alt.hn

4/13/2026 at 1:42:37 AM

State of Homelab 2026

 https://mrlokans.work/posts/state-of-homelab-2026/

by swq115

4/13/2026 at 4:56:46 AM

This is very cool, but you should not use Cloudflare Tunnels to stream media. This is forbidden by their terms of service (or at the very least not the intended use of Tunnels and they may disable your service). Use Wireguard or Tailscale instead.

https://www.xda-developers.com/cloudflare-tunnels-are-great-...

by AdrienPoupa

4/13/2026 at 5:04:39 AM

Yep, I rent a $5 VPS in my region that I tailscale to for exactly that reason, as well as to un-CGNAT myself.

For an easy GUI solution for the latter, highly recommend Nginx Proxy Manager.

by ZeWaka

4/13/2026 at 5:46:00 AM

Cloudflare Tunnel publicly exposes your services, whereas Wireguard/Tailscale are VPNs.

Tailscale (but not Headscale) offers Funnel, which is a reverse proxy, but you cannot use it with your own domain.

Pangolin is the closest alternative to CF Tunnel, but self-hosted NetBird with reverse proxy functionality can also be used.

by watermelon0

4/13/2026 at 6:08:57 AM

The intersection of people who can self host headscale or netbird and those who can not set up their own reverse proxy is probably the empty set.

by oynqr

4/13/2026 at 6:36:36 AM

Can tailscale funnel do custom domains yet?

Personally I'm switching to rathole+traefik, weirdly something I was researching and experimenting with in the early hours of this morning (I have now not slept and have to go to work).

by antihero

4/13/2026 at 4:40:33 AM

There should be volunteer groups at local libraries running these services for their local communities.

It’d be a great way for kids to learn to operate services and a great alternative for anyone who wants to use the fantastic open source stuff that’s out there but lacks expertise or time.

by cadamsdotcom

4/13/2026 at 4:54:57 AM

> There should be volunteer groups at local libraries running these services for their local communities.

The problem with bespoke anything in computers is always the support.

No one wants to be on the hook for customer support. I absolutely agree with them.

There are a ton of "services" that exist solely to enable people to cut a check and say "Customer support is over there. Go talk to them and leave me alone."

by bsder

4/13/2026 at 4:10:43 AM

This is not so much a fantasy about "being independent". Instead, it's a fantasy about being a sysadmin.

by jsphweid

4/13/2026 at 6:37:41 AM

I actually really like not having to worry if some licensing deal means my access to music I love gets shut off.

by antihero

4/13/2026 at 4:34:36 AM

A good example of that is the guys on r/homelab explaining how they built a NAS so their wife could save her phone media without Google Photos.

Man, paying Google/Apple $5/mo is surely a much better solution for her. And are you really doing 3-2-1 on that?

Save the dicking around for your own stuff.

by hombre_fatal

4/13/2026 at 4:46:10 AM

Both my wife and I are reluctant to upload our entire photo collection spanning 20+ years to the cloud. Immich has been working really well for us, the experience for her is just as seamless as it would be for Google Photos, I think.

And at $180/yr for the 2TB of storage we'd need to pay for, vs. maybe $200 in hardware, it pays itself off pretty quickly... if you exclude the time spent setting it up and administering it. But I don't mind, it's a bit like digital gardening for me.

by stratts

4/13/2026 at 5:37:28 AM

$200 hardware only? my main concern with storing photos locally is the need for a NAS. Even at 2-3TB you still need: a NAS device, 2-3 hard drives and the mini pc to run immich + power bill to run them. it will cost more than $180/yr. cost should not be the main factor people store photos locally.

by kyriakos

4/13/2026 at 5:59:54 AM

You don't need a NAS, really. My setup is a second-hand i5-7300U fanless mini-PC I got for $90, 2 x second-hand 4TB HDDs, and 2 x USB 3.5" enclosures. It's messy but it works... I haven't measured power in a bit but I reckon it pulls around 20-30W, which is around $15-20 a year at my current prices.

