I ended up just pushing everything behind my tailnet and only leave my game server ports open(which are non-standard ports).

You can check out MediaStack: https://github.com/geekau/mediastack

Here is their “full vpn” compose file here(all of *arr goes through vpn): https://github.com/geekau/mediastack/blob/master/full-download-vpn/docker-compose.yaml

And their “mini vpn” compose(only torrenting goes through vpn): https://github.com/geekau/mediastack/blob/master/mini-download-vpn/docker-compose.yaml

Probably something there will give you the right push towards fixing your setup? Best of luck! I am actually going to be attempting this soon(gluetun+qbit), but with ProtonVPN.

Install Tailscale on all devices.

Then ssh into whatever you need.

If you need desktop remote access the Windows RDP should work for Windows to Windows machines.

For Linux host to Windows client I’ve had good experiences with Remmina Desktop.

Going back through my github issues/comments, it was around May 2024 with the v1.105.0 release was my last attempt.

I’m happy to hear it is stable now, I’ll probably give it a shot again here soon. Again, I loved the app and I was hosting it for friends/family to share photos of my kids, so it helped immensely with everyone collaborating with uploads(though mobile uploads for individual photos wasn’t available at that time, had to direct people to use the website…).

To be fair I don’t think I used the docker installation back then, so I’ll probably make a stack for it this time around.

This is what we use Jira Service Management for at work(break/fix tickets), but Jira, the core software, is used for stuff like code development.

Not sure what use case OP has for Jira specifically, but I could see it being beneficial for a homelab where you’re building out docker containers manually or tracking your own coding projects or you want an (overkill) way to do project management for your homelab.

I really want to use Immich but I’ve installed it 3 different times and each time an upgrade completely breaks my installation and I spend hours troubleshooting. And yes, I read the patch notes and do whatever changes they mark in bold red as a warning.

It’s amazing when it works and they’re doing a great job at adding features, but my God does it break if you just look at it wrong.

Since others were posting end of life style docs, here is another: https://www.erikdewey.com/bigbook.htm

Cloud options:

• Microsoft Azure offers credits for edu emails I think, and I think you can renew it annually. Also check their B1 servers. https://azure.microsoft.com/en-us/free/students
• Google free tiers: https://docs.cloud.google.com/free/docs/free-cloud-features#free-tier
• AWS | Not sure on this one, their website is confusing, but look into it: https://aws.amazon.com/education/awseducate/
• GitHub “student developer pack” https://education.github.com/pack
• Oracle cloud “always free” options, bottom of this page: https://www.oracle.com/cloud/free/
• InterServer(never heard of them before) offers 1 year of web hosting: https://my.interserver.net/student_signup.php

Self-Host locally options:

Honestly you can probably find a N100 or N150 miniPC online for cheap, like $200 USD or less. Install Proxmox(or just install Ubuntu or whatever), install Docker+DockHand, and then install Tailscale and from your laptop/computer with Tailscale on it. You’ll be able to remotely access it, spin up whatever servers you want, and I doubt your campus IT will even see anything due to the tailnet mesh.

If you’re not living on campus, then even better, just self host your own stuff.

I’m surprised to not see this suggestion, but Plex does music pretty well and they have an app dedicated for music/audio called “Plexamp”. Though I don’t think this app is on things like AppleTV/Roku(haven’t looked).

It’s so-so when it comes to playlist building…but the app on mobile works and I use it for audiobooks mainly, but I am starting to plan to use it switch off Spotify here soon.

or should I consider other software?

Unfortunately I had similar thoughts and plans that you outline here(receipt scanning into budgeting), but the amount of work involved was…too much for my liking.

I instead opted for a paid solution, which is Monarch: https://www.monarch.com/

It’s $100 a year, but they have a promotion(they always run promotions), where you can do your first year for 50% off with code: NEWYEAR2026

So far my wife and I have been loving Monarch. We linked our bank accounts and other financial institutions(401k, brokerages, IRAs, etc.) and everything mostly “just works”. There is an odd time or two where a bank account needs to be re-signed into to re-auth because token/api expired/changed, but again, the app works and does things well.

