toolmere

Best Privacy, security & self-hosting according to Hacker News

25 tools ranked by real comment mentions.

Crawlmere – 15 pro SEO skills for Claude. $24 one-time →Talkmere – our Chrome extension, coming soon to the Chrome Web Store →

#18 Fastmail

Paid email
2,250 HN comments26% read as recommendations*score 585Privacy, security & self-hosting
Sample comments (5)
…, FreeBSD, MySQL, SQLite, PostgreSQL, Redis, Kafka, Docker, mathematics, the English language and Latex. Email: achenet@fastmail.com Website: https://arielche.net/ I am a software developer and researcher with half a decade of experience and a Master's degree in mathematics. I ha…
— achenet, 2026-11-03 · Ask HN: Who wants to be hired? (November 2026) · source
…OpenGL, OpenTelemetry Languages: English (native), Serbo-Croatian (intermediate), Japanese (basic) Email: shy.goose1613@fastmail.com LinkedIn: https://www.linkedin.com/in/opeik GitHub: https://github.com/opeik Résumé: please email me for a copy I've been programming as a hobbyist…
— opeik, 2026-11-03 · Ask HN: Who wants to be hired? (November 2026) · source
If Fastmail offered a CA certificate, then whenever I use Fastmail I would run another separate browser instance or mail client with all CA certs removed and Fastmail's CA certificate loaded. This behavior, or lack of it, and resulting functionality is what differentiates the "fo…
— jon128, 2026-11-01 · Understanding Email Encryption (2025) · source
This is a good overview of email encryption, but it doesn't cover what Fastmail actually supports which I think makes this misleading. Fastmail does not enforce MTA-STS for outbound messages. I just checked here (https://email-security-scans.org/view/jktrld5e73b2dyxz0h1swu...). Y…
— 8organicbits, 2026-11-01 · Understanding Email Encryption (2025) · source
Any alternatives folks can recommend? I myself am considering switching from protonmail to fastmail. I’m looking for something hassle-free and “not google”.…
— ivandenysov, 2026-10-31 · I'm a Proton employee and I'm breaking my silence · source

#25 Home Assistant

Home automation
2,993 HN comments15% read as recommendations*score 449Privacy, security & self-hosting
Sample comments (5)
…everything it puts out. Overall I think it makes me more effective. On my own time I put a pair of Radeon VIIs into my home server and I've been playing with different setups to run local models. My current favorite is Qwen 3.8 Flash Next running on Strata (I have a two-line PR…
— nfriedly, 2026-11-02 · Ask HN: Who wants to be hired? (November 2026) · source
…t for battery powered I'm looking closer at BTLE. I actually have 3 ESP32's around the house to act as BTLE proxies for Home Assistant which I can use with OpenDisplay as well. And yes, it's a great form factor, it looks great, and just makes me smile when I walk by one. Once I c…
— joshstrange, 2026-11-02 · $48 e-paper display can be whatever you want it to be · source
…value for money, not so sure nowadays. The reason why I keep it connected to the network (with a traffic rule) is I use home assistant to run automations etc so need at least LAN connectivity.…
— djhworld, 2026-11-02 · Ask HN: Which TV do you recommend for privacy? · source
…mall standalone Rockbox media player. Can handle podcasts or years of music no problem. No internet on the go needed. > Home Assistant: being able to control my home, optimise the energy usage, improve security. I love Home Assistant and I optimize and automate it when I am at ho…
— lrvick, 2026-11-01 · Digital minimalism · source
…e. AntennaPod: the wealth of information and interesting topics I've been exposed to via podcasts is hard to overstate. Home Assistant: being able to control my home, optimise the energy usage, improve security. AI: I can talk to an AI anywhere. Instantly upload a photo, for exa…
— Flere-Imsaho, 2026-10-31 · Digital minimalism · source

#26 GrapheneOS

Private Android
7,357 HN comments6% read as recommendations*score 441Privacy, security & self-hosting
Sample comments (5)
> I have played this game many times with Android apps I haven't had this issue myself and fortunately GrapheneOS has its scopes features and more are coming, so it's still possible to use a more private and secure OS without having to cave in like you're saying. For example, Wha…
— other8026, 2026-10-28 · The Advantages of Mobile Linux over AOSP (LineageOS, CrDroid, GrapheneOS, etc.) · source
…viewing the code that I submitted to them. I have a personal beef with how Daniel Micay treats other FOSS projects, but GrapheneOS does a good job of protecting its users. However, I know from personal experience that I always end up installing apps based on surveillance capitali…
— amosbatto, 2026-10-28 · The Advantages of Mobile Linux over AOSP (LineageOS, CrDroid, GrapheneOS, etc.) · source
I use GrapheneOS on my Pixel and it gets very dim. Also, I have the night mode (orange tint) cranked way up - something that the stock OS should allow you to do.…
— tosser811, 2026-10-26 · OLED iPad Mini · source
I just wanted to mention that my criticism of the original post comes from a place of love for GrapheneOS and its mission. I really wanted to know what the official 12 banks are because I want to consider using one of those banks.…
— left-struck, 2026-10-24 · Around a dozen banking apps began specifically permitting GrapheneOS · source
…y patches for many years, but it's trending in that direction. Around 90% of banking apps are currently compatible with GrapheneOS. It would likely be more like 50% if we hadn't put a lot of effort into improving compatibility with a lot of workarounds for the bugs and problemati…
— grapheneos, 2026-10-24 · Around a dozen banking apps began specifically permitting GrapheneOS · source

