PicoCalc, to see if I could leverage the wireless features of the Raspberry Pi Pico W on my device. GitHub: raspberrypi / picotool While trying to get JBlanked’s Picoware custom firmware loaded to my Pico 2 W, I came across this tool, because I wasn’t having luck jsut dragging & dropping the U2F file to the disk. Security HelpNet Security: 35 open-source security tools to power your red team, SOC, and cloud security GitHub: beigeworm / Powershell-Tools-and-Toys: “50+ Powershell Scripts, Ranging from Pranks to Red-Team Tools” Watching /r/selfhosted: OmniTools v0.4.0 - A Swiss army knife of 80+ privacy-first, self-hosted utilities /r/selfhosted: I hacked our digital frame to get off of Nixplay’s cloud /r/selfhosted: 🚀 Introducing autoResume: The Free, Open‑Source, Self‑Hosted Resume Generator! /r/selfhosted: Is there an selfhosted apple health/google fit alternative /r/selfhosted: Docmost v0.21: zip imports, read/edit mode and more /r/selfhosted: What are your top Ntfy usecases? /r/selfhosted: What are your must-have self-hosted tools on your home server that genuinely make your life easier? /r/selfhosted: What are you using as an alternative to…? /r/selfhosted: Selfhost pocket-id, fully rootless and distroless and 3x smaller than the original image! /r/selfhosted: [Release] STD (Service Tracker Dashboard) v0.4.11 — dashboard for Docker containers /r/selfhosted: Changerawr v1.0.1 Release ( Security Update ) /r/selfhosted: LessEncrypt: A light-weight tool for self-signed CA certificate signing and delivery /r/selfhosted: What should be its purpose? (Seriously, what should I do with this old raspberry)