I’d suggest looking into it. I’m usually a huge proponent of self-hosting everything, but this is one of the few things I caved on…

It worked for me? Not sure if OP changed it, but it goes to the latest repo just fine.

I would appreciate some type of custom attributes, but the notes section works fine as-is, so definitely not a huge “need” IMO.

I have used Monica/other CRMs in the past, but they all felt a bit too corporate or “sales” driven like you said in your OP.

I spun up a quick docker instance in my test environment and I’m using it right now, it’s been quite solid! I do have some confusion with how relationships get applied(from/to in regards to child/parent), but I believe I just need to use it a bit more to get used to the “flow” of how it is supposed to work.

My biggest want/need is being able to select multiple people at once to add to another person, so I guess a “bulk” edit or multi-select. Like adding 10 “child” to one “parent” at once if all of the children have already been created. Or if some logic can be applied where if one parent(dad) has three children, then you add a spouse(mom) to dad, then nametag can auto-add or offer to bulk edit the three children to add the new spouse(mom) as a parent too? Just quicker/better/fluid workflow.

Again, the site as-is is already solid. Just some fine-tuning IMO.

This looks great. I’m running a Teable instance, but sometimes it feels like it is “too much” sometimes.

I think I’ll deploy this for fun to check out. I don’t see anything specific here for things like gift ideas or favorite flowers/colors? Like custom tags/categories/attributes.

I’m using Teable to track things like that, but I love the visualization here, reminds me of my obsidian mind map lol.

Ah classic IPoAC!

I run my webservers behind a pfsense firewall with ssl offloading(using a wildcard cert) with a static IP and use Haproxy to have sub-domain’s go to individual servers. Even though I’ve seen my fair share of scans, I only ever expose port 443 and keep things updated.

Recently though someone on here mentioned routing everything over Tailscale via a VPS. I didn’t want to pay for a VPS and frankly can’t even find one that is reasonably priced in the US(bandwidth limits mainly), so I threw Tailscale onto my pfsense, setup split-dns on Tailscale’s admin panel with my domain name, and then reconfigured Haproxy to listen on my Tailscale interface. Even got IPv6 working(huge pain due to a bug it seems). Oh and setup pfblocker.

My current plan is I’m going to run my webservers behind Tailscale and keep my game servers public and probably segment those servers to a different vlan/subnet/dmz/whatever. And maybe just have a www/blog landing page that is read only on 443 and have it’s config/admin panel accessible via my tailscale only.

Anyway, back on topic. I run my game servers and I don’t advertise them out anywhere(wildcard cert) and do whitelist only, yet I still see my minecraft servers get hit constantly on port 25565.

So not much you can do except minimize exposure as much as possible.

Just looked, I guess USA servers only include 1TB of bandwidth, EU gets 20TB included.

Absolutely wild lol.

Ah I’ll have to look into this then…gotta find a VPS that will hopefully have a Los Angeles location and have decent traffic bandwidth.

Honestly never thought to use a VPS like that before. We’ve all seen using a VPS as a VPN exit node. Do you run into quota limits on the VPS or Tailscale side? Too many requests/data?

I’m gonna have to look into this for fun lol

Could you explain your setup a bit more? Because my understanding is:

Let’s say you have a blog website in your homelab. To access the blog you have to: you go to your VPS’s hostname/IP, from there the VPS forwards your request over tailscale to your homelab which then responds with your blog website?

If that’s the case, why even have the VPS and instead just use tailscale to access your homelab directly?

Unless you intend to have the VPS be a load balancer in some way? Or a filter/firewall? Or you can’t do a static IP for your homelab but you want it to be publicly accessible?

Just trying to understand why you’re doing it this way. I love seeing all the crazy ways people can set things up like this lol

Kind of, TrueNAS has “CORE” which is FreeBSD and “SCALE” which is Linux.

If you’re on CORE 13.X you can actually side-grade over to SCALE.

CORE is in maintenance only and SCALE is the path forward. So you can still get some updates on CORE I think, but everyone should be switching over to SCALE or using SCALE from here on out.