this post was submitted on 05 Feb 2025
94 points (96.1% liked)

Selfhosted

41903 readers
562 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
94
How do you keep up? (lemmy.world)
submitted 2 days ago by Thunderbird4@lemmy.world to c/selfhosted@lemmy.world
60 comments fedilink hide all child comments
 

A year ago I built a NAS to reduce my reliance on cloud services, and set up an arr stack. I went with TrueNAS Scale, which was on Bluefin at the time. In the past 12 months, TrueNAS Scale has been through FOUR major OS versions, with a fifth already announced. At least one of those involved a release train switch so, despite diligently checking for updates in the dashboard, I was left in the dust with an obsolete OS, and didn’t find out until it was already a huge hassle to upgrade.

I’ve been really happy with the utility and benefit of having this tool, but holy smokes how is anybody supposed to keep up with all of this? This is far from my only hobby, and I simply do not have the time, patience, or interest for a constant race to keep up with vetting new release versions and fixing what breaks every 3 weeks. I have enough tinkering hobbies as it is.

On top of that, there’s the whole blow up with TrueCharts, which has also left me with an entire suite of obsolete albatrosses around my NAS that I need to deal with. Am I still waiting for them to figure out an upgrade path? I don’t even know anymore.

Sorry for the rant, but I guess what I’m looking for is: how do you keep up with the constant maintenance and updates, and where do I go from here, in February 2025, with a system running Bluefin 22.12, a 32TB ZFS pool (RAIDZ1) that has to remain intact, and a handful of TrueCharts apps that I don’t want to lose the data from (e.g. Jellyfin configs/watch history)?

top 50 comments
sorted by: hot top controversial new old
[–] Pika@sh.itjust.works 1 points 7 minutes ago* (last edited 6 minutes ago)

I've never used true nass, but I've never had any issue with keeping up with releases. I use a proxmox host with Debian containers mostly, and then I use ansible to do any major changes to the hosts such as replacing certificates or upgrading the packages

Being said my backup structure isn't the most professional, I have a 8 TB external drive that I keep plugged in via USB and I have proxmox backup server on the same host and it creates backups nightly

[–] MangoPenguin@lemmy.blahaj.zone 4 points 3 hours ago (1 children)

I run proxmox on the host with docker in a VM for 90% of my stuff, OS updates I do like every 6 months maybe, I've done 1 major version upgrade on proxmox with no issues at all.

The docker containers auto-update via Komodo, and nothing really ever breaks anymore other than the occasional container error that needs a simple fix.

Everything important is backed up nightly using both proxmox backup server, and to backblaze B2 with restic.

[–] Pika@sh.itjust.works 1 points 3 minutes ago* (last edited 2 minutes ago)

I've never heard of kimodo, I've heard a lot about Watchtower but I found it more annoying to set up due to its labeling systems. Is there any added benefit for Komodo over using a standard watch tower setup?

I haven't set up either of them, but my main concern is having a breaking change be automatically updated

[–] PieMePlenty@lemmy.world 11 points 9 hours ago

I use debian, so what's to keep up with? Apt upgrade is literally everything I need. My home server doesn't take a lot of my time except when I want to tweak something or introduce something new. I dont really follow all the trendy stuff at all and just have it do what I need.

[–] kalleboo@lemmy.world 2 points 6 hours ago* (last edited 6 hours ago)

This is why I'm still using a Synology ¯\(ツ)/¯

I can install all the fun stuff I want in Docker, but for the core OS services, it's outsourced to Synology to maintain for me

[–] MXX53@programming.dev 7 points 1 day ago* (last edited 22 hours ago) (1 children)

I run a Fedora server.

All of my apps are in docker containers set to restart unless stopped by me.

Then I run a cron job that is scheduled at like 3 or 4am that runs docker pull on all containers and restarts them. Then it runs all system updates and restarts the server.

Every week or so I just spot check to make sure it is still working. This has been my process for like 6 months without issue.

[–] alibloke@feddit.uk 4 points 1 day ago (2 children)

Try watchtower instead of cron jobs

[–] lemmyingly@lemm.ee 1 points 4 hours ago (1 children)

Depends on your stance on risk since WatchTower has to run as privileged

[–] MXX53@programming.dev 1 points 3 hours ago

This is a good point. Generally if can accomplish what I want with my own scripts, I will go that route. I'll probably avoid adding additional software to the mix since what I have works fine enough.

[–] MXX53@programming.dev 1 points 22 hours ago

I'll check it out! Thanks!