June 27, 2025 · Sean P. McAdam

w33k in g33k: May 30, 2025

ClockworkPi PicoCalc GitHub: huntergdavis / picocalc: “scripts and utilities for picocalc MMBasic shell” GitHub: cjstoddard / PicoCalc-uf2: “Things I am doing with my PicoCalc.” GitHub: prstoetzer / PicoCalc: “Code for the ClockWork Pi PicoCalc” GitHub: mhbvr / picocalc_experiments: “Playing with PicoCalc in the simplified environment” GitHub: titimoby / picocalc-wiki: “Where to start, what to do, how to… for PicoCalc” GitHub: EinsPommes /PicoCalc—CalcOS: “🛠️ Calcos – A Hacker’s Firmware for the PicoCalc Calcos turns your ClockworkPi PicoCalc into a stealthy hacking platform.” GitHub: rhaamo PicoCALC-CALC: “Very hackish firmware to make the PicoCalc actually do calculations” GitHub: jblanked / Picoware: “Open-source custom firmware for PicoCalc, Video Game Module, and other Raspberry Pi Pico devices” ClockworkPi: PicoCalc YouTube: A custom firmware for the PicoCalc? This is Picoware #raspberrypi #clockwork #picocalc clockworkpi Forum: How to flash a new firmware? Flipper GitHub: ADolbyB / flipper-zero-files: “A Collection Of Files From Various Sources Specifically For The Flipper Zero Device (In Progress)” GitHub: Zarcolio / flipperzero: “This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.” Games YouTube: Turning Portal 2 into a Web Servero Hardware OMG Ubuntu: Flexbar (USB Apple Touch Bar Clone) Now Supports Linux: “If you missed it at the time: Flexbar is a USB-powered peripheral inspired by Apple’s now-discontinued touchscreen strip, but designed as a standalone plug-and-play device that works with any laptop, PC, tablet, or smartphone.” Maybe a fun piece of hardware to look into or purchase. ENIAC Electronic: Flexbar Miscellaneous It’s FOSS: Better Than Man pages? These Tools Help You Understand Linux Commands It’s FOSS: Guide to Using Plugins in Obsidian Medium: Enable Swap Memory on Ubuntu on Raspberry Pi /r/Shortcuts: Redirect from m.youtube.com to invidious. GitHub: blinkospace / blinko: “An open-source, self-hosted personal AI note tool prioritizing privacy, built using TypeScript .” Security & Privacy WCCF Tech: First Case of AI Mimicking a “Terminator-Like” Scenario Surfaces; OpenAI LLMs Changes Computer Code In Order To Prevent Shutdown Micah Lee: TeleMessage Explorer: a new open source research tool GitHub: micahflee / telemessage-explorer Help Net Security: LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks “LlamaFirewall is a system-level security framework for LLM-powered applications, built with a modular design to support layered, adaptive defense. It is designed to mitigate a wide spectrum of AI agent security risks including jailbreaking and indirect prompt injection, goal hijacking, and insecure code outputs.” GitHub: yaelwrites / Big-Ass-Data-Broker-Opt-Out-List GitHub: AzimsTech / Android_Hacking: “All things Android | Happy New Year 🎉 2025️⃣” selfh.st: Self-Host Weekly (30 May 2025) selfh.st: Optimal Plex Settings for Privacy-Conscious Users I think I have saved this multiple times but keep forgetting to actually read through it & make any of the recommended changes (if I haven’t already done so). GitHub: adityachandelgit/ BookLore: “BookLore is a web app for hosting, managing, and exploring books, with support for PDFs, eBooks, reading progress, metadata, and stats.” Looking for something a little simpler than calibre for my books. GitHub: allaboutduncan / comic-utis: “Stand alone utility to manage, edit, and update digital comic libraries of any size.” If I’m looking for something new \ simpler for my books, figured it couldn’t hurt to look at comics too. GitHub: papra-hq / papra: “The minimalistic document archiving platform.” I will eventually get around to trying to set this up again… Codeberg: readeck / readeck: “Readeck is a simple web application that lets you save the precious readable content of web pages you like and want to keep forever. https://readeck.org/" I am pretty happy with Karakeep (formerly Hoarder), but wanted to look at Readeck again. I know I used or tried to use it in the past, but don’t remember many details. GitHub: wizarrrr / wizarr: “Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby etc.” Been meaning to look at some of these for my self-hosted library. GitHub: maranguapo / BudgetBoss: “A stupid simple budget app!” Probably better than spreadsheets =] GitHub: cfstcyr / docker-switchboard: “Quickly control your Docker containers from a simple web UI” Maybe something simpler \ easier than Portainer. GitHub: patricksthannon / Dockscribe: “CLI tool to pull short descriptions of all currently running docker containers” Use with some other utilities to replace Portainer? GitHub: giacomo-folli / reflectiv: “reflectiv is a web application that allows users to generate personalized monthly reflection diaries in PDF format.” I use DailyTxT, but wanted to look at this too. GitHub: slackspace-io / shoebox: “A digital shoebox for organizing and preserving your videos over a lifetime.” Currently using Immich for photo (& video) backups, but wanetd to see how this was. GitHub: raydak-labs / configarr: “Sync TRaSH Guides + custom configs with Sonarr/Radarr” Self hosted library. GitHub: log-forge / logforge: “Real-time logs, Interactive terminals, Crash alerts/notifications, File system access. All in one UI, for Docker.” Help to replace Portainer \ find out when something goes down before I try to use it & see it’s broken. Command Line Corner Use find /directory -mtime -1 to quickly locate files modified in the last 24 hours (or any time period of your liking): $ find /user/test -mtime -1 selfhost-weekly.txt docker-compose.yml selfh.st: Command Line Corner: “An archive of useful Linux commands shared in Self-Host Weekly” I didn’t realize there was a dedicated page for the commands that Ethan Sholly has posted in his weekly updates.