#31 Nextcloud

Self-hosted cloud
1,838 HN comments20% read as recommendations*score 368Privacy, security & self-hosting
Sample comments (5)
I’ve never used iCloud. I hate Apple but I hate Google more. Instead of iCloud I use WebDav, CalDav, Bitwarden and NextCloud. Contacts, calendar, passwords and photos that I control. I recommend the same to others but I can count on one hand who has actually gone away from iCloud…
— thatonehack, 2026-10-24 · Today, we hacked what we'd set out to hack: the iPhone · source
I use nextcloud to sync my own keepass database across my devices. Both nextcloud and keepassxc are open source. Please explain how self hosting open source software is locking me into a vendor. If the sky falls and strongbox ceases working with mac/iOS I can use android and lin…
— willis936, 2026-10-14 · Passkeys are not a trap · source
…this was the most resource intensive service. It's much better now. I do not recommend due to spam waves. - headscale - Nextcloud, OnlyOffice, Kanboard: for productivity - Prometheus, grafana & monitorix: monitoring, plus netdata aggregating data from other nodes - Open Sondage,…
— MayeulC, 2026-10-09 · Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7? · source
I really wish they had a SOHO offering, would love to run this with NextCloud and personal projects from home.…
— claytongulick, 2026-10-09 · Our $445M Series D · source
…flare tunnels. This is a lot of compute and very little power use. One for personal self-hosted projects: languagetool, nextcloud, hister, syncthing, restic backups, vaultwarden, windmill. Another for public facing web apps I host through cloudflare tunnels. As well as public fac…
— wraptile, 2026-10-09 · Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7? · source

#33 Jellyfin

Media server
2,553 HN comments14% read as recommendations*score 357Privacy, security & self-hosting
Sample comments (5)
…nnects to a avr that handles inputs and 5.1.2 speakers Nvidia shield with hdmi-cec to turn on/off the receiver and tv. Jellyfin, android tv app for cable company, YouTube sans ads and projectivy launcher (Google one sucks). You can update firmware via usb stick. Would get an Ap…
— zeagle, 2026-11-01 · Ask HN: Which TV do you recommend for privacy? · source
I use jellyfin remotely with tailscale. It was trivial to set up. There's probably a dozen other holepunching mesh VPN approaches that would also work. Not to mention Iroh is in the mix now too.…
— knowaveragejoe, 2026-10-27 · Disney Raising Prices Days After Confirming Ads Will Now Show Up on Every Tier · source
…Plex Pass and they still feel entitled to put advertisements in front of my local media content. I've since switched to Jellyfin.…
— tstrimple, 2026-10-22 · Plex laid off the whole player team · source
…east fork/pin it from some version and merge things from upstream that I want, which is the reason why I was looking at Jellyfin.…
— rumblefrog, 2026-10-21 · Plex vulnerabilities being exploited in the wild to drop a cryptominer · source
Question for Jellyfin users - how's the support for non-tech people that were using your library? Like my parents use my Plex, and getting them switched to something else is going to be a hell ride.…
— jmuguy, 2026-10-21 · Plex laid off the whole player team · source

#37 Proxmox

Virtualization platform
2,267 HN comments15% read as recommendations*score 340Privacy, security & self-hosting
Sample comments (5)
Running a synology router. Don't recommend. Will be adding a NIC to my Proxmox host and running a OPNSense VM in the future.…
— spaldingcactus, 2026-11-03 · Ask HN: What router do you use at home? · source
…neer (1-Year Contract | Onsite) Designing and maintaining isolated network environments for automation, virtualization (Proxmox SDN), and on-prem Kubernetes clusters. - Stack/Focus: SONiC (SonicNOS), Edgecore DCS202, SSE-C4632 100G switching, Linux administration, L2/L3 segmentat…
— fires10, 2026-11-02 · Ask HN: Who is hiring? (November 2026) · source
In my case it's a fairly boring proxmox server. The KVM VM started as a bare bones debian install and then I added xorg and xfce4 and the tiger vnc server. I have a GUI on it for when I want to use it that way (in screen dimensions that are a 1:1 mapping of the native resolution…
— walrus01, 2026-10-23 · OpenShell – A safe, private runtime for fleets of autonomous AI agents · source
…ering, snapshots, and more. Plus, Stéphane Graber is super responsive on the forums and issue tracker. I bounced off of Proxmox, and can't recommend Incus more for hypervisor-type scenarios.…
— radlad, 2026-10-23 · Docker is weird · source
…s that run outside the cluster (ha-proxy, jellyfin) are all managed declaratively. At some point I had thought of using proxmox with lxc but I am very happy with NixOS.…
— bengalister, 2026-10-16 · What I self-host · source