We back it up daily using restic to an old 2TB NAS that's at my parents place + the occasional manual backup

by stratts

4/13/2026 at 6:28:30 AM

How is that by itself not a NAS?

by aljaz823

4/13/2026 at 6:50:45 AM

It is, but OP said you need both a NAS and a mini PC

by stratts

4/13/2026 at 6:54:49 AM

180/year? That's ~150watt server. That's a very powerful NAS. You'll be paying $200 per month form a cloud provider for such performance. A performant home low power NAS can be build that will consume easily, 30-40W. It won't need to be upgraded for over a decade. Ideally, 5x HDDs with 5 year warranty. The only expense is rolling upgrades of HDDs as storage fills up.

Backup to cloud glacier storage is ~$1.20 per TiB-month

Cost is absolutely a factor. self-hosting can't even be touched. And, the that's just the start of the value proposition.

by waynesonfire

4/13/2026 at 7:39:02 AM

and lose a lifetime's worth of pictures because Google identified a pic of your toddler in their pyjamas as CSAM and nuked your life. Or your 13y/o kid fiddled with themselves infront of gemini. etc

Of all the dicking around one can do in a homelab, and I'm guilty of plenty of it, setting up some network storage for photo backup is easily one of the highest value things you can do.

by denkmoon

4/13/2026 at 5:25:49 AM

ha even better on /r/localllm husbands are scratching their head why their wives and kids just won't use their local chatgpt. It's fast and i bought 4 5090 for this why won't they use it!

Brothers, maybe they don't want you to see all their private chats with AI?

by puppymaster

4/13/2026 at 7:33:16 AM

> Man, paying Google/Apple $5/mo is surely a much better solution for her.

According to which criteria?

There are values beyond "basic convenience" that are important as well. Being independent from a subscription service is one of them. Having full control over your own media being another.

Moreover, subscriptions in general have disadvantages. For example:

1. If a subscription service decides to increase their prices tenfold, there is nothing a customer can do to stop them.

2. If they decide to stop operating completely, a customer also has no say into the matter.

3. If the subscription service decides to just unilaterally stop offering the service to a particular user, they can do so at their own discretion, at any time.

This all means that whatever value is being "obtained" by using a subscription service, it is only going to last for as long as the provider wants it to last.

by pbasista

4/13/2026 at 5:12:39 AM

> Man, paying Google/Apple $5/mo is surely a much better solution for her. And are you really doing 3-2-1 on that?

Just some days back someone on reddit posted how their 14yo son (via a family/linked Google account) used Gemini Live to, err, enjoy himself with the camera on.

All his accounts are now permanently locked for CSAM.

So, yes, not being beholden to a megacorp absolutely has its uses.

by user_7832

4/13/2026 at 5:38:26 AM

That Reddit post was thoroughly debunked as untrue. It had some obvious plot holes and inconsistencies.

Google even came out and said that’s not how account suspensions work: They don’t sequentially ban other accounts that have been associated with a device that was associated with an account, as many pointed out.

I’m surprised how many people fell for that obvious piece of Reddit creative fiction. I think we’ll be hearing about it as an urban legend for years.

Reddit has become a place for posting fiction on advice subs. It started on the relationship advice subs but has spread to all of the advice subs now, like the legal advice post you saw. You have to read Reddit with a lot of skepticism.

by Aurornis

4/13/2026 at 5:20:43 AM

Oh, by the way - this was the account he used for his business (I don't remember if it was a custom domain). He's pretty much lost his only way of communicating with customers. This isn't just a "whoops, let me make a new email" situation.

(You can go to the legal advice UK subreddit if you want to see the post.)

by user_7832

4/13/2026 at 5:39:19 AM

> (You can go to the legal advice UK subreddit if you want to see the post.)