May 30, 2025 · Sean P. McAdam

w33k in g33k: May 23, 2025

Sean’s Finds Linuxiac: How to Set up Caddy as a Reverse Proxy Thinking of looking at Caddy again, to see if I want to replace my current nginx + Step-CA + certbot process. InfoSec.pub: List of Fan (OpenSource) Ports/Remakes of Games Who doesn’t love ports \ remakes of older games. EFF: Cover Your Tracks Just curious to see what comes back. InfoSec.Pub: You can now use authenticator apps to keep your GOG account secure! I would always rather have TOTP over emailed or SMS 2FA, so this is a nice update for GOG. InfoSec.Pub: What’s up, selfhosters? It’s selfhosting Sunday again! Just thought I would review this & see if there are any interesting projects to look into. InfoSec.Pub: Edit is now open source Microsoft | Dev Blogs: Edit is now open source Obviously Microsoft’s reputation with open source \ Linux isn’t great, but was just curious about the text editor. GitHub: adityachandelgit / BookLore: “BookLore is a web app for hosting, managing, and exploring books, with support for PDFs, eBooks, reading progress, metadata, and stats.” Looking for something easier \ more straightforward than Calibre or Calibre-web. GitHub: owlistic-notes / owlistic: “🦉 Free open-source notetaking app with real-time sync 🔄⚡️🚀” I don’t know why Note apps are always something I like to look into & try. GitHub: veritas06 / SimpleJournal Since I’m so obsessed with Note apps… I can’t really take credit for any of this because I’ve been using ChatGPT for help with the code, but I thought this could be a fun way to try & learn some iOS development. GitHub: Freika / dawarich: “Self-hostable alternative to Google Location History (Google Maps Timeline)” GitHub: HackTricks-wiki / hacktricks: “Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.” GitHub: RsaCtfTool / RsaCtfTool: “RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data” Just thought it was something to note for the next time I have a chance to do any CTF’s. GitHub: badboysm890 / ClaraVerse: “Clara — Privacy-first, fully local AI workspace with Ollama LLM chat, tool calling, agent builder, Stable Diffusion, and embedded n8n-style automation. No backend. No API keys. Just your stack, your machine.” Running Ollama right now, but maybe this would be something to try. GitHub: [xtool-org] (https://github.com/xtool-org/)/ xtool: “Cross-platform Xcode replacement. Build and deploy iOS apps with SwiftPM on Linux, Windows, macOS.” Currently using XCode on macOS, but curious to see how this would run on non-macOS. rabbit.tech: How to get developer mode on rabbit r1 I haven’t used mine in ages, but thought it was interesting that they now allow this. Not that it appears to be all that popular though…: developers & moding zone TRMNL Gizmodo: Forget Tablets, This Hackable E-Ink Display Runs for Months and Syncs With 100+ Apps, Now Available to Order Engadget: Mozilla is shutting down its read-it-later app Pocket I was using this a few years ago, until I decided I didn’t want a service to have all my saved articles just for privacy, but also to not worry about the service being shutdown. I moved to just using a spreadsheet which wasn’t very smooth, then tried Linkwarden & Karakeep (formerly Hoarder), & settled on Karakeep. I didn’t realize Linkwarden was more of a bookmark-manager than a read-it-later service. docker compose \ Portainer \ Docker daemon issues… Only recently I’ve been running into some problems with rootless Docker where containers do seem to be running, except if I try to do anything via CLI on the server. I’m using Portainer (so