Compare 12 self-hosted Deep Research systems: GPT Researcher, Onyx, Open WebUI, Khoj, Vane and more. Architectures, local LLM, RAG, licenses.
#AI Agents #RAG #LLM #AI #Self-Hosting #SelfHosting #Open Source #Ollama
#self
13 posts · Last used Sep 24
If you are like me and run your own private, Nextcloud server that isn't exposed to the internet and want to sync podcasts between your phone and computer using gPodder sync, you'll quickly discover that no podcast client will talk to a server with a self-signed certificate. Not because it's technically dangerous, but because the developers have chosen not to support it. A single checkbox would fix it. They've been asked. They won't do it. Why? Skip to the last paragraph.
And yeah, with the amount of work I had to put it - I'm mad. 
This pattern repeats across every app, every platform, and the Android operating system itself. The consistent push from podcast apps, Google (Android) and the Linux desktop ecosystem is toward public certificate authorities and away from privately managed infrastructure. The people who suffer is anyone who wants to run their own server without exposing it to the internet.
Adding a certificate to Ubuntu's system trust store is straightforward and works immediately for natively installed applications. Flatpak (increasingly pushed as the Linux desktop standard) is a different problem entirely. Flatpak isolates apps from the host system, and the mechanism that's supposed to bridge host certificates into that sandbox is broken.
For several versions, Android has had a deliberate policy to hamper users to install their own certificates. It's a pain. App developers can opt in to trusting user-installed certificates with a one-line configuration change. Most haven't. AntennaPod hasn't.
None of this is technically insurmountable. But the cumulative friction across every layer... The apps, the OS, the desktop packaging format, the server appliance all pushes in the same direction: Self-hosting with your own certificates is made difficult everywhere, simultaneously, by parties who agree on the plausible-sounding security justification:
"The only safe option is to have a publicly exposed server with a CA-signed certificate". Like that's safer than accessing a server with a manually verified certificate through a closed VPN mesh network.
#selfhosted #selfhosting #self-hosted #self-hosting #antennapod #flatpak #gpodder #nextcloud #nextcloudpi
This pattern repeats across every app, every platform, and the Android operating system itself. The consistent push from podcast apps, Google (Android) and the Linux desktop ecosystem is toward public certificate authorities and away from privately managed infrastructure. The people who suffer is anyone who wants to run their own server without exposing it to the internet.
Adding a certificate to Ubuntu's system trust store is straightforward and works immediately for natively installed applications. Flatpak (increasingly pushed as the Linux desktop standard) is a different problem entirely. Flatpak isolates apps from the host system, and the mechanism that's supposed to bridge host certificates into that sandbox is broken.
For several versions, Android has had a deliberate policy to hamper users to install their own certificates. It's a pain. App developers can opt in to trusting user-installed certificates with a one-line configuration change. Most haven't. AntennaPod hasn't.
None of this is technically insurmountable. But the cumulative friction across every layer... The apps, the OS, the desktop packaging format, the server appliance all pushes in the same direction: Self-hosting with your own certificates is made difficult everywhere, simultaneously, by parties who agree on the plausible-sounding security justification:
"The only safe option is to have a publicly exposed server with a CA-signed certificate". Like that's safer than accessing a server with a manually verified certificate through a closed VPN mesh network.
#selfhosted #selfhosting #self-hosted #self-hosting #antennapod #flatpak #gpodder #nextcloud #nextcloudpi
Announcing folk.zone: An attempt to build the IndieWeb commons myself. | 🔗 https://brennan.day/announcing-folk-zone-an-attempt-to-build-the-indieweb-commons-myself/
#IndieWeb #Self-hosting #Community #Infrastructure #Fediverse #OpenSource #Homelab
From Plex to Jellyfin, Part 2: The Case for Navidrome (and Why Jellyfin Doesn't Get My Music)
Jellyfin handles music. It just doesn't handle it well. Here's the argument for splitting the stack and running Navidrome as a dedicated music server so Jellyfin never has to touch your music library at all.
https://jasontucker.blog/from-plex-to-jellyfin-part-2-navidrome/
#homelab #jellyfin #navidrome #unraid #docker #music #self-hosting
Replying to
Now, keeping in mind, that any tool used for the purpose of #self #defense has not been tested, legally or politically, until now, against #psychological challenges. And in particular, ones whose #focus aligns with not just the #judgement of certain expectations, but also the outright disassembly of expected outcomes. Ones that have caused social stances to hardline into camps of thought. These rigid structures reject spectrums of any kind, and it is here that I formally #protest this outright.
Replying to
When it comes to #guns they more often than not are used to harm people, statistically so. With that being said, I have always been an #advocate for #self defense. Yes, bar none. Defending and protecting and securing self livelihood is an inherent #human #right that shall not be infringed. By anyone, or anything. I have friends who are #furry #bisexual #multinational #international #trans #gay #straight #qweer and #proud to be who they are in their own #identity #ethos and I encourage that.
You've seen all posts