It was removed quickly because it was obviously untrue. The details of the story weren’t even consistent across the posters comments.

by Aurornis

4/13/2026 at 4:58:08 AM

yes, the economics, and ease of use, of google/apple cloud storage is unmatched

and yes, most people willing to endeavor into the area are hobbyist, with all that entails

however, reading even one story of someone losing access to their cloud photos for xyz reason, is enough to decide that you ought to have some mechanism in place to ensure ownership of your data

by whoahwio

4/13/2026 at 5:34:06 AM

I just sync down everything from my wife/kids’ Google Drive/Dropbox/whatever nightly to my NAS. Usability of a cloud solution, but with on-prem backup.

by snoman

4/13/2026 at 4:44:49 AM

Except with modern tooling it's not a huge task anymore to run these services.

Cost wise on the right hardware it is very cheap to run, add the privacy/personal control aspect it's no wonder so many people do it.

by dugite-code

4/13/2026 at 4:56:02 AM

Software wise I find stuff pretty easy to set and forget. It's hardware that's always been the issue for me. When your power or internet goes out, everything goes down. While you move property, every thing is down. Currently my server has developed an issue with randomly crashing and rebooting I haven't been able to resolve yet.

Using a VPS entirely removes the hardware aspect, but it also mostly defeats the point of self hosting.

by Gigachad

4/13/2026 at 5:22:44 AM

Your personal photos likely do not need 99.99999999999% of availability, especially if you still have a local copy of the most recent and interesting ones on your smartphone.

by prmoustache

4/13/2026 at 5:13:14 AM

I don’t think it defeats the point at all. Uploading photos to Google is a massive privacy concern. Apple is maybe better in that way, but very limited cross-platform support, and when I’ve tried it, poor performance & pricing. Neither do well at higher end photography either.

by anon7000

4/13/2026 at 5:20:45 AM

I self host for privacy, which makes me feel uncomfortable about all my private data sitting unencrypted on a server I don't control. It's better in that you don't have fully automated google AI scanning your data, but it's still exposed. None of the self hosted apps are designed with e2e encryption in mind so you'd be better off using icloud.

by Gigachad

4/13/2026 at 7:37:49 AM

> None of the self hosted apps are designed with e2e encryption in mind

https://ente.com is open source, and self hosted, and end to end encrypted.

by oarsinsync

4/13/2026 at 7:50:32 AM

Lets say you don't leave it unencrypted on disk, only in memory. Do you really think vps providers are slurping your personal data out of a VM's memory in the same way google do dragnet personal data gathering? If your adversary is the government, sure they probably can do that, but otherwise it seems unlikely.

by denkmoon

4/13/2026 at 6:05:05 AM

Isn't responsibility the trade off for independence?

You can't have one without the other.

by altmanaltman

4/13/2026 at 8:46:30 AM

Author seems to be mixing up homelab and selfhosting which are 2 different concepts.

Self hosting is hosting services and data you actively use. While I don't seek 99.9999% of availability, this is not where I want to explore and break things on purpose.

Homelab is en environment one use to learn and that is ready to be scratched/broken for the sake of learning. This is definitely not the place where I want to host my personnal services and files (or at least not as primary copy/endpoint).

by prmoustache

4/13/2026 at 6:32:45 AM

I will never get why the F people are putting all this stuff into the public internet vs just using tailscale.

by tobi_bsf

4/13/2026 at 9:17:35 AM

An external non-technical user needs to connect to your Jellyfin via their Smart TV (that doesn't have tailscale available to install), I guess.

by fiend00

4/13/2026 at 6:49:15 AM

Tailscale is an overkill solution. Opening ports 80 and 443 for a reverse proxy is enough security provided your apps don't have broken authentication. I've been doing this for years now.

by s_ting765

4/13/2026 at 7:45:19 AM

Validating every single service I run on my home server for security (currently at 30 containers + other non-containerised random crap) vs. enabling the built-in Wireguard server on my router (which is more or less as simple as setting up Tailscale). I have a very different idea on which of these is overkill.

by Hamuko

4/13/2026 at 8:05:24 AM

What makes you think simply throwing random crap on a home VPN network is secure?

