hosting/selfhostblocks
1
0
Fork 0
Code Issues Activity
Modular server management based on NixOS modules and focused on best practices.
46 commits 1 branch 1 tag 4.3 MiB
Nix 100%
Find a file
ibizaman 4b0274153c add vaultwarden service without protected /admin
2023-02-19 20:37:52 -08:00
caddy add php config and glue caddy to ttrss 2023-02-19 20:37:52 -08:00
haproxy add vaultwarden service without protected /admin 2023-02-19 20:37:52 -08:00
jellyfin add todos for jellyfin 2023-02-19 20:37:52 -08:00
keycloak use attrset to define haproxy config 2023-02-19 20:37:52 -08:00
keycloak-cli-config use keys attrs for dependencies in keycloak service 2023-02-19 20:37:52 -08:00
nginx use a mk* style in services 2023-02-19 20:37:52 -08:00
php use a mk* style in services 2023-02-19 20:37:52 -08:00
php-fpm use a mk* style in services 2023-02-19 20:37:52 -08:00
postgresdb add vaultwarden service without protected /admin 2023-02-19 20:37:52 -08:00
ttrss parametrize services on the domain name 2023-02-19 20:37:52 -08:00
vaultwarden add vaultwarden service without protected /admin 2023-02-19 20:37:52 -08:00
all-packages.nix add vaultwarden service without protected /admin 2023-02-19 20:37:52 -08:00
extra-builtins.nix add pass plugin to read secrets from password store 2023-02-19 20:37:52 -08:00
LICENSE Initial commit 2022-12-17 15:39:17 -08:00
nix-pass.sh add pass plugin to read secrets from password store 2023-02-19 20:37:52 -08:00
README.md add repo goal and status 2022-12-17 15:43:42 -08:00

README.md

Self Host Blocks

Building blocks for self-hosting with best practices.

SHB's (Self Host Blocks) goal is to provide a lower entry-bar for self-hosting. I intend to achieve this by providing building blocks promoting best practices to self-host a wide range of services. Also, the design will be extendable to allow user defined services.

As far as best practices go, I intend to provide, for all services:

  • protection and single sign-on using Keycloak, where possible
  • automated backing up of data and databases with Borgmatic
  • encrypted external backup with Rclone
  • central logging, monitoring and dashboards with Prometheus and Grafana
  • home dashboard with Dashy

Implementation is made with the disnix suite - Disnix, Dysnomia, NixOps - built on top of the nix ecosystem.

Progress Status

Currently, this repo is WIP and the first two services I intend to provide are Tiny Tiny RSS and Vaultwarden. Vaultwarden was chosen as it's IMO the first stepping stone to enable self-hosting. Tiny Tiny RSS was chosen because it requires quite a lot of moving parts and also will allow me to test single sign-on.