this post was submitted on 29 Aug 2025
136 points (98.6% liked)

Selfhosted

60533 readers
552 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

I recently replaced an ancient laptop with a slightly less ancient one.

  • host for backups for three other machines
  • serve files I don't necessarily need on the new machine
  • relatively lightweight - "server" is ~15 years old
  • relatively simple - I'd rather not manage a dozen docker containers.
  • internal-facing
  • does NOT need to handle Android and friends. I can use sync-thing for that if I need to.

Left to my own devices I'd probably rsync for 90% of that, but I'd like to try something a little more pointy-clicky or at least transparent in my dotage.

Edit: Not SAMBA (I freaking hate trying to make that work)

Edit2: for the young'uns: NFS (linux "network filesystem")

Edit 3: LAN only. I may set up a VPN connection one day but it’s not currently a priority. (edited post to reflect questions)

Last Edit: thanks, friends, for this discussion! I think based on this I'll at least start with NFS + my existing backups system (Mint's thing, which is I think just a gui in front of rcync). May play w/ modern SAMBA if I have extra time.

Ill continue to read the replies though - some interesting ideas.

you are viewing a single comment's thread
view the rest of the comments
[–] Hawke@lemmy.world 8 points 10 months ago (3 children)

Isn’t nfs pretty much completely insecure unless you turn on nfs4 with Kerberos? The fact that that is such a pain in the ass is what keeps me from it. It is fine for read-only though.

[–] undefined@lemmy.hogru.ch 4 points 10 months ago* (last edited 10 months ago)

If you’ve got Tailscale it’ll build WireGuard tunnels directly over the LAN: I actually do this with Samba for Time Machine backups on macOS.

Obviously the big bonus is being able to do the same over the internet without the gaping security holes.

(I used to use split DNS so that my LAN’s router’s DNS server returned the LAN IP, and Tailscale’s DNS server returned the Tailscale IP. But because I’m a privacy geek I decided to make it Tailscale-only.)

[–] Appoxo@lemmy.dbzer0.com 1 points 10 months ago

Would be fine for designated storage networks that use IP whitelists.
Other than that, you kind of need user specific encryption/segregation (which I beliege Kerberos does?)

[–] nesc@lemmy.cafe 1 points 10 months ago

It is, but nfsv3 is extremely easy to configure. You need to edit 1 line in 1 file and it's ready to go.