caddy | ||
haproxy | ||
keycloak | ||
nginx | ||
php | ||
php-fpm | ||
postgresdb | ||
ttrss | ||
all-packages.nix | ||
extra-builtins.nix | ||
LICENSE | ||
nix-pass.sh | ||
README.md |
Self Host Blocks
Building blocks for self-hosting with best practices.
SHB's (Self Host Blocks) goal is to provide a lower entry-bar for self-hosting. I intend to achieve this by providing building blocks promoting best practices to self-host a wide range of services. Also, the design will be extendable to allow user defined services.
As far as best practices go, I intend to provide, for all services:
- protection and single sign-on using Keycloak, where possible
- automated backing up of data and databases with Borgmatic
- encrypted external backup with Rclone
- central logging, monitoring and dashboards with Prometheus and Grafana
- home dashboard with Dashy
Implementation is made with the disnix suite - Disnix, Dysnomia, NixOps - built on top of the nix ecosystem.
Progress Status
Currently, this repo is WIP and the first two services I intend to provide are Tiny Tiny RSS and Vaultwarden. Vaultwarden was chosen as it's IMO the first stepping stone to enable self-hosting. Tiny Tiny RSS was chosen because it requires quite a lot of moving parts and also will allow me to test single sign-on.