#38 1Password

Password manager
2,185 HN comments14% read as recommendations*score 306Privacy, security & self-hosting
Sample comments (5)
I recommend Bitwarden. Cheaper and just as good as 1Password IMHO.…
— jnrk, 2026-10-30 · Proton's CEO Cancels AI 'Re-Interviews' · source
I don't think they have one, I use 1password. Note sure why email and a password manager would be linked?…
— grey-area, 2026-10-30 · Proton's CEO Cancels AI 'Re-Interviews' · source
> I’m getting so many 1Password prompts for agents pulling env variables out of it and with very little context of what is being accessed by who This is a one-sentence horror story. I almost can't believe someone would let this happen, unless the 1Password account is not importan…
— caaqil, 2026-10-30 · Binance-hacker-1029 – $5.6B stolen from Binance · source
…kube/config, ~/.ssh etc into a password-manager. You can tell Claude to adjust the config files to get the secrets from 1Password when they are needed with TouchID requirements etc.…
— thecopy, 2026-10-30 · Binance-hacker-1029 – $5.6B stolen from Binance · source
…ion, it needs access to a browser, so I set up camoufox. - It needs to log in to the compensation portal, so I set up a 1Password vault and gave it access to select credentials. - To send me updates, it needs a gateway, so I set up a WhatsApp bridge. So at this point, I've got an…
— sksksk, 2026-10-22 · Claude Duet · source

#42 Plex

Media server
2,530 HN comments11% read as recommendations*score 278Privacy, security & self-hosting
Sample comments (5)
More than likely Plex realizes where their money comes from. It's not streamlining personal video content playback. That's how they built their reputation, but they make their money on integration deals and filling your home screen with other people's content. I paid for Plex Pas…
— tstrimple, 2026-10-22 · Plex laid off the whole player team · source
…against things like "Hey, this company decided to remove this feature that I use a lot (cough cough, watch together on Plex), or put something behind a paid wall where it was previously free". With open source, I can at least fork/pin it from some version and merge things from u…
— rumblefrog, 2026-10-21 · Plex vulnerabilities being exploited in the wild to drop a cryptominer · source
+1 for MusicAssistant. I have been using it for about 2 weeks with Plex as the source, but MA as the player after "we" (my wife) decided Spotify is too expensive. Handing off between devices is my current pain point with it. It can group players so that you can do multi-room sy…
— linuxdaemon, 2026-10-21 · Plex laid off the whole player team · source
…estion for Jellyfin users - how's the support for non-tech people that were using your library? Like my parents use my Plex, and getting them switched to something else is going to be a hell ride.…
— jmuguy, 2026-10-21 · Plex laid off the whole player team · source
…tanding (and the last time I tried) is that Jellyfin lacks in this department quite a bit. That and ubiquitous clients. Plex client is available almost everywhere and overall, Plex mostly "just works". The latest Apple TV client changes have me hot and there are things I don't lo…
— joshstrange, 2026-10-21 · Plex laid off the whole player team · source

#50 Immich

Self-hosted photos
1,440 HN comments12% read as recommendations*score 173Privacy, security & self-hosting
Sample comments (5)
I'd love to NOT expose my services to the internet, but I often share stuff from opencloud/seafile or immich. If somebody has a convinient (for non-technical people I share stuff with) solution, please share because as the author of the post said, with AI assisted hacking now I'm…
— ssernikk, 2026-10-16 · What I self-host · source
I also self host some services: keycloak, forgejo, home assistant, immich, grafana/prometheus, jellyfin, pureftp (to store my surveillance cameras videos), and a vibecoded financial app, and soon hermes agent on a 2023 laptop. I chose to run most of them on Kubernetes since I am…
— bengalister, 2026-10-16 · What I self-host · source
- Navidrome - Jellyfin - Vaultwarden - Immich - pi agent. I use it through tmux and iSH on my iPhone - librechat. nice UI but honestly I probably jsut use pi more often - copyparty. to visually inspect whatever I create with pi, and to access my documents, to upload files I need…
— paweladamczuk, 2026-10-09 · Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7? · source
…s for the IPv6 addresses using regular DNS, which makes things very convenient. I also run a few personal web services: Immich, Gitea, Bookstack, Jellyfin, and more. That cheap VPS couldn't handle it. I run the services on a computer in my home office. Caddy runs on the VPS wi…
— ahf8Aithaex7Nai, 2026-10-09 · Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7? · source
For example I use a PiHole with local DNS records for my services like immich.lan, paperless.lan, etc.…
— yonatan8070, 2026-10-09 · New gTLD Application for .lan · source