maybe time for a change?) to manage containers & stacks a little easier, but when trying to run something like docker compose up -d --remove-orphans, I just receive an error about the connection: “Cannot connect to the Docker daemon at unix:///run/user/1000/docker.sock. Is the docker daemon running?” While typing this up & trying to give it one more shot, i might have gotten it working again. Short version is that it looks like it was because while trying to get the daemon setup to be accessed remotely (via client certificates), it was no longer listening on the local socket. I just edited the ~/.config/systemd/user/docker.service file to run on both the TCP port & local socket. Then things seem to be working again… 🤞🏻 selfh.st: Self-Host Weekly (23 May 2025) GitHub: immich-app / immich: v1.133.0 - The Hot Summer Release “New database vector extension”: Need to make a few changes to the docker-compose file that are listed in the release details. GitHub: operacle / checkcle: “CheckCle is a self-hosted open-source alternative to UptimeRobot, PagerDuty, Better Stack, and more — offering real-time server & service uptime monitoring, incident, multi-channel alerting.” I don’t really run any monitoring apps or containers, so maybe this is something I will look into. GitHub: intri-in / manage-my-damn-life-nextjs: “Manage My Damn Life (MMDL) is a self-hosted front end for managing your CalDAV tasks and calendars.” Probably overkill for the bit i use Nextcloud Calendar & Tasks, but maybe something fun to just try out. GitHub: sissbruecker / linkding: “Self-hosted bookmark manager that is designed be to be minimal, fast, and easy to set up using Docker.” I don’t know if i really need a bookmark manager vs. only a “read-it-later” app, but maybe something to look into. GitHub: novuhq / novu: “The open-source notification Inbox infrastructure. E-mail, SMS, Push and Slack Integrations.” Not using ntfy too much, so maybe something to change over to. GitHub: Efeckc17 / GoSync: “A secure file backup and synchronization application that uses SSH for remote file transfers. Features encrypted storage of credentials, automatic sync, and a modern UI. Built with Python and Qt.” Right now I’m kind of doing backups via Syncthing (just backing up config files & critical content, alot i would be okay losing), so maybe something a little more robust would be better. GitHub: profullstack / mcp-server: “A generic, modular server for implementing the Model Control Protocol (MCP).” I’m still trying to see how i can leverage AI locally to help with general day-to-day things & maybe optimize or refine some things in my homelab. OpenAlternative: Open Source Pocket Alternatives Since Firefox is shutting down Pocket, just curious to see what other recomendations there are. I’m already using Karakeep (formerly Hoarder), but open to try new things. GitHub: blinkospace / blinko: “An open-source, self-hosted personal AI note tool prioritizing privacy, built using TypeScript .” I’m always jumping between different note apps based on purposes, so seeing if this would contribute at all. I use DailyTxt, Joplin, Logseq, Obsidian for different tasks, so maybe blinko can be integrated or replace something I’m currently using. YouTube: Lawrence Systems: How I Use Syncthing for Real Time Backups CLI Notes A section for commands I might have used or found useful this week. Don’t judge… I’m more used to for loops in PowerShell, so I did have to double check how to do it in bash… will certainly make things easier for certain tasks going forward: for x in $(ls); do sha256sum $x; done