[–] kylian0087@lemmy.dbzer0.com 6 points 1 day ago (1 children)

You can choose a slower train for scale. Go for the stable release or even the enterprise release. Update once in a few months or so.

I went with Talos OS for my apps after the mess from IX-systems and for the most part it has been set and forget.

[–] notfromhere@lemmy.ml 1 points 12 hours ago

Do you run Talos on bare metal or on something like Proxmox? Care to discuss your k8s stack?

[–] Fedegenerate@lemmynsfw.com 4 points 1 day ago* (last edited 1 day ago) (2 children)

Release: stable

Keep the updates as hands off as possible. Docker compose, TTeck's LXC updater, automatic upgrades.

I come through once a week or so to update the stacks (dockge > stack > update), I come through once a month or so to update the machines (I have 5 total). Total time updating is 3hrs a month. I could drop that time a lot when I get around to writing some scripts to update docker images, then I'd just have to "apt update && apt upgrade"

Minimise attack surface and outsource security. I have nothing at all open to the internet, I use Tailscale to create tunnels. I'm trusting my security to Tailscale but they are much, much, better at it than I am.

[–] sugar_in_your_tea@sh.itjust.works 2 points 8 hours ago (1 children)

Automatically upgrading docker images sounds like a recipe for disaster because:

  • could pull down change that requires manual intervention, so things "randomly" break
  • docker holds on to everything, so you'd need to prune old images or you'll eventually run out of disk space; if a container is stopped, your prune would make it unbootable (good luck if the newer images are incompatible with when it last ran)

That's why I refuse to automate updates. I sometimes go weeks or months between using a given service, so I'd rather use vulnerable containers than have to go fix it when I need it.

I run OS updates every month or two, and honestly I'd be okay automating those. I run docker pulls every few months, and there's no way I'd automate that.

[–] Fedegenerate@lemmynsfw.com 2 points 8 hours ago* (last edited 8 hours ago) (1 children)

I've encountered that before with Watchtower updating parts of a serrvice and breaking the whole stack. But automating a stack update, as opposed to a service update, should mitigate all of that. I'll include a system prune in the script.

Most of my stacks are stable so aside from breaking changes I should be fine. If I hit a breaking change, I keep backups, I'll rebuild and update manually. I think that'll be a net time save over all.

I keep two docker lxcs, one for arrs and one for everything else. I might make a third lxc for things that currently require manual updates. Immich is my only one currently.

[–] sugar_in_your_tea@sh.itjust.works 2 points 7 hours ago (1 children)

Watchtower

Glad it works for you.

Automatic updates of software with potential breaking changes scares me. I'm not familiar with watchtower, since I don't use it or anything like it, but I have several services that I don't use very often, but would suck if they silently stopped working properly.

When I think of a service, I think of something like Nextcloud, Immich, etc, even if they consist of multiple containers. For example, I have a separate containers for libre office online and Nextcloud, but I upgrade them together. I don't want automated upgrades of either because I never know if future builds will be compatible. So I go update things when I remember, but I make sure everything works after.

That said, it seems watchtower can be used to merely notify, so maybe I'll use it for that. I certainly want to be around for any automatic updates though.

[–] Fedegenerate@lemmynsfw.com 2 points 4 hours ago* (last edited 4 hours ago)

It's Watchtower that I had problems with because of what you described. Watchtower will drop your microservice, say a database, to update it and then not reset the things that are dependent on it. It can be great just not in the ham fisted way I used it. So instead I'm going to update the stack together, everything drops, updates, and comes back up in the correct order

Uptime Kuma can alert you when a service goes down. I am constantly in my Homarr homepage that tells me if it can't ping a service, then I go investigating.

I get that it's scary, and after my Watchtower trauma I was hesitant to go automatic too. But, I'm managing 5 machines now, and scaling by getting more so I have to think about scale.

[–] hperrin@lemmy.ca 34 points 1 day ago (2 children)

You might want to think about running a “stable” or “LTS” OS and spin up things in Docker instead. That way you only have to do OS level updates very rarely.

[–] Zink@programming.dev 2 points 12 hours ago

Thanks for this. I've recently been recreating my home server on good hardware and have been thinking it's time to jump into selfhosting more stuff. I've used Docker a bit, so I guess I'll have to do it the right way. It's always good to know what choices now will avoid future issues.

[–] HeyJoe@lemmy.world 5 points 1 day ago

I learned this the hard way as well... I did a big OS update on mine once and it broke almost every application running on it. Docker worked perfectly still. I transferred everything I could to Docker after that.