#53 Backblaze

Cloud backup
1,147 HN comments14% read as recommendations*score 161Privacy, security & self-hosting
Sample comments (5)
…arket forecasts and investment opportunities. Roadmap? Nowhere to be seen. I also recently had a feature PR merged into Backblaze's open-source genblaze SDK. The docs told users in several places to hash fetched assets themselves for provenance verification, but no shipped tool a…
— prman_, 2026-11-02 · Ask HN: Who wants to be hired? (November 2026) · source
…uppose I didn’t specify exactly what I would recommend to someone who thinks it’s too hard, so here is that: 1. Install Backblaze. This is basically fire and forget. 2. (1) is enough for most people, but if interested (and on a Mac, which is what I’m familiar with), plug in an ex…
— tynorf, 2026-10-28 · New 14‑inch MacBook Pro with M6 · source
…ecently installed App Tamer Plus one for this tool. I've been using it for about eight months or so. Useful for keeping Backblaze and other daemons from taking over when they're supposed to be invisible. > Unfortunately, this does nothing for services such as WindowServer which n…
— alsetmusic, 2026-10-17 · Apple ML Research: Muse Spark Open with MLX on Mac Studio · source
I use backblaze with restic. Got about 300GB up there, fully encrypted, keys in 1Password.…
— physicles, 2026-10-09 · Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7? · source
Mac: I use Parachute Backup to keep a local copy of my iCloud files and photos on an external drive. Backblaze backs the external drive and all local working files (roughly 16TB altogether) up for ~$100/year.…
— Maximilian_Bet, 2026-10-07 · Ask HN: What Is Your Personal Backup Methods · source

#56 YubiKey

Hardware security key
1,601 HN comments9% read as recommendations*score 144Privacy, security & self-hosting
Sample comments (5)
I too use (multiple) yubikey to hold my private gpg keys. But I am not sure I will stick with gpg though. Even with my system to extend their expiration or renew them. I have found handling them to be a pain. I use them for 2 things: encrypt/decrypt gopass secrets and sign git co…
— LeBit, 2026-10-21 · Setting Up SSH Keys on macOS with Touch ID · source
…at generates my passwords stored on an external USB key (which is itself encrypted). I use KeepPassXC. 2. More than one Yubikey doing U2F. I know how to backup #1 and I have more than one of #2 to handle losing a Yubikey. #2 gives me phishing protection.…
— jgrahamc, 2026-10-14 · Passkeys are not a trap · source
…lar users. In my company we work on the (gas) grid so lot's of blue collar types. We went there, gave the pilot group a Yubikey and said: This is like the company pass you already have. Without the company pass you cannot enter any buildings. Without the Passkey you cannot enter…
— apexalpha, 2026-10-14 · Passkeys are not a trap · source
…nd, finally, for the important ones like my Google account (where my email lives) I have other non-Apple devices like a Yubikey setup as additional Passkey/FIDO authenticators…
— mixdup, 2026-10-14 · Passkeys are not a trap · source
…phone ever get stolen again when I'm traveling abroad in the Brave New Passkey World. The best answer I got was carry a yubikey with me at all times. One more thing to worry about losing, yay. Much convenience, very security, wow. If there are any new developments on that front,…
— alterom, 2026-10-14 · Passkeys are not a trap · source

#57 NextDNS

Filtering DNS
652 HN comments22% read as recommendations*score 143Privacy, security & self-hosting
Sample comments (5)
…that platform. Might as well use safari as it’s better integrated. And it supports uBlock origin (lite). With that and NextDNS, I have no ads anywhere. For the YouTube app, I use proton’s Albania vpn and no ads there either. Now on desktop, use Firefox and uBlock origin.…
— ornornor, 2026-10-14 · Apple: Switch to Safari (From Chrome) · source
Highly recommend https://nextdns.io, great for all kinds of blocking stuff. Plus Firefox or Edge for uBlock support.…
— somebudyelse, 2026-10-06 · System-level ad-blocking in Android · source
…oom" paragraph actually is making me consider Vivaldi. Its still Chromium, so it will support all my plugins, and I use NextDNS so most of ads will be blocked anyway. And its not like its amazing, but I've just never heard anyone rave of a browser that was particularly efficent e…
— AbstractH24, 2026-09-28 · I switched to Brave · source
I use NextDNS on my iPhone and I don’t think I’ve ever seen these ads in years of usage. I lay my coups dollars a month for iCloud family storage but that’s it.…
— ornornor, 2026-09-23 · Apple has added persistent 'ads' to iOS, and it's driving users crazy · source
Also recommend NextDNS Forget if they have Hagezi though. Also it would be really nice if there was a way to export and import custom URL lists and rules....…
— Melatonic, 2026-09-21 · ChatGPT now knows what you do on other websites via ad collector · source