May 23, 2025 · Sean P. McAdam
w33k of g33k banner

w33k in g33k: May 16, 2025

Miscellaneous I finally got TLS certificates working with the Docker API: Docker Docs: Use TLS (HTTPS) to protect the Docker daemon socket I just went with a separate CA from my SSL certificates instead of trying to get it working with Step-CA. # Client Key: openssl genrsa -out Homepage-client.key.pem 4096 openssl req -subj '/CN=Homepage-client' -new -key Homepage-client.key.pem -out Homepage-client.csr echo extendedKeyUsage = clientAuth > extfile-Homepage-client.cnf openssl x509 -req -days 365 -sha256 -in Homepage-client.csr -CA Docker_API-CA.pem -CAkey Docker_API-CA.key.pem \ -CAcreateserial -out Homepage-client.cert.pem -extfile extfile-Homepage-client.cnf I had to “reinstall” Docker on my rootless hosts for an unknown reason, but did finally get those working again: /usr/bin/dockerd-rootless-setuptool.sh uninstall -f ; /usr/bin/rootlesskit rm -rf /home/smc/.local/share/docker /usr/bin/rootlesskit rm -rf /home/smc/.local/share/docker sudo apt-get purge docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin docker-ce-rootless-extras autoremove; autoclean sudo rm -rf /var/lib/docker sudo rm -rf /var/lib/containerd sudo rm /etc/apt/sources.list.d/docker.list sudo rm /etc/apt/keyrings/docker.asc for pkg in docker.io docker-doc docker-compose docker-compose-v2 podman-docker containerd runc; do sudo apt-get remove $pkg; done # Add Docker's official GPG key: sudo apt-get update sudo apt-get install ca-certificates curl sudo install -m 0755 -d /etc/apt/keyrings sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc sudo chmod a+r /etc/apt/keyrings/docker.asc # Add the repository to Apt sources: echo \ "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu \ $(. /etc/os-release && echo "${UBUNTU_CODENAME:-$VERSION_CODENAME}") stable" | \ sudo tee /etc/apt/sources.list.d/docker.list > /dev/null sudo apt-get update sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin sudo systemctl disable --now docker.service docker.socket sudo rm /var/run/docker.sock dockerd-rootless-setuptool.sh install selfh.st selfh.st: Self-Host Weekly (16 May 2025) GitHub: glanceapp / glance: “A self-hosted dashboard that puts all your feeds in one place” GitHub: papra-hq / papra: “The minimalistic document archiving platform.” GitHub: gelbphoenix / autocaliweb: “📚 Web managing platform for eBooks, eComics and PDFs” GitHub: sinandredemption / kath: “Kath is a lightweight, retro-style, ephemeral chat app with a small twist: you can see what the other people in the room are typing in real-time.” GitHub: murtaza-nasir / maestro: “MAESTRO is an AI-powered research application designed to streamline complex research tasks.” GitHub: openconstruct / Peersuite: “Peer to peer workspace” GitHub: blinkospace / blinko: “An open-source, self-hosted personal AI note tool prioritizing privacy, built using TypeScript .” GitHub: dhop90 / homelab: “How I document my homelab” GitHub: glanceapp / glance: “A self-hosted dashboard that puts all your feeds in one place”

May 16, 2025 · Sean P. McAdam

w33k in g33k: May 09, 2025

Sean’s Notes: Hack a Day: Rayhunter Sniffs Out Stingrays For $30 I’ve been meaning to test this out, especially since it would be a cheap project. A coworker of mine set one up as well, & I believe there is still an open question on whether a SIM card is actually needed or not for use. CSO Online: Company behind modified Signal app used by Mike Walz allegedly hacked Stupid people doing stupid things… 404 Media: The Signal Clone the Trump Admin Uses Was Hacked Micah F. Lee: TM SGNL, the obscure unofficial Signal app Mike Waltz uses to text with Trump officials GitHub: ofkm / arcane: “Simple and Elegant Docker Management UI written in Typescript and SvelteKit” Kind of looking to replace Portainer, but not for any particular reason. Someone in the post said it best… “I am sticking with what I am used to until the dust settles. I like where this is going though.” /r/SelfHosted: Guide to Host Jellyfin for People Coming from Plex selfh.st: Self-Host Weekly (9 May 2025) selfh.st: Custom Colors Are Now Available For selfh.st/icons GitHub: ofkm / arcane: “Simple and Elegant Docker Management UI written in Typescript and SvelteKit” GitHub: rippleFCL / bws-cache: “Bitwarden Secrets Manager cache server” GitHub: jeremehancock / Glimpse: “Plex Media Viewer” GitHub: binary-knight / logwhisperer: “LogWhisperer is a self-hosted, AI-powered log summarization tool for Linux servers.”