[–] Darkassassin07@lemmy.ca 40 points 2 days ago* (last edited 2 days ago)

OS updates I only bother with every 6-12mo, though I also use debian which doesn't push major updates all that regularly.

As far as software goes; pretty much everything is in a docker container with watchtower automatically pulling new updates to those nightly at 4am. It sends me email notifications, so It'll tell me if an update fails; combined with uptime-kuma notifying me if any of my services is unavailable for whatever reason.

The rest I'll usually do with the OS updates. Just because an update was released, doesn't mean you've gotta drop everything and install it right this moment.

[–] Appoxo@lemmy.dbzer0.com 2 points 1 day ago* (last edited 1 day ago)

Docker: More or less automatically upgraded (compose)
Proxmox/TrueNas: My setup breaks so often or I want to do something that I will check it every once in a while and run updates
Main Debian NAS: Automatic updates. (apt)
Raspberry Pi: Automatic Updates (apt)
Windows: If it prompts me and I am shutting it down amyway: Fine. Thanks for notifying.

I stopped chassing updates quite some time ago.

[–] bluGill@fedia.io 1 points 1 day ago (2 children)

At least you get updates. I'm running TruNAS core which isn't updated anymore, and I have some jails doing things so I can't migrate to scale easially.

The good news is this still works despite no updates it does everything it used to. There is almost zero reason to update any working NAS if it is behind a firewall.

The bad news is those jails are doing useful things and because I'm out of date I can't update what is in them. Some of those services have new versions that add new features that I really really want.

I have ordered (should arrive tomorrow) a N100 which I'm going to manually migrate the useful services to one at a time. Once that is doing I'll probably switch to XigmaNAS so I can stick with FreeBSD. (I've always preferred FreeBSD). That will leave my NAS as just file storage for a while, though depending on how I like XigmaNAS I might or might not run services on that.

[–] WhyJiffie@sh.itjust.works 1 points 8 hours ago

The good news is this still works despite no updates it does everything it used to. There is almost zero reason to update any working NAS if it is behind a firewall.

if all users and devices on the network are well behaved and don't install every random app, even if from the play store, then yeah, it's less of a risk

[–] kalpol@lemmy.world 2 points 19 hours ago (1 children)

Core is still getting updates?i got one last week.

[–] bluGill@fedia.io 3 points 16 hours ago (1 children)

only the most basic security. It is out of date according to the pkg system and so jails cannot be updated-

[–] kalpol@lemmy.world 1 points 13 hours ago (1 children)

Super lame. BSD is very preferable for core systems like this.

[–] bluGill@fedia.io 1 points 1 hour ago

I know, I like BSD. However because core isn't a supported version of FreeBSD I cannot update the other things I run on my NAS. I'm more worried about an attack on those out of date services than I am about the few issues that have been fixed

[–] 11111one11111@lemmy.world 18 points 1 day ago

In life? Amphetamines.

[–] Xanza@lemm.ee 3 points 1 day ago

Debian, baby.

[–] drkt@scribe.disroot.org 15 points 2 days ago (1 children)

For one I don't use software that updates constantly. If I had to log in to a container more than once a year to fix something, I'd figure out something else. My NAS is just harddrives on a Debian machine.

Everything I use runs either Debian or is some form of BSD

[–] sugar_in_your_tea@sh.itjust.works 2 points 1 day ago

Same, but openSUSE. Tumbleweed on my desktop and laptop, Leap on my servers.

And yeah, if I need to babysit something, I'll use an alternative. I'll upgrade when I'm ready to, which is usually over holidays when I'm bored and looking for a project.

[–] vividspecter@lemm.ee 5 points 1 day ago (1 children)

I use NixOS so if an update breaks, I just roll back. And since it's effectively a rolling release distribution there isn't any risk of being left behind on an outdated version.

[–] Object@sh.itjust.works 2 points 1 day ago* (last edited 1 day ago)

Same here. I spent last month transitioning all my servers to NixOS and it feels so comfy! I do a small test on my desktop when I do something that might break stuff first, and then add it to server's config later.

--target-host and --use-remote-sudo makes it even better too.

[–] sugar_in_your_tea@sh.itjust.works 4 points 1 day ago* (last edited 1 day ago)

Constant maintenance? What's that?