#60 KeePassXC

Offline password manager
834 HN comments15% read as recommendations*score 125Privacy, security & self-hosting
Sample comments (5)
…of my linux setup on debian or an older ubuntu LTS: Running up-to-date desktop apps like synology-drive, prusa slicer, keepassxc, kdenlive or even Steam at the same time without any conflicting dependencies and configurations tainting the distribution. And if you do not want to…
— oflebbe, 2026-10-19 · Flatpak – An Insecurity Nightmare (2023) · source
…passkeys are implemented and how it's more difficult to get at the actual data being used (unless you export them with Keepassxc (or Bitwarden?), the potential for fuckups is much higher with passkeys. I'm yet to see someone get phished. It must happen, given that's how passkeys…
— Telaneo, 2026-10-15 · Passkeys are not a trap · source
…se unique email addresses and passwords, stored only on my devices(Linux, Windows, Android) using open source software (KeepassXC, KeepassDX). Passkeys add new friction I don't need.…
— user00005, 2026-10-14 · Passkeys are not a trap · source
I use nextcloud to sync my own keepass database across my devices. Both nextcloud and keepassxc are open source. Please explain how self hosting open source software is locking me into a vendor. If the sky falls and strongbox ceases working with mac/iOS I can use android and lin…
— willis936, 2026-10-14 · Passkeys are not a trap · source
ive used keepassxc forever, switched to proton pass after the release, because i was managing my db in git and it was always a pain to keep in sync, but switched back a couple of weeks ago with exactly the same setup, syncthing and KeepassDx also works suprisingly well. mostly i…
— jonny2811, 2026-10-10 · Bitwarden Dual License Model · source

#61 Pi-hole

Network ad blocker
732 HN comments17% read as recommendations*score 124Privacy, security & self-hosting
Sample comments (5)
…t "recommend". Everyone must use uBlock Origin or at least some type of ad blocker in every device. Then also mandatory pi-hole on every house. Even if you are used by Windows OS, you must use an adblocker. Even if you use Chrome. On every browser.…
— roscas, 2026-10-15 · AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware · source
>...pro-tip... Thank you for the detailed suggestion. I use LittleSnitch. pi-hole previously, I must take another look. Did you catch LG spying posts?…
— IndySun, 2026-10-13 · New Apple TV 4K · source
…to Unbound, which filters out any local IPs from the responses to avoid leaks. Finally, Unbound forwards requests to my Pi-hole, where the magic happens.…
— TheBozzCL, 2026-10-07 · System-level ad-blocking in Android · source
As much I love a good old "Why don't you just ..." response that terrifically misses the point - in this particular case I was watching YouTube through their Apple TV app. Now, there may be another "why don't you just ..." or "well, actually ..." response you have queued up, may…
— stillpointlab, 2026-09-13 · Why is Google still serving dodgy ads? · source
…re when I was using the inbuilt smart TV, I had disabled various android services related to ads on my Sony TV, and run pi-hole that blocks ads.…
— yumraj, 2026-08-10 · Mars Bar from 1991 found – and it's 20g bigger than today's · source

#72 TrueNAS

NAS OS
625 HN comments14% read as recommendations*score 88Privacy, security & self-hosting
Sample comments (5)
I began learning ZFS (TrueNAS and the macOS-plugin) just two weeks ago. It is absolutely incredible technology. >I use it with ... most of my external disks with macOS How do you personally deal with the terrible macOS default SAMBA client (if using SMB shares)? I can get saturat…
— ProllyInfamous, 2026-10-23 · Show HN: Uberblok – an interactive museum of ZFS internals · source
Hosted in a cloud: a VPN Lowendtalk Is an amazing community to get offers for those. At home: truenas and gitlab. At home, for work: I have an older HP workstation with an older Xeon with 24 physical cores and it runs a rhel (I have them for free as a partner) and I use it to run…
— dada216, 2026-10-09 · Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7? · source
This is great. I also avoid stuff like TrueNAS or Unraid and opt to simply run my own ZFS and smb/nfs/etc configuration. Love the unifi-style display... I am cooking something similar but it is not a touchscreen just a blue-on-black OLED that cycles through status pages. You've i…
— whalesalad, 2026-09-20 · Custom home server built from spare parts · source
Oh nice. I have a little PCIe/VGA one that I use for truenas and it's a bit flaky but I love that it's basically free from a PCIe perspective (just toss it off _any_ root). These are super useful and there are even m.2 variants.…
— mmastrac, 2026-08-30 · Why open source rocks – a new SM750 (Silicon Motion GPU) HDMI Driver · source
I have two TrueNAS Scale servers and it's been really good, they backup each other and also run several services i use thanks to Docker.…
— omnimus, 2026-08-30 · FreeCORE TrueNAS Core – Continued · source