May 9, 2025 · Sean P. McAdam

w33k in g33k: May 02, 2025

Week Ending May 02, 2025 selfh.st: Self-Host Weekly (2 May 2025) Crowd Supply: Fusion Chime Vision: “An ESP32-based, open-source doorbell system designed to integrate into existing smarthome setups” Maybe something to take a look at to not use a video doorbell from one of the bigger companies. GitHub: crocofied / CoreControl: “Dashboard to manage your entire server infrastructure” If selfh.st mentioned this last week, then I might have already looked into it. GitHub: plexguid / Huntarr.io: “A specialized utility that automates discovering missing and upgrading your media collection!” Haven’t touched my *arr stack in a while, so might look into this & see if i want to add it. GitHub: karakeep-app / karakeep: “A self-hostable bookmark-everything app (links, notes and images) with AI-based automatic tagging and full text search” Setting up Ollama + DeepSeek for the AI part of this. GitHub: moghtech / komodo: “🦎 a tool to build and deploy software on many servers 🦎” I tried this for a bit, but didn’t really get into it to see if I want to replace Portainer. GitHub: icereed / paperless-gpt: “Use LLMs and LLM Vision (OCR) to handle paperless-ngx - Document Digitalization powered by AI” Still haven’t decided if I “need” something like this, but I know there was another simple one i was trying to get working last week. I’ll have to give it another shot. GitHub: ellite / Wallos: “Wallos: Open-Source Personal Subscription Tracker” I set this up, but then didn’t realize use it that much. Might be another one that i come back to, just to play with for a bit. GitHub: xpipe-io / xpipe: “Access your entire server infrastructure from your local desktop” I can’t remember if i did try this & found something i wasn’t a fan of My Projects Moving from Grav to Hugo CirrusTech: How to convert Grav markdown content to Hugo using powershell Obsidian Forum: My Obsidian + Hugo blogging setup 4rkal’s Dev Blog: My Obsidian + Hugo blogging setup Robin Hu - Programming and Photography: Hugo: Things I’ve learned so far Hugo Theme: Terminal.css GitHub: theNewDynamic \ awesome-hugo: “A curated list of awesome things related to Hugo, The world’s fastest framework for building websites.” phoenixNAP: rsync Command in Linux: Syntax, Options, Examples Needing this as I work on how I want to post or sync from the local “repository” to my site. I figured i would start with rsync while I try to get something like Obsidian working. Miscellaneous Finds: GitHub: iiab / iiab: “Internet-in-a-Box - Build your own LIBRARY OF ALEXANDRIA with a Raspberry Pi !” GitHub: hacksider \ Deep-Live-Cam: “real time face swap and one-click video deepfake with only a single image” GitHub: Zelda64Recomp / Zelda64Recomp Medium: Risan Bagja: Upgrade Your SSH Key to Ed25519

May 2, 2025 · Sean P. McAdam

w33k in g33k: April 18, 2025

Week Ending April 18, 2025 Projects: /r/nginxproxymanager: ModSecurity WAF End-of-Life and Alternative Solution GitHub: openappsec / openappsec open-appsec: How to switch to a ModSecurity WAF alternative before it is EOL in March 2024? selfh.st: Optimal Plex Settings for Privacy-Conscious Users Akash Rajpurohit: SearXNG — Privacy-focused metasearch engine for your homelab Mac App Store: PocketServer: Local Server GitHub: Oak-and-Sprout / sprout-track: “A tracker to track baby diapers, feedings, naps, pumping, and other activities. " GitHub: crocofied / CoreControl: “Dashboard to manage your entire server infrastructure” CoreControl Flipper Zero GitHub: jblanked GitHub: FlipperHTTP GitHub: jblanked / FlipperHTTP: WiFi Developer Board (ESP32S2) GitHub: FlipWiFi: “FlipperHTTP companion app. Scan and save WiFi networks on your Flipper Zero.” GitHub: FlipWorld: “Flipper Zero Open World Multiplayer game, best played with the VGM.” GitHub: flipper-application-catalog: “Flipper Application Catalog” GitHub: FlipDownloader: “Download apps and assets directly to your Flipper Zero using WiFi.” GitHub: FlipSocial: “Social media platform for the Flipper Zero.” GitHub: WebCrawler-FlipperZero: “Browse the web, fetch API data, and more on your Flipper Zero.” GitHub: FlipRPI: “Use your Flipper Zero to control your Raspberry Pi.” GitHub: FlipLibrary: “A Flipper Zero app with a dictionary, random facts, and more.” GitHub: FlipWeather: “Use WiFi to get GPS and Weather information on your Flipper Zero.” GitHub: FlipTrader: “Use WiFi to get the price of stocks and currency pairs on your Flipper Zero.” GitHub: o7-machinehum / flipper-blackhat-os Hackster.io: Ryan Walker’s Flipper Blackhat Is a Powerful Quad-Core Linux-Based Wi-Fi Add-On for the Flipper Zero

