5 Linux servers that let you ditch the public cloud and reclaim your privacy - for free

European Union countries are moving away from American tech giants to run their own clouds and servers to control their digital destiny. You can do this, too. Here's how.

💻 https://www.zdnet.com/article/personal-digital-sovereignty-choices-free-linux-servers/

#linux #opensource #eu #freedombox #web #openvpn #wireguard #yunohost #yuno #truenas #rockstor #nas #zentyal #cloud #europe #alternative #datahoard

I've uploaded new versions of the Shaarli package (bookmarks app) in Debian with a security fix.

The package versions with the fix:
- 0.16.1+dfsg-1 in testing and unstable
- 0.14.0+dfsg-2+deb13u1 in stable-security
- 0.12.1+dfsg-8+deb12u2 in oldstable-security

More information about the issue:
https://github.com/shaarli/Shaarli/security/advisories/GHSA-g3xq-mj52-f8pg
https://security-tracker.debian.org/tracker/CVE-2026-24476

#Shaarli #Debian #FreedomBox

I wanted to listen to my music collection from everywhere, so I've been setting up Navidrome behind my FreedomBox using Podman quadlets for systemd integration (all based on Debian Trixie). Here's how:

First I've installed Navidrome as Podman quadlet, based on the official docker compose installation manual:

Docs: https://www.navidrome.org/docs/installation/docker/

This is what my /etc/containers/systemd/navidrome.container looks like:

[Unit]
Description=Navidrome
Wants=network-online.target
After=network-online.target

[Container]
Image=docker.io/deluan/navidrome:0.60.0

User=1001:119
UserNS=keep-id

Environment=ND_ENABLEINSIGHTSCOLLECTOR=false
Environment=ND_BASEURL=https://www.example.org/music/
Environment=ND_LASTFM_ENABLED=false
Environment=ND_LISTENBRAINZ_ENABLED=false
Environment=ND_ENABLECOVERANIMATION=false

Volume=/home/navidrome/data:/data:rw,U,z
Volume=/media/data/my-mp3-collection/:/music:ro,U,z

PublishPort=127.0.0.1:4533:4533

[Service]
TimeoutStartSec=900
Restart=always

[Install]
WantedBy=multi-user.target

Things to note:

• I've pinned the version to not automatically pull latest but have control over upgrades.
• User 1001:119 refers to a dedicated non-system user I've created with adduser navidrome --disabled-login which has a home directory to hold the data dir. 119 is the group my music collection folder belongs to. I'm automatically synchronizing it using syncthing, hence the differing GID.

After setting up this quadlet, I reloaded systemd config, started the container and checked the logs. It came up fine, scanning my library on first start:

sudo systemctl daemon-reload
sudo systemctl start navidrome
sudo journalctl -u navidrome -f

Afterwards I set up FreedomBox integration, so I can potentially re-use SSO and have Navidrome run on a URL path on the same domain. In order to do that I created a new Apache2 config /etc/apache2/conf-available/navidrome.conf:

<Location /music/>

        Include includes/freedombox-single-sign-on.conf

        <IfModule mod_auth_pubtkt.c>
        TKTAuthToken "admin"
        </IfModule>

        # allow websockets
        RewriteEngine On
        RewriteCond %{HTTP:Connection} Upgrade [NC]
        RewriteCond %{HTTP:Upgrade} =websocket [NC]
        RewriteRule /(.*)           wss://127.0.0.1:4533/$1 [P,L]

        ProxyPass http://127.0.0.1:4533/music/ retry=1
        ProxyPassReverse http://127.0.0.1:4533/music/
        ProxyPreserveHost On

</Location>

This config uses FreedomBox's SSO and enforces a user account with "admin" role. In addition, it enables WebSockets and proxies through to the Navidrome container on port 4533.

I enabled it and reloaded Apache:

sudo a2enconf navidrome
sudo systemctl reload apache2

All of this done, I was able to open the Navidrome web UI on the configured path /music of my FreedomBox and set up a first admin account. Hooray!

Next up: Figure out how to enable Navidrome to use FreedomBox's SSO. The docs are straight-forward:

https://www.navidrome.org/docs/getting-started/extauth-quickstart/

And FreedomBoxs already sets a REMOTE_USER header. But I've not been able to make this work, yet. Inside the podman container, the proxy IP is reported as 10.88.0.1, but setting this and the header in my config did not work. I'll figure it out eventually and post an update. Happy selfhosting!

#FreedomBox #Navidrome #Selfhosting #Music

@yunohost @Khrys Je suis un non-pro, le mail marche très bien avec Freedombox (il suffit d'installer Debian avec l'option #Freedombox) et un VPN FDN, et je n'y connais absolument rien.

I am going to do a writeup on the #Freedombox #Debian blend (I've inaccurately calling it a 'spin', heh) for my blog. It's been an interesting year+ with hosting and self-hosting. #Proxmox continues to dominate my personal and work installations.