#77 Vaultwarden

Bitwarden server
467 HN comments18% read as recommendations*score 84Privacy, security & self-hosting
Sample comments (5)
I quit self hosting vaultwarden because in the age of the LLM security is an arms race that I’m not going to win. Switched to Apple Passwords.…
— phoghed, 2026-10-11 · Bitwarden Dual License Model · source
…-corporate type code maintenance, rather than community-driven source contributions (exactly why we've seen things like Vaultwarden pop up) & that has generally just left all of their clients in that really awkward space where they're just good enough to be able to imagine their…
— lucideer, 2026-10-10 · Bitwarden Dual License Model · source
I specifically moved away from KeePassXC to Bitwarden with self hosted vaultwarden because the Linux desktop experience and mobile syncing was so terrible. While I love KeePassXC, using it on an immutable Linux distro where everything needs to be Flatpak means the browser extensi…
— Arrowmaster, 2026-10-10 · Bitwarden Dual License Model · source
…monitoring, plus netdata aggregating data from other nodes - Open Sondage, Framadate, I hate money: for friend groups - Vaultwarden: password storage - Wallabag (should use it more or may retire soon) - Ntfy: for UnifiedPush - LDAP server: for centralized auth - Borg backup - Som…
— MayeulC, 2026-10-09 · Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7? · source
- Navidrome - Jellyfin - Vaultwarden - Immich - pi agent. I use it through tmux and iSH on my iPhone - librechat. nice UI but honestly I probably jsut use pi more often - copyparty. to visually inspect whatever I create with pi, and to access my documents, to upload files I need…
— paweladamczuk, 2026-10-09 · Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7? · source

#80 Mullvad

Privacy VPN
2,008 HN comments4% read as recommendations*score 80Privacy, security & self-hosting
Sample comments (4)
…cessible on the standard protocols. There are a host of other search engines. I use search.brave.com myself (after leta.mullvad.com was decommissioned). Students will learn about other search engines, and about how corporations are not your friends. Both good lessons to learn.…
— godshatter, 2026-11-03 · Google will turn off search for schools that reject AI · source
Mullvad spends a lot on irl marketing. VPN providers are essentially just about trust as they provide essentially the same service, so marketing is hugely important. Mullvad and IVPN both don't do affiliate links. Proton is the only VPN that I can recommend that does use affiliat…
— Cider9986, 2026-10-09 · A statement on the Tor Project's relationship with Mullvad · source
Ooof I don't want these two to break up. Mullvad browser is my favorite browser, and it's tor browser minus connection to tor.…
— ekjhgkejhgk, 2026-10-09 · A statement on the Tor Project's relationship with Mullvad · source
…- Supported: Firefox, Chrome, Edge, Floorp, Chromium, Brave, Vivaldi, Librewolf, Waterfox, Ungoogled Chromium, Thorium, Mullvad, Tor, DuckDuckGo, Yandex, ... - Impractical to support: Orion - Impossible to support: Zen Browser This probably won't be the last time I trip over that…
— ToyKeeper, 2026-10-04 · An Update on Orion for Linux and Windows · source

#109 Proton Mail

Encrypted email
460 HN comments8% read as recommendations*score 37Privacy, security & self-hosting
Sample comments (5)
…I'm much less overthinking the whole issue than you are All my switching feels organic in retrospective and creating a Proton mail account + GMail forward didn't seem like a big deal at the time, it's not like you have to self host your SMTP server or similar effort after all. I…
— alexfortin, 2026-10-09 · Stop complaining about enshittification. Use the alternatives · source
I switched to Proton Pass yesterday, since I’m already a subscriber to Proton Mail. Setup and import from 1PW was easy, took maybe 15 minutes tops. So far it has been working satisfactorily enough.…
— mplanchard, 2026-09-04 · 1Password Replied to My Disappointment · source
…tion provider like ntfy. Prism also allows Telegram or Signal to act as a notification distributor. In addition, I use Proton Mail which doesn't really allow custom notification services. Prism has a custom integration to work around that so your proton mail notifications don't…
— lone-cloud, 2026-08-14 · Ntfy – open-source Push to Mobile · source
I've used Fastmail for years but a year ago switched to Proton. For me the only reason to switch to Proton was that its hosted within the European continent, while Fastmail is hosted in I would say that Fastmail is the "Ferrari of e-mail" services. It does everything well, or ext…
— foresterre, 2026-06-02 · Gmail thinks I'm stupid, so I left · source
…double of spam... I use only Gmail as a "register and get a spam" email account. Any serious or important email goes to proton mail. PD: I contacted that person and I formed about the situation some time ago.…
— Zardoz84, 2026-06-02 · Gmail thinks I'm stupid, so I left · source

#113 AdGuard Home

Network ad blocker
174 HN comments17% read as recommendations*score 30Privacy, security & self-hosting
Sample comments (5)
I can't recommend AdGuard enough. It works across devices, and just does all the DNS level blocking everywhere. I've been able to install it on my parents' devices, my siblings' devices, and more places. They have apps for just about any device. On top of that, you can install us…
— figmert, 2026-10-06 · System-level ad-blocking in Android · source
…ad blocking baked in with less restrictive blacklists, so that's what I use. Before I got the FW, I used Tailscale and AdGuard Home.…
— nunez, 2026-08-30 · “It works better in the app” · source
> ...my primary line of defence is AdGuard Home. By handling privacy at the DNS level... To each their own, I guess, but that would be a hard pass from me. One example from mobile: FF on android keeps trying to connect to its various services (like firefox.settings.services.mozil…
— bornfreddy, 2026-04-09 · Little Snitch comes to Linux, but the core logic is closed source · source
…For time synchronization, I rely on 2x NTP270 from CenterClick. As a TAP device, I use the Protectli Vault and a Pi 4b. AdGuard Home is deployed on my OpenWrt GL.iNet routers. Most of my services are now hosted on VPSs: 3x Netcup VPS 1000 ARM G11 (6 vCores, 8GB RAM, 256GB NVMe) 7…
— exiguus, 2026-03-24 · Migrating to the EU · source
I use unbound (recursive resolver), and AdGuard Home as well (just forwards to unbound). Unbound could do ad-blocking itself as well, but it's more cumbersome than in AGH. So I use two tools for the time being. The upside is there's no single entity receiving all your queries. Th…
— diarrhea, 2026-03-22 · Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2 · source