Tailscale/Wireguard is overkill because it is not needed where access controls work fine which is true for the majority of the popular self-hosted apps. And you now have to install a VPN client/cert on every device you want to access your services from. That's a major oof.

by s_ting765

4/13/2026 at 6:36:20 AM

It is nice to download an app and then just point it at a public URL as opposed to having to rely on the device being in the same tailnet.

by antihero

4/13/2026 at 4:25:07 AM

Cloudflare Tunnel is a wonderful thing. In fact, Cloudflare itself is fantastic for homelabbers because it gives you so much for free. I used to just host direct on my own home IP, but nowadays I find it easier to just `cloudflared`. Don't have to worry about the firewall and any breaches into my network and all of that stuff.

I started from a similar place as you and then eventually now my IaaC for my homelab is just idempotent bash scripts written by Claude. The pattern I find with dependencies is that they have the property that someone wants to change some attribute and so the program needs to evolve for the attribute to be changeable. This means programs evolve to have many hinges and the interactions cause bugs one cannot reason about.

My needs for the homelab are fairly simple and the script can encode all the information it needs. As a human, writing such a script is tedious. As a human with an AI assistant, I've found that this is so much easier to worry about because bash is a fairly stable target.

Anyway, apart from that, I landed on using systemd's containers that use podman but otherwise not too different. My (far less polished) version of this post as a memory aid to myself: https://wiki.roshangeorge.dev/w/One_Quick_Way_To_Host_A_WebA...

by arjie

4/13/2026 at 5:53:38 AM

How do you feel about the privacy implications of Cloudflare theoretically being able to read all your data? I guess this theoretical downside is outweighed by the practical upsides?

by lorenzohess

4/13/2026 at 5:38:15 AM

What's the benefit of Cloudflare Tunnel over just using Wireguard?

by Hamuko

4/13/2026 at 6:38:22 AM

It's free and simple and handles HTTPS termination and can be set up easily using terraform/pulumi.

Interestingly, in the early hours of this morning I switched from Cloudflare Tunnels to a rathole/traefik based solution (well, currently it's port forwarding and a low grade home-baked dyndns solution until I get paid and can afford a cheap hetzner box because I spent all of my money again).

I switched back because I didn't like the added complexity of having to manage the routes, what I'm using it for is technically against ToS, and I like the self-contained nature of my microk8s cluster.

by antihero

4/13/2026 at 7:22:42 AM

> handles HTTPS termination

I understand a lot of people run services locally for other reasons, but HTTPS termination defeats any privacy argument.

Cloudflare are essentially the largest MitM data collector in the world. A few people started moving their data out of the cloud and they saw the gap. Now they're plugging that gap "for free".

by cassianoleal

4/13/2026 at 6:15:35 AM

Same question from me too - I do have a few services on my homelab at home - stuff like a NAS, synology surveillance, homeassistant, few lxc containers hosting random services on Proxmox - and it all works just fine for my needs with standard WireGuard vpn setup on all my devices (macbook/ipad/iphone/android). What would cloudflare tunnel get me?

by radicality

4/13/2026 at 3:58:36 AM

For secrets management, I basically just use fnox everywhere (https://fnox.jdx.dev/). It's a frontend to tons more options than sops, although `age` is still included. I also think the DX is better but to each their own.

by nateberkopec

4/13/2026 at 4:06:49 AM

Looks interesting, thanks for sharing. I am using SOPS, might be a good replacement.

by 8cvor6j844qw_d6

4/13/2026 at 4:50:40 AM

I just use Infisical self hosted

by znnajdla

4/13/2026 at 7:38:38 AM

Seeing that fnox explicitly lists Infisical as a supported provider, I imagine they serve different purposes.

by cassianoleal

4/13/2026 at 5:41:25 AM

> There’s something appealing in that idea, being independent and prepared, a male fantasy likely never coming to life

There’s still cloudflare in the middle of the everything and it doesn’t make it “independent”.

by import

4/13/2026 at 7:49:07 AM

For those who's looking into a good homelab servers - better look at the refurbrished/used mini-pc based on 5th gen of Intel, like i5 11500T (HP ProDesk 400 G5 Mini for example), or ryzen. You'll get better thermals, better CPU, more expansion slots for cheaper than you can get out of NUC.

