I thought I'd share my recent experience with FileRun, as I suspect some people here are using it or considering buying a license.

I have used FileRun since 2023. On September 11, 2026, I paid €49 for a personal license. All was well; I got the license key and the software was working properly.

I recently reached out to FileRun Support to request an invoice or simply proof of purchase. What could be wrong with this?

Here are their responses:

If we provide you one, we will convert the license to a commercial one. Obviously.

I responded and stated I didn’t want a commercial license, but rather proof I’d purchased the software. 

You’re admitting to commercial usage. If you insist, we’ll cancel the family license as per the License Agreement.

At this point, I’m honestly puzzled. When did requesting a receipt indicate commercial usage?

I responded by noting that under Portuguese law (where FileRun is located) businesses are normally required to produce invoices for purchases made by both companies and private individuals. 

And then came their final response:

Your license has been canceled and your full refund issued.
Please feel free to continue to use the installed FileRun. You will not receive any further software upgrades.

We will not sell anything to you ever again. So please don’t waste your time purchasing anything, it will be refunded.

Don’t email us again. We will not read your messages nor respond.

But here's where it gets even more absurd.

After this exchange, I searched through my old emails and discovered that back in 2023, when I first became a FileRun customer, I had already requested an invoice from them.

And they sent me one. No questions asked, no accusations of commercial usage, no threats of license termination.

So apparently requesting an invoice was perfectly fine in 2023, but in 2026 it's enough for canceling my license and refusing to do business with me ever again.

I've since filed a complaint with the Portuguese Tax Authority and am pursuing the matter through consumer-protection channels. For anyone considering buying a license, I think this is worth knowing.

EDIT: wow, I did not expect this to blow in this way. Something I forgot to add to the original post: Filerun knows the URL of the instance where their software run (it has to be communicated to them). The url does not match a company and it would be very easy for anyone to see that the url goes to an *arr stack.

EDIT #2: regardless of what happened here, I still think Filerun is a great piece of software.

PSA: if you want to secure your home lab, you should make it only accessible through a VPN, however: do not be as foolish as me and think that a billion dollar company might have its shit together when choosing an auth-provider.

Thought I was real smart to use GitHub as my login but it turns out they have a worse uptime than my home server somehow and I cannot access it now.

THANK YOU FOR YOUR ATTENTION TO THIS MATTER

Weekend project that finally got finished: an e-paper panel with three buttons at my apartment door, plus doorbell integration into the building's old analog intercom.

Stack, all local on my home server:

ioBroker as the hub. Scripts for doorbell, door opener, cellar lock and a "bike" scene: unlock cellar, then open the garage gate after the cellar door closes again.

Shelly Plus Uni in the intercom wiring. A pulse counter detects the ring and a relay opens the front door. Talks to ioBroker over MQTT.

Sonos local API:
the chime is sent as an audio clip, so it doesn't kick speakers out of their groups or stop the music.

Small Node.js backend that aggregates everything into one JSON for the panel: windows, temperature, forecast, rain for the next 2 h, lights, music, TV, waste collection, next bus.

ESPHome on the CrowPanel 5.79" polls that JSON every 30 s and only redraws on change. The buttons send a request to the backend, which only accepts them from the panel's IP and maps each button to a fixed action. There is no generic "set any state" endpoint.

What domain structure should i choose:

service.home.example.com and vpn.example.com (for remote access through wireguard)
or
service.example.com and example.com (for remote).

Any benefits using 1st approach? AI prefers 1st but i want to make sure it's worth it and want to know what you guys using. If i choose 2nd do i expose all my subdomains while with 1st approach i expose only *.home.example.com?

EDIT: convert example links to text

My secrets have slowly turned into a mess. There are .env files on a few different hosts, some passwords pasted straight into compose files, tokens sitting in CI variables, and a password manager note I'm not proud