#122 Paperless-ngx

Document archive
91 HN comments23% read as recommendations*score 21Privacy, security & self-hosting
Sample comments (5)
…that has been! I can't believe self-hosted products of this caliber are free. Huge shout-out to HomeAssistant, PiHole, paperless-ngx, Dawarich, and countless others for the same reason. Congrats to the team on the release and thank you for helping me catalogue my personal memori…
— slaye, 2026-07-03 · Immich 3.0 · source
I use paperless-ngx for digitizing all my documents, it also uses Tesseract. The result is not perfect, but more than acceptable, if I scan at 600dpi…
— graynk, 2025-10-10 · ScribeOCR – Web interface for recognizing text, OCR, & creating digitized docs · source
…running on the NAS that actually stores and manage the data to be simpler. So that means running plex/jellyfin, kometa, paperless-ngx, *arrs, immmich on the NAS and for that synology's cpu are not great. In general, the most common requirements of prosumers with NAS is 2.5gbps an…
— sersi, 2025-10-08 · Synology reverses policy banning third-party HDDs · source
…s tool to "scan" the kiddos' homework with my phone. Switched to Quickscan later because it also integrates nicely with paperless-ngx.…
— gigel82, 2025-08-09 · Microsoft Office Lens getting the axe · source
I use syncthing... it's great for that purpose, Android is not officially supported but there is a fork, that works fine. Maybe you want to combine it with either ente.io or immich (also available for self-hosted) for photo backup. I would also distinguish between documents (like…
— sandreas, 2025-07-19 · Make Your Own Backup System – Part 1: Strategy Before Scripts · source

#125 Uptime Kuma

Uptime monitor
94 HN comments19% read as recommendations*score 18Privacy, security & self-hosting
Sample comments (5)
…rs updated. To ensure everything stays running smoothly, I've built a lightweight watchdog (a mix of bash scripting and Uptime Kuma/Beszel) that monitors my services and containers and restarts them if they crash. This way, I rarely need to intervene manually. For critical servic…
— exiguus, 2026-07-01 · I don't maintain my homelab, it maintains itself · source
https://statusdrift.com — uptime/cert/domain/dns/tcp monitoring, with status pages, incident management, SLA monitoring and on-call. I got tired of the state of monitoring and ITSM tools. Most established tools stopped investing years ago. Everything has artificial limits or a cr…
— razno, 2026-04-13 · Ask HN: What Are You Working On? (April 2026) · source
…lerio. I built this because I manage a few production servers. Recently, my main API became unresponsive at 3 AM. I had uptime monitoring set up (Grafana/Uptime Kuma), but the standard push notification was too short/quiet to wake me up, especially since my phone was on "Do Not D…
— royal-amrah, 2026-02-08 · Show HN: Alerio – Turn Webhooks into Critical VoIP Calls (Overrides Silent Mode) · source
Can recommend Uptime Kuma for this purpose: https://github.com/louislam/uptime-kuma…
— FinnKuhn, 2025-11-18 · Cloudflare Global Network experiencing issues · source
I use uptime-kuma[1] with notifications sent out through the included Apprise integration[2] 1. https://github.com/louislam/uptime-kuma 2. https://github.com/caronc/apprise…
— hoherd, 2025-07-22 · LetsEncrypt Outage · source

#127 BorgBackup

Dedup backups
92 HN comments18% read as recommendations*score 17Privacy, security & self-hosting
Sample comments (5)
…get streamed across the network to a NAS, and the contents of the NAS are periodically (every few months) stuffed into borgbackup on redundant offline devices. Aside from sync the other problem you'll run into if you're a data hoarder is how to split backups across multiple driv…
— fc417fc802, 2026-09-03 · Creating Backup Storage Sucks · source
…d sometimes I'd end up with those files back on the original PC in a backup of another. Fortunately, when I switched to borgbackup on Windows as well [1], this massive reduplication of files became a solved problem. [1] borgbackup doesn't officially work on Windows, but I run it…
— ralferoo, 2026-07-08 · Copy That Floppy – Cambridge guide for preserving data from fragile floppy disks · source
…there are tons of other solutions, many that will have snapshot features. I use borg backup, for instance. https://www.borgbackup.org/ Also, look into scriping your server setup with tools like Ansible or PyInfra. There is always the risk that bad things happen to servers, and w…
— jarofgreen, 2026-02-09 · Ask HN: What are you working on? (February 2026) · source
…we had all done this before, but I couldn't remember anything. Thankfully my very long password I use for an encrypted Borgbackup I have was somewhere deep or untouched, but, otherwise I would have been fucked. Also, the backup codes Google told me they would always accept faile…
— ddtaylor, 2026-02-06 · Show HN: If you lose your memory, how to regain access to your computer? · source
I use Pika Backup which runs on the BorgBackup protocol for backing up my system’s home directory. I’m not really sure if this is exactly what you’re talking about, though. It just sends backups to network shares.…
— dangus, 2026-01-11 · CLI agents make self-hosting on a home server easier and fun · source