I also want to do a write up about Netbird, but think I need to mess a little more with HeadScale and Nebula before that. VM backups (like X TB worth) to a server behind a restrictive FW seems to be the hardest part for these mesh/vpns to get and stay working reliably. But overall I already can't imagine my life without Netbird, it's so nice to have a GUI for private network allow/deny rules and just letting go of having to route everything through firewall port forwarding.

@wakejagr I think the Debian-derived #FreedomBox is worth looking at for inspiration - not necessarily to install it (but you could?) but just to see which packages it has chosen to perform various selfhosting duties.

https://www.freedombox.org/

FreedomBox 26.3 has been released. Here are the highlights:

- ui: Use HTMX to eliminate full page reloads
- wireguard: Add ‘Start Server’ button to help with client setup

See the full list of changes:
https://discuss.freedombox.org/t/freedombox-26-3-released/4084

#FreedomBox #FreedomBoxRelease

Every year, for several years, people at #FOSDEM keep talking about #FreedomBox.

We probably need something that's even more super-simple to set up and maintain, "marketed" toward a more general audience (which puts emphasis on things non-computer-tech people care about).

It should be resilient too, like image-based and having easy installation of things on top (container-based so it's not mixed in with the main system).

It should be named by what services provide, not weird project names.

@thejikz I have tried a couple of other self hosting solutions (eg yunohost, Cosmos server) but find freedombox better suited for my needs.

I am having a very positive experience with it especially for non static IP cases, even when run on quite old Raspberry Pi hardware. #freedombox #selfHosting

Freedombox, Debian. Does anyone have good, bad, or meh experience with this and security related genaral advice for home hosting over non static IP?
My next step is the fbox support forums, just nice to have a layer of first hand thoughts on something like this to boost confidence, or not. LOL

#askfedi #freedombox

Danke @marco_m_aus_f für die Anregung. Da habe ich in der Schnelle gar nicht daran gedacht. Eine Mailcow ist für die meisten Lehrkräfte die das mal im Unterricht brauchen aber zu komplex aufzusetzen. Mir ist dann aber spontan die #Freedombox oder ein #Yunohost eingefallen. Den könnten sich Lehrkräfte auf einen Raspi installieren und mit in den Unterricht nehmen.

@dreamchipper

@organicmaps Soverign computing needs to be made easier. Many awesome projects are working hard for this and I wish them all success: @realdrdoug, @yunohost, @freedomboxfndn, @npub126ntw5mnermmj0znhjhgdk8lh2af72sm8qfzq48umdlnhaj9kuns3le9ll

#selfhosting #sovereigncomputing #datasovereignity #selfhosted #SelfHost #start9 #yunohost #freedombox #HomeServerHQ

4 apps in #FreedomBox have the word Wiki in their name. This makes reviewers think that there are 4 Wiki apps in FreedomBox.

https://www.theregister.com/2026/01/22/debians_freedombox_blend/

#FeatherWiki and #TiddlyWiki are notebooks. They are supposed to be a better alternative to syncing a folder of Markdown files using Syncthing to your FreedomBox.

I don't think they are even meant to be used for the same purpose as MediaWiki. They don't have user management or even a backend for that matter. They are literally HTML files!

@elkcityhazard Would #FreedomBox be a good solution? It has WordPress.

I have #NextCloud running on a #RaspberryPi with Debian and I'm thinking of migrating to the FreedomBox install for more of my own cloud services.

#Debian's #FreedomBox Blend promises an easier home cloud

https://www.theregister.com/2026/01/22/debians_freedombox_blend/

#screenshot of my #raspberrypi zoo running #chimeraLinux #proxmox #pxvirt #raspberrypios #freedombox

FreedomBox 26.2 has a fix for Gitweb, an improvement for the notifications dropdown, and updated translations for Estonian and Italian.

https://discuss.freedombox.org/t/freedombox-26-2-released/4067

#FreedomBox #FreedomBoxRelease

@bryan Mailcow, Mail-in-a-Box, Modoboa, Freedombox. Four wonderful solution for an easy mail self hosting :) Let's spread the word!

#mail #selfhosting #mailcow #mailinabox #modoboa #freedombox

It took me some time to get used to Miniflux's expected usage pattern.

It's like Miniflux wants me to skim a lot of articles and read a few.

I start by opening the first article in Unread, then keep pressing 'l' to go to the next article ('h' to go to the previous one) and occasionally mark an article as unread by pressing 'm', if it's too long or I want to read it later.

It's a faster workflow compared to Tiny Tiny RSS. It's like the "inbox zero" approach for RSS feeds

#Miniflux #FreedomBox

For a very simple setup, #freedombox seems also to be a good solution for mail #selfhosting . remembers me to #yunohost, but it's all integrated into debian :debian:
`apt install freedombox` and you are kinda good to go:
https://wiki.debian.org/FreedomBox/Hardware/Debian