On top of that, resellers also often have upgrades for RAM and NVME available. WD-Red OEM 1Tb for less than 100 dollars sounds like bargain.

by zihotki

4/13/2026 at 7:17:56 AM

The support problem is real, but it's also solvable if you're not trying to support strangers. Ran Nomad + Consul for 50 services at my last place and the ops overhead was brutal until we stopped treating it like a public service. In practice, homelab stuff works great when it's just you or a small team that actually knows how to SSH into a box. Library volunteers handling production services for the community? That's a different animal entirely, fwiw.

by lukebaze

4/13/2026 at 4:52:25 AM

In Ukraine I have visited SaaS company offices serving production traffic with an actual bunker like this. Physically underground.

by znnajdla

4/13/2026 at 4:34:55 AM

I recently did the math and was floored to see I’d be spending 1.3k per year on streaming alone. So I said screw it, bought a nas and 36 TB of hard drives and set up an arr stack. I cancelled all of our streaming subscriptions 2 months ago and it’s been the best decision I’ve ever made. Plus my whole family is doing the same from all around town. I’m saving my extended family on the order of 5-6k per year total.

The nas is going to pay itself off in a few months, then it’s all savings from there. If only these media billionaires didn’t get so greedy, I would have happily kept paying them.

Especially with Claude code, setting up something like this is basically just sitting down and prompting for a couple of hours.

The emerging benefits are nice too. Like we don’t have to sift through junk of Netflix or Hulu to find stuff we would actually watch. All of it is stuff we would watch because we added it ourselves. Really fun!

by willio58

4/13/2026 at 5:16:16 AM

Another huge benefit is you can actually get high-bitrate streaming. Ripping a 4k Blu-ray & streaming it from home (for those who may not want to sail the seas) is sooooo much higher quality than typical streaming.

by anon7000

4/13/2026 at 5:23:24 AM

It is so sad how with the internet we have accepted terrible media quality. Instant messaging and social media reduces photos to 1MP and heavily compressed. It's fine for a photo or meme you are only looking at once and scrolling past. But if it's something you'd want to save, the quality is garbage.

I'd honestly rather apps stop providing hosted media and just do the delivery, let me worry about backing up history. iMessage seems to be the only one sending things in full quality.

by Gigachad

4/13/2026 at 5:52:04 AM

The main difference is that iMessages count towards iCloud quota, whereas (most?) other messaging services have free storage.

by watermelon0

4/13/2026 at 6:01:15 AM

iMessage doesn't require you to store history in icloud, it can just store everything locally if you want. But yes, I'd rather not have stored history, or the option to pay for storage than to have all media crushed beyond recognition.

A few times I've wanted to print something and found it was sent over an IM app and compressed to 100kb rendering it useless.

by Gigachad

4/13/2026 at 6:15:03 AM

I do a hybrid, where I keep lowest tier subscriptions but choose to watch content off of our media server setup at the highest available quality, without advertisement.

I don't mind paying for what I consume, but God damn is the value proposition at the floor currently. Here even the rather expensive mid tier subscription gives you 1080p at most with all the big players. It's as if they somehow converged to this model and aren't competing anymore. Coincidence, I'm sure.

by ZaoLahma

4/13/2026 at 5:23:32 AM

Is that legal? Do you avoid uploading somehow?

by kenniskrag

4/13/2026 at 5:40:53 AM

Alternatively, you could not give them your money or your time. Find other hobbies and kick the "content" addiction.

by globular-toast

4/13/2026 at 3:45:53 AM

Looking forward to the follow up post, State of Bunker 2029.

by ceinewydd

4/13/2026 at 5:53:47 AM

How do you feel about the privacy implications of Cloudflare theoretically being able to read all your data? I guess this theoretical downside is outweighed by the practical upsides?

by lorenzohess

4/13/2026 at 7:39:18 AM

Yes, the convenience of being able to access your data everywhere is very hard to overcome. The largest downside is the reliability of the Cloudflare platform, as if it goes down, you'll have problems accessing any of the exposed services, and it has indeed been problematic some time ago, when they were down for an extended period of time.

