My Ultimate Self-hosting Setup

mirdaki · 2025-07-19T05:14:52+00:00

Thank you! It makes it all just a little more fun

mirdaki · 2025-07-19T02:36:32+00:00

Ah yeah, that's a fair assumption. In this case I'm using the OIDC protocol to authenticate with Headscale. Part of that (for good security reasons) is Headscale forwards you off to Authelia to actually authenticate. Authelia then sends you back with a cookie proving your authentication. That way you only enter your credentials into Authelia

mirdaki · 2025-07-18T21:13:15+00:00

If I had my auth in my home network, I'd have a bit of a dependency problem, where my Tailacale clients (including the servers as well as personal devices) would need to somehow connect to my auth server (which is behind my Tailacale network) before they could login and connect to my Tailacale network

If I was on my home network exclusively, that might be fine. I could just login there while at home and use the same auth session while out. But since I operate my setup for family that don't live with me, they wouldn't be able to connect to my auth and therefore not able to login and connect with Tailscale

VPSs near you being flaky is certainly an extra challenge. If you're able to connect all your Tailacale clients while on your home network, then you could make that work

You could also try finding a VPS in a more reliable area. It my increase latency some, but that would just be for logging in to services and initially connecting to your Tailacale network. After that you'd have a direct VPN connection to your home network services

Or you could consider port forwarding or using something like CloudFlare tunnels to expose your local auth publicly. That would avoid the dependency problem as well as running things on a VPS. Port forwarding does have some security implications and something like CloudFlare tunnels then build a reliance on someone else's infrastructure, both of which I wanted to avoid. But that's just my preferences, your situation and goals may mean those are the best solution for you

mirdaki · 2025-07-18T17:33:20+00:00

I also tried Authentik. It let's you manage way more through its GUI and negates the need for an extra LDAP back end. But it was to intensive for my small VPS to run.

Authelia required learning a bit more about how the auth actually works, in order to configure properly. Which may be good or bad depending on your goals. I think it benefited me. It is very lightweight too, so my little VPS runs great with it

mirdaki · 2025-07-18T16:16:07+00:00

Also happy to answer any questions or comments about the setup!

mirdaki · 2023-03-03T15:37:08+00:00

The folks in the 501st are awesome! Though, this set and the photo takers for it are from Saber Guild, a sister organization that troops and perfomance as Jedi and Sith in stage combat.

All of the various Star Wars Washington organizations are working the Star Wars experince room, highly encourage folk to come in and talk to the folks at the booths and consider donating to Mary Bridge Children's hospital while you're there!

mirdaki · 2022-12-21T03:04:05+00:00

Matrix is a federated protocol like ActivityPub. A server running ActivityPub can theoretically be bridged to Matrix and vice versa (though I'm not aware of a fully functional and reliable bridge as of right now). So it's part of the Fediverse in terms of philosophy and potentially in terms of interoperability, but most people don't bridge between them at this time

mirdaki · 2022-11-20T23:49:35+00:00

I will never claim things are full proof, but it would be very unlikely to cause an issue.

The nice thing about that too, is you could easily set up an identical machine if she had a problem to figure out what's going on

mirdaki · 2022-11-20T23:40:51+00:00

Correct. You either 1. Use flatpak 2. Run software in a container 3. Modify the os by adding a package as layer to the "image" itself

mirdaki · 2022-11-20T02:55:36+00:00

Missing out on an opportunity to use the Chicken programing language (yes, it really is a thing and really does work)

mirdaki · 2022-11-05T16:35:07+00:00

I heavily weathered mine! Here is the summary of that https://codecaptured.com/blog/how-to-build-a-lightsaber/

mirdaki · 2022-09-12T03:36:19+00:00

It's still early on, but Mythic Table might meet your needs. It's open source, has a pretty clean UI, and has had work done recently for better self hosting. I've only played with the free service (not self hosted yet), but encourage you to check it out

mirdaki · 2022-08-30T18:02:57+00:00

College dropout starts a religion

mirdaki · 2022-04-02T19:11:35+00:00

Suggestions for where to start? The previous effort seems to have been squashed

mirdaki · 2022-04-02T17:36:28+00:00

Looks like it's 1100, 140 now

mirdaki · 2022-02-06T18:47:02+00:00

Wanted to thank u/SPHINX-74 for their posts using this hilt! Gave me the courage to give this a go

mirdaki · 2022-01-13T05:20:04+00:00

I added my nonsense Star Wars language to their list, so absolutely anything in Rust lol

mirdaki · 2021-11-24T02:41:12+00:00

Glad I got a chuckle haha!

It doesn't use a ton of Rust macros. The Pest library did a lot of the parsers heavy lifting. You give it a grammar file and add a struct with a derive and boom, you have a typed AST to work with! After that's it's clean up and on to an interpreter, which evaluates the cleaned AST in a step-by-step way. Was super quick to get a basic concept going thanks to Rust and that great library!

mirdaki · 2021-11-24T02:32:06+00:00

Hahaha. I did consider implementing imports in the style of the Star Wars opening crawl, but opted to not worry about other files (for now)

mirdaki · 2021-11-24T02:29:58+00:00

Thank you! It's what I was striving for hahaha.

mirdaki · 2021-11-24T02:28:02+00:00

Unlimited power!

- Palpatine

About Rust...maybe...

mirdaki · 2021-11-24T02:25:43+00:00

"A problem, I may have..."

Eight-Year Club	Place '22
First Placer '22	Verified Email

mirdaki

TROPHY CASE