April 25, 2025 · Sean P. McAdam

w33k in g33k: April 25, 2025

Week Ending April 25, 2025 selfh.st: Self-Host Weekly (25 April 2025) GitHub: Caddy Maybe I’ll try this out again? Right now I am just doing nginx + Step CA & that does seem to be working fine for me. GitHub: clemcer /loggifly: “Monitor Docker Logs & send Notifications” This would be helpful for when certain containers (i.e.: my internal CA) go down. GitHub: donaldzou / WGDashboard: “Simple dashboard for WireGuard VPN written in Python & Vue.js” ...

April 25, 2025 · Sean P. McAdam

w33k in g33k: April 04, 2025

w33k in g33k: April 04, 2025 . selfh.st: This Week in Self-Hosted (4 April 2025) Glad I’m following these updates because I did not know LunaSea was shut down. The three apps Ethan mentions as possible replacements are: nzb360 (Android) Astrysk (iOS) Ruddar (iOS) Github: PhiTux: DailyTxT: I may have already mentioned this last week (or did i forget to post last week…?), but I was excited to see that there is a “2.0” version of DailyTxT coming. Not that there’s anything wrong with the current version (it does exactly what it says & has worked flawlessly for me for at least a year now), but always happy to see updates to services I use =]. Home Assistant: I just moved, so i will be looking into getting Home Assistant setup when i get a chance. I used it in the past, but never got too deep into it, so now will be a fun time for me to try & get the most i can out of it. GitHub: mag37 / dockcheck: “CLI tool to automate docker image updates. Selective, notifications, autoprune, no pre-pulling. " Watchtower has typically been my go-to for image updates, but it can’t hurt to keep an eye out for any replacements. GitHub: louislam / dockge: “A fancy, easy-to-use and reactive self-hosted docker compose.yaml stack-oriented manager” I am currently using Portainer, but like DockCheck \ Portainer, always happy to find new things to play with. I believe i did look into this at one point, but don’t recall why I didn’t stick with it over Portainer. GitHub: mudler / LocalAI: “The free, Open Source alternative to OpenAI, Claude and others. Self-hosted and local-first. Drop-in replacement for OpenAI, running on consumer-grade hardware. No GPU required. Runs gguf, transformers, diffusers and many more models architectures. Features: Generate Text, Audio, Video, Images, Voice Cloning, Distributed, P2P inference” Since my experience with running LLM on a RasPi5 with AI HAT+ wasn’t going as I hoped (read: I didn’t look into the HAT enough to see that it isn’t meant for LLM), I might look into this instead. GitHub: monetr / monetr: “monetr is a budgeting application focused on planning for recurring expenses.” GitHub: jokob-sk / NetAlertX: “Network intruder and presence detector. Scans for devices connected to your network and alerts you if new and unknown devices are found.” I have\had been running this for a while, but haven’t kept on top of it. Especially with setting up a new Pi-Hole instance & local network, I probably have to get this updated as well. I will likely just wipe what I have & start clean. GitHub: iib0011 / omni-tools: “Self-hosted collection of powerful web-based tools for everyday tasks. No ads, no tracking, just fast, accessible utilities right from your browser!” Because, “why not?” (r) 😀 GitHub: [open-webui](- https://github.com/open-webui) / open-webui: “User-friendly AI Interface (Supports Ollama, OpenAI API, …)” This is what I was getting setup on my RasPi5 + AI HAT+, but probably won’t keep it running because of the performance. GitHub: ajnart / dcm: “DockerComposeMaker (DCM) is a self-hostable website to help you pick and create a docker-compose.yml