The Open Source Software I'm using in 2026!

One Sentence Summary

A personal tour of self-hosted, open-source tools for identity, storage, media, automation, networking, and creative workflows at home, online today.

Main Points

• Self-hosted identity with Authentic enables cross-app SSO.
• NextCloud centers files, calendars, notes with data ownership.
• Metabase dashboards empower non-technical data insights.
• Jellyfin/Navadrome host private media locally, respecting privacy.
• Open-source tools reduce vendor lock-in and data exposure.
• NetBird/WireGuard enable secure, private remote access.
• Book Stack documents setup guides for repeatable builds.
• Choto URL offers simple, customizable, self-hosted shorteners.
• Regular backups and storage planning ensure longevity.
• Federation and public links enable controlled cross-environment sharing.

Takeaways

• Start with core self-hosted identity to simplify access.
• Prioritize self-hosted media and file solutions for control.
• Use dashboards like Metabase to democratize insights.
• Document processes with Book Stack to accelerate learning.
• Plan hardware capacity and backups for long-term resilience.

---

1. Summary

This transcript is a comprehensive walkthrough of a self-hosted open-source homelab ecosystem. The core purpose is to demonstrate how to replace SaaS/cloud services with self-hosted alternatives using tools like Authentik (SSO), Nextcloud (file/collaboration suite), Jellyfin (media server), Navidrome (music streaming), Vaultwarden (password manager), and Netbird (VPN overlay network).

The main problem addressed: ➡️ How to build a fully self-controlled, privacy-focused infrastructure that replaces commercial services (Google, Microsoft, Netflix, etc.)

Primary technologies:

• Docker-based self-hosting
• WireGuard networking (Netbird, Pangolin)
• OIDC / LDAP authentication (Authentik)
• Web-based management UIs
• Open-source replacements for SaaS ecosystems

---

2. Detailed Step-by-Step Breakdown

A. Identity & Authentication Layer (SSO)

Tool: Authentik

Steps:

1. Deploy Authentik (typically via Docker).

2. Configure identity providers:

   • OIDC endpoints
   • LDAP (optional)

3. Register applications:

   • Add each service (Nextcloud, Netbird, etc.)

   • Configure:

     • Client ID
     • Client Secret
     • Redirect URIs

4. Enable SSO login flow:

   • Login once → access all services

5. Use Authentik as a central dashboard/portal

---

B. Cloud Storage & Collaboration

Tool: Nextcloud

Steps:

1. Deploy via Docker or VM.

2. Configure storage:

   • Local disk or mounted volume (/data)

3. Enable apps:

   • Files
   • Calendar
   • Notes
   • Deck
   • Talk

4. Optional UI improvement:

   • Install sidebar extension (manual enable after updates)

5. Use cases:

   • File storage
   • Sharing via public/private links
   • Collaboration (similar to Google Workspace)

---

C. Media Infrastructure

1. Music Server

Tool: Navidrome

Steps:

1. Deploy Navidrome container

2. Mount music directory:

   -v /music:/music
   

3. Access via:

   • Browser UI
   • Subsonic-compatible clients

4. Features:

   • Playlist management
   • Offline sync via mobile clients

---

2. Video Streaming

Tool: Jellyfin

Steps:

1. Install Jellyfin server

2. Add media libraries:

   • Movies
   • TV Shows

3. Preprocess media:

   • Rip DVDs
   • Convert formats (e.g., MP4/H.264)

4. Configure clients:

   • Web UI
   • Smart TV apps

5. Result:

   • Full replacement for Netflix/Hulu

---

D. Data Visualization / Reporting

Tool: Metabase

Steps:

1. Deploy Metabase

2. Connect to database (e.g., PostgreSQL)

3. Import data (e.g., eBay sales)

4. Build dashboards:

   • Bar charts
   • Donut charts
   • Aggregations

5. No SQL required (GUI-based queries)

---

E. Monitoring & Alerting

Tool: Beszel

Steps:

1. Install monitoring agent on servers

2. Add nodes to dashboard

3. Configure alerts:

   • CPU thresholds
   • Resource anomalies

4. Use case:

   • Detect runaway processes
   • Trigger manual intervention

---

F. Documentation System

Tool: BookStack

Steps:

1. Deploy BookStack

2. Organize content:

   • Shelves → Books → Pages

3. Store:

   • Installation guides
   • Tutorials
   • Internal documentation

---

G. Password Management

Tool: Vaultwarden (Bitwarden-compatible)

Steps:

1. Deploy Vaultwarden (Rust backend)

2. Connect via:

   • Bitwarden browser extension
   • Mobile apps

3. Enable encryption:

   • End-to-end vault encryption

4. Critical step:

   • Schedule nightly backups

5. Supports:

   • Autofill
   • Credential sync

---

H. Reverse Proxy + Secure Access

Tool: Pangolin

Steps:

1. Deploy Pangolin

2. Configure:

   • WireGuard tunnel
   • Reverse proxy routes

3. Set DNS records:

   • Point domains → tunnel endpoint

4. Enable HTTPS:

   • Let’s Encrypt certificates

5. Result:

   • Secure external access without exposing services directly

---

I. Photo Management

Tool: Immich

Steps:

1. Install Immich server

2. Install mobile app

3. Enable auto-sync:

   • Photos + videos → server

4. Features:

   • Face recognition
   • Search
   • Backup

---

J. Networking / VPN Overlay

Tool: Netbird

Steps:

1. Deploy Netbird server

2. Add peers (devices)

3. Configure:

   • Groups
   • Access rules

4. Uses:

   • WireGuard-based mesh VPN

5. Integrate with Authentik (SSO login)

---

K. Remote Access & Terminal Tools

Tools:

• NextTerm
• Apache Guacamole

Steps:

1. Configure connections:

   • SSH
   • RDP
   • VNC

2. Access systems via browser

3. Optional:

   • Integrate with Authentik

---

L. Container Infrastructure

Tools: Incus (LXD successor) + Docker

Steps:

1. Create containers (Incus)

2. Run Docker inside containers

3. Manage via UI:

   • Networking
   • Storage pools
   • Console access

4. Use for:

   • Testing environments
   • Service isolation

---

M. Automation & Smart Home

Tool: Home Assistant

Steps:

1. Install on:

   • Raspberry Pi / VM

2. Connect devices:

   • WiFi
   • Zigbee
   • Z-Wave

3. Configure automations:

   • Triggers
   • Conditions

4. Minimal UI interaction once configured

---

N. Analytics

Tool: Matomo

Steps:

1. Install Matomo

2. Add tracking script:

   <script>...</script>
   

3. Insert into website header

4. View:

   • Traffic
   • Geography
   • Usage trends

---

O. Development & AI Stack

Tools:

• VS Codium
• Ollama
• Open WebUI
• LLaMA models

Steps:

1. Install Ollama:

   ollama run llama3
   

2. Connect Open WebUI frontend

3. Use local AI models

4. Avoid cloud-based AI services

---

P. Additional Tools Mentioned

• Invoice Ninja → billing
• ChotoURL → URL shortener
• LubeLogger → car maintenance tracking
• Quant UX → prototyping
• PeerTube → decentralized video hosting
• OBS Studio → recording/streaming
• Thunderbird → email client
• Firefox → browser
• VLC → media playback
• LibreOffice → office suite
• FreeCAD → 3D modeling
• Ardour → music production

---

3. Key Technical Details

• Protocols Used:

  • OIDC / OAuth2
  • LDAP
  • WireGuard VPN
  • HTTPS (Let’s Encrypt)

• Core Infrastructure Pattern:

  • Docker containers
  • Reverse proxy + DNS routing
  • VPN overlay network

• Security Practices:

  • Self-hosted identity provider
  • Encrypted password storage
  • Nightly backups
  • Private AI inference

• Storage Strategy:

  • Local ownership
  • Media libraries
  • Daily backups (critical systems)

• Access Methods:

  • Browser-based UIs
  • VPN tunnels
  • Reverse proxy domains

---

4. Pro Tips

• Use SSO early: Setting up Authentik first simplifies integration later.

• Backups are mandatory:

  • Especially for Vaultwarden, Immich, and Nextcloud

• Separate services via containers:

  • Use Incus + Docker for isolation

• Use WireGuard everywhere:

  • Netbird + Pangolin = secure external access

• Avoid overloading UI dashboards:

  • Use extensions (e.g., Nextcloud sidebar)

---

5. Potential Limitations / Warnings

• Bandwidth constraints:

  • Self-hosted video (PeerTube) limited by upload speed

• Maintenance overhead:

  • Updates, backups, monitoring required

• Storage requirements:

  • Media servers require large disks

• Learning curve:

  • OIDC, reverse proxy, Docker networking

• Some tools not fully enterprise-ready:

  • Example: Beszel (home-lab focused)

---

6. Recommended Follow-Up Resources

Based on the transcript :

• Official docs for:

  • Authentik
  • Nextcloud
  • Netbird
  • Jellyfin

• Tutorials on:

  • Docker Compose setups
  • WireGuard networking
  • Reverse proxy configuration

• Explore:

  • Self-hosting communities (Reddit, GitHub)
  • Homelab YouTube channels

---

7. Suggested Books (5)

1. Docker Deep Dive — Nigel Poulton

A hands-on guide to containerization fundamentals. Helps you understand how to deploy and manage nearly every service mentioned (Nextcloud, Jellyfin, Vaultwarden) using Docker effectively.

2. Kubernetes and Docker: An Enterprise Guide — Scott Surovich

While more advanced, this book helps transition from simple Docker setups to scalable infrastructure—useful if your homelab grows into production-grade systems.

3. Linux Server Security — Michael D. Bauer

Covers hardening techniques, authentication systems, and secure networking—critical for safely running public-facing services like reverse proxies and VPNs.

4. Designing Data-Intensive Applications — Martin Kleppmann

Provides deep understanding of data storage, replication, and system reliability—relevant for managing Nextcloud, databases, and analytics tools like Metabase.

5. The Practice of System and Network Administration — Thomas A. Limoncelli

A practical guide to managing infrastructure, monitoring, backups, and automation—directly applicable to running a homelab ecosystem like the one described.