| caddy | ||
| haproxy | ||
| jellyfin | ||
| keycloak | ||
| keycloak-cli-config | ||
| keycloak-haproxy | ||
| nginx | ||
| php-fpm | ||
| postgresdb | ||
| ttrss | ||
| vaultwarden | ||
| all-packages.nix | ||
| extra-builtins.nix | ||
| LICENSE | ||
| nix-pass.sh | ||
| README.md | ||
Self Host Blocks
Building blocks for self-hosting with best practices.
SHB's (Self Host Blocks) goal is to provide a lower entry-bar for self-hosting. I intend to achieve this by providing building blocks promoting best practices to self-host a wide range of services. Also, the design will be extendable to allow user defined services.
As far as best practices go, I intend to provide, for all services:
- protection and single sign-on using Keycloak, where possible
- automated backing up of data and databases with Borgmatic
- encrypted external backup with Rclone
- central logging, monitoring and dashboards with Prometheus and Grafana
- home dashboard with Dashy
Implementation is made with the disnix suite - Disnix, Dysnomia, NixOps - built on top of the nix ecosystem.
Progress Status
Currently, this repo is WIP and the first two services I intend to provide are Tiny Tiny RSS and Vaultwarden. Vaultwarden was chosen as it's IMO the first stepping stone to enable self-hosting. Tiny Tiny RSS was chosen because it requires quite a lot of moving parts and also will allow me to test single sign-on.