file for your home server. Discover new containers, discover and share a config in a couple of clicks!” Most of the containers I’m going to run have the Docker compose files already, but still thought this was worth noting down & taking a look at. GitHub: ArnaudCrl / immich-automated-selfie-timelapse Just looked like a fun project. GitHub: kyantech / Palmr: “Palmr. is an open-source file-sharing platform focused on privacy and security. It enables users to upload, manage, and share files with features like password protection, custom links, and access control without tracking or limitations. Designed for seamless and secure sharing, Palmr. is completely free.” GitHub: SolarSistim / Quickdash: “Quickdash is a simple Angular/JSON powered self-hosted start page.” I seem to have a wandering eye for home\start pages, dashboards, etc. I’m currently running homepage. GitHub: thiago4int / resume-ai: “This project is an AI-powered resume generator designed to take unstructured profile information and job descriptions as input, then generate ATS-friendly, structured resumes using Ollama + Gemma 3B/1B.” I was curious since we were hiring recently. GitHub: HeyWillow / willow: “Open source, local, and self-hosted Amazon Echo/Google Home competitive Voice Assistant alternative” GitHub: adityachandelgit / BookLore: “BookLore is a web app for hosting, managing, and exploring books, with support for PDFs, eBooks, reading progress, metadata, and stats.” selfh.st: Optimal Plex Settings for Privacy-Conscious Users YouTube: Ditch Your VPN! Twingate: The EASY Way to Access Your Home Server TwinGate Currently using WireGuard Miscellaneous I was having some issues with a Raspbian RasPi5 that I had to correct: Error: fastfetch: error while loading shared libraries: libm.so.6: ELF load command address/offset not page-aligned: Raspberry Pi Forums: Pi5: Error loading libtinfo.so.6: ELF load command address/offset not page-aligned load addesses with: “readelf -l /path/to/libtinfo.so.6” Add “kernel=kernel8.img” to “/boot/firmware/config.txt” EFF: Meet Rayhunter: A New Open Source Tool from EFF to Detect Cellular Spying Just looked like a fun little project to do. Pi-Hole + nginx (/admin, /api): The issue i was having was fixed by editing the “location” fields in the nginx config. I needed to include locations for “/admin” & “/api”, AND have those entries before the “/” location. Once I got that fixed, my homepage & Nebula Sync containers started working. There were a few other issues that I fixed & likely caused some of my issues: Using the wrong “kind” of password from the Pi-Hole API, & needing to enable webserver.api.app_sudo permission on the “replica” Pi-Hole, so that settings could be updated from the primary. I was kicking myself for a bit because after moving & getting a new ISP, I wanted to use my out router instead of theirs. Turns out all i needed to do was contact them to put it bridge mode. It would have been a lot nicer had i been able to access an admin panel & do it myself, but at least that’s done with. I was also having some issues with DNS because the date & time were off on those boxes, so that needed to be fixed before DNS started working again. Ollama & OpenWebUI: I tried running this on my RasPi5 + AI HAT+, but as I think i mentioned earlier, the performance wasn’t great, since the AI HAT doesn’t help LLM’s. Geshan Manandhar: How to use Ollama and Open WebUI with Docker Compose [Part 4]: This was a huge help to me eventually getting Open WebUI & Ollama working, but likely won’t be using it for now. Now I just have to look for some AI HAT+ projects with the camera to actually leverage it.

April 4, 2025 · Sean P. McAdam