unsubbed.co

Self Host Blocks

For self-hosting tools, Self Host Blocks is a self-hosted solution that provides modular server management based on NixOS modules and focused on practices.

Overview

Modular server management based on NixOS modules and focused on best practices. The project has 439 GitHub stars and is licensed under AGPL-3.0.

Key Features

Source: GitHub README

  • Backup for all services.
  • Automatic creation of ZFS datasets per service.
  • LDAP and SSO integration for most services.
  • Monitoring with Grafana and Prometheus stack with provided dashboards and integration with Scrutiny.
  • Automatic reverse proxy and certificate management for HTTPS.
  • VPN and proxy tunneling services.

Getting Started

Source: GitHub README

I do recommend for this my sibling project [Skarabox][] which bootstraps a new server and sets up a few tools:

  • Create a bootable ISO, installable on an USB key.
  • Handles one or two (in raid 1) SSDs for root partition.
  • Handles two (in raid 1) or more hard drives for data partition.
  • nixos-anywhere to install NixOS headlessly.
  • disko to format the drives using native ZFS encryption with remote unlocking through ssh.
  • sops-nix to handle secrets.
  • deploy-rs to deploy updates.

[Skarabox]:

Normalized Features

Source: tool-features-normalized.json

backup restore, ldap, postgresql, reverse proxy, ssl tls, sso.

Features

Authentication & Access

  • LDAP / Active Directory
  • Single Sign-On (SSO)

Data & Storage

  • Backup & Restore

Security & Privacy

  • Reverse Proxy Support
  • SSL / TLS / HTTPS