#128 Signal

Encrypted messenger
159 HN comments10% read as recommendations*score 16Privacy, security & self-hosting
Sample comments (5)
Reproducible builds are nice, and I would love to have them for Signal. But I think I disagree with most of what you've written. Enabling "unknown sources" does not make my device less secure. The setting is also disingenuously named: It is in fact "known sources" I am installing…
— fwn, 2026-08-10 · Signal is working on a paid option to create an account without a phone number · source
…jects, they roflstomp the UI options available to most developers. I can't say enough what a smoking gun the flickering Signal app is here!…
— tptacek, 2026-05-13 · The Emacsification of Software · source
Those are valid arguments but I like apps better, for other reasons. Mostly security. When I use, say, the Signal app: - I can audit it, download it or even compile it myself from sources - Once I have installed it, Signal doesn't get to change it "in my back" - As a result, I do…
— palata, 2026-04-06 · I won't download your app. The web version is a-ok · source
…upport Linux ARM, so you have to go through some configuration unfortunately. I do not use any of them, I use Matrix. > Signal https://forums.puri.sm/t/signal-app-now-usable-in-portrait-m... https://framapiaf.org/@lolgzs/113010288224110061 > Whatsapp ... Discord https://forums.pu…
— fsflover, 2026-03-02 · /e/OS is a complete, fully “deGoogled” mobile ecosystem · source
There is no way to use the Signal app on a device without a camera (USB cameras are even explicitly blocked!), and sync it with another computer. I use a Daylight computer as my primary mobile machine, which does not have a camera. The Molly app is the only way I am able to use S…
— Zambyte, 2025-11-29 · Molly: An Improved Signal App · source

#151 Restic

Backups
22 HN comments18% read as recommendations*score 4Privacy, security & self-hosting
Sample comments (4)
…age binary as a filesystem. So doesn’t really make sense as media library backup over just scheduling a periodic borg / restic backup to glacier directly.…
— darkteflon, 2025-10-05 · Self hosting 10TB in S3 on a framework laptop and disks · source
…there. Backup is always a hard problem, but I got to live with Hetzer Clould backing up my VMs, Hetzher Backup boxes as restic backup targets and a tiny Celeron server in the laundry closet for local backups.…
— sam_lowry_, 2025-10-05 · Self-hosting email like it's 1984 · source
Related: Restic 0.17.0 Released - https://news.ycombinator.com/item?id=41082937 - July 2024 (5 comments) Restic – Simple Backups - https://news.ycombinator.com/item?id=38915291 - Jan 2024 (14 comments) Restic 0.15.0 Released - https://news.ycombinator.com/item?id=34364925 - Jan 2…
— dang, 2024-10-13 · Restic: Backups done right · source
Quote: "This is not a fullblown restic backup GUI - it only allows you to browse existing repositories" I use it Backrest https://github.com/garethgeorge/backrest…
— AdaX, 2024-07-16 · Restic-Browser: A GUI to browse and restore restic backup repositories · source

#152 Plausible

Privacy analytics
45 HN comments9% read as recommendations*score 4Privacy, security & self-hosting
Sample comments (4)
…like smaller, independent-ish ompanies that actually care about developers. That's why I use bunny.net, transistor.fm, Plausible Analytics.…
— kugelblitz, 2026-04-07 · Dropping Cloudflare for Bunny.net · source
…nds, dark/light modes Privacy-first: Your data stays in your browser by default. No tracking beyond privacy-friendly Plausible analytics. No sign-up walls. The timestamp-based timer was the most interesting technical challenge — browsers aggressively throttle setInterval in…
— pgebski, 2026-02-20 · Show HN: HushWork – A calm focus environment for focus in one tab · source
…smaller side projects, or is this for fully fledged app only? Also, should we add know open source applications such as Plausible[1]? I am always happy to see Elixir and Erlang hit the front page. [1] - https://github.com/plausible/analytics…
— mig4ng, 2025-09-19 · Show HN: WeUseElixir - Elixir project directory · source
…e aren't vendor-locked to stripe / getlago you can still use stripe just helps adaptability in case stripe goes weird). Plausible analytics is nice, much better than GA imo. Sendgrid is what I'd normally reach for so that makes sense. Tailwind is what I use for css always so that…
— canadiantim, 2024-01-31 · Show HN: Open SaaS – An open-source alternative to paid boilerplate starters · source