If I overcome my laziness, I'm going to invest a bit into Tailscale/WireGuard set-up, with some bastion host perhaps.

by MrLokans

4/13/2026 at 5:37:08 AM

For me it's a Intel n100 box with Proxmox. Auto Updates (without auto reboot) fully activated). It just works.

For accessing my home network I've rented a 1€-VPS that acts as a Wireguard connection hub.

by SuperMouse

4/13/2026 at 6:27:04 AM

Can you point us to the service that offers a 1€ VPS?

by stefandesu

4/13/2026 at 7:31:57 AM

Ionos (VPS XS+)

1 Core with 512MB RAM combined with Wireguard easily shuffles a few GBit/s.

by SuperMouse

4/13/2026 at 5:09:20 AM

Sounds more like a state of the private download engine to me :)

by oaiey

4/13/2026 at 5:25:22 AM

I have a homelab with 4x Raspberry Pi 4's running Kubernetes a GMKtec Intel i5-12450H and a ProLiant ML350p Gen8 (which uses an ungodly amount of power). I'd add the following software/tools which have been awesome:

  - Portainer running on GMKtec & ProLiant
  - Dozzle (docker log viewer) on GMKtec & ProLiant
  - Beszel (server monitoring, awesome) all hosts
  - Kubetail (Kubernetes log viewer on Pi K8s)
  - HomeAssistant
  - Jellyfin
  - UptimeKuma (uptime and notifications)
  - Semaphore UI (ansible playbook runner)
  - Metabase (querying and visualization for dbs)

by nodesocket

4/13/2026 at 6:33:51 AM

I've recently upgraded my ageing X8SIL Supermicro with an i5 to a X10 Sm board with a 2960 V4 14core Xeon... I was expecting a horrible power situation but it's less than 100w with a handful of spinning disks etc.

I see lots of people complaining on power with their re-used ProLiant and others etc. Is it the throttling or bios settings that messes with the idle power?

Or are you just running it at 100% and my low usage is what saves my electricity bill?

by mrmlz

4/13/2026 at 6:42:42 AM

I'm at about 150 watts at idle with 2x Intel E5-2640 with 8x drives. I've gone through the BIOS pretty thoroughly and optimized as much as possible.

by nodesocket

4/13/2026 at 6:51:34 AM

Ah okay 150w is not _that_ bad - more than a rpi for sure but still :)

And another cpu+chipset is always going to eat som Watts just by existing.

by mrmlz

4/13/2026 at 5:12:02 AM

> I originally intended to try out the NixOS for the sake of reproducible builds and being able to store the configuration in a single place but got too lazy about it.

Ironically once I got over the hump of learning NixOS, I can't imagine using anything else for declarative configuration. Too lazy to use a traditional system which requires custom wiring.

by colordrops

4/13/2026 at 7:32:30 AM

I'll definitely give it a try, somewhere in the future

by MrLokans

4/13/2026 at 3:51:33 AM

You are doing more than I am (e.g. synchronized file storage, books, music), but I have radarr, sonarr, overseerr, plex, and supporting apps for movies and tv shows. Plex is available externally through its remote access feature. For the actual request system, I run OpenClaw with an Overseerr extension. This allows me to manage titles remotely via Telegram without any kind of tunnel or SSO. Simple and gets the job done for the solo-user scenario.

by atlgator

4/13/2026 at 4:07:23 AM

Seems like it's down right now. I guess that's the "State of Homelab"? :)

by oofbaroomf

4/13/2026 at 4:12:37 AM

Up for me.

by KomoD

4/13/2026 at 4:02:07 AM

[dead]

by imbus

4/13/2026 at 6:36:38 AM

[dead]

by Floflox