Here's my setup:

  • OS - openSUSE Leap - I upgrade when I remember
  • software - Docker images in a docker compose file; upgrading is a simple docker command, and I'll only do it if I need something in the update
  • hardware - old desktop; I'll upgrade when I have extra hardware

I honestly don't think about it. I run updates when I get to it (every month or so), and I'll do an OS upgrade a little while after a new release is available (every couple years?). Software gets updated periodically if I'm bored and avoiding more important things. And I upgrade one thing at a time, so I don't end up with everything breaking at once. BTRFS snapshots means I can always roll back if I break something.

I don't even know what TrueCharts is. Maybe that's your issue?

[–] 31337@sh.itjust.works 9 points 1 day ago (1 children)

If it works, I don't update unless I'm bored or something. I also spread things out on multiple machines, so there's less chance of stuff happening like you describe with the charts feature going away. My NAS is pretty much just a NAS now.

You can probably backup your configs/data, upgrade, then deploy jellyfin again, restore, and reconfigure. You should probably backup your data on your ZFS pool. But, I recently updated to the latest TrueNas Scale from ~5 year old FreeBSD version of TrueNas and the pools still worked fine (none of the "apps" or jails worked, obviously). The upgrade process even ported my service configurations over. I didn't care about much of the data in the pools, so only backed up the most important stuff.

[–] Onomatopoeia@lemmy.cafe 3 points 1 day ago

I don't update unless I'm bored

Hahahaha, one of my kind!

My upgrades usually occur because I'm setting up a new system anyway, that way my effort is building for tomorrow in addition to the upgrades, and I get testing time to ensure changeover is pretty smooth.

[–] ShortN0te@lemmy.ml 6 points 1 day ago

Just subscribe to the release channel. That varies from OS to OS or Software, but is worth it.

Use tools that are universal. For example, I have not used TrueNAS Scale because they did not support native docker at the time. OS specific solutions are more likely to break then universal once (truecharts vs docker)

To get up and running again after a complete failure i can just download the latest config and data from my backup and set up any distro that supports docker and my system is running again.

I do OS upgrades when they are available, usually within 1 or 2 days and containers are updated with watchtower daily.

[–] TedZanzibar@feddit.uk 2 points 1 day ago

Yeah, everything that's already been said, except that I specifically chose an off-the-shelf Synology NAS with Docker support to run my core setup for this exact reason. It needs a reboot maybe once or twice a year for critical updates but is otherwise rock solid.

I have since added a small N100 box for things that need a little extra grunt (Plex mainly) but I run Ubuntu Server LTS with Docker on that and do maintenance on it about as often as I reboot the NAS.

[–] mhzawadi@lemmy.horwood.cloud 10 points 1 day ago

First off, backups of the configs any user data that you can't torrent should the inevitable happen.

Then set time aside to do updates, I spend Wednesday evenings updating and improving my setup.

Then find a way to track update announcements, I use both an RSS reader and newrealeases.io to know when something I run gets an update

[–] mesamunefire@lemmy.world 9 points 2 days ago

I dont :) Mostly.

Honestly I have an auto backup system. And then set it up to auto update periodically. Then use Debian Server as it almost never breaks as a server distro.

[–] Azzu@lemm.ee 4 points 1 day ago* (last edited 1 day ago)

I've got backups. Haven't updated or looked at my server in months. If I'm ever compromised by missing security updates, I just load a backup and regenerate all keys.

I don't put any critical data on public facing servers.

[–] ragebutt@lemmy.dbzer0.com 5 points 1 day ago

Is it exposed to the internet?

Mine is local only so I’m not as diligent with updates. I push them like once every 2-3 weeks. Some containers automatically update but some don’t because in the past that has broken associated scripts

[–] avidamoeba@lemmy.ca 4 points 1 day ago* (last edited 1 day ago)

Use Debian LTS or Ubuntu LTS (10 years support with free Ubuntu Pro). Turn on automatic unattended updates. Upgrade OS when you're bored one of those years.

Keywords:

  • Debian
  • Ubuntu
  • LTS
  • ZFS
  • Docker (compose)
[–] gonzo-rand19@moist.catsweat.com 3 points 1 day ago

I have everything containerized (Podman) on my Debian PC and use Diun to check for updates and send notifications to a Discord server that I monitor. I do all of my updates manually so I don't update unless I have time to troubleshoot; if it breaks I still have the configs and data so I can delete the container and start over.

I also do monthly backups to cold storage (yeah, they should be weekly/biweekly but it's just personal data that I'm okay with losing). I don't use a RAID config or BTFS/ZFS like some do, so it's pretty easy to just set it and forget it. It really depends on what you're trying to do, how bulletproof it needs to be, and how you like to organize things.

load more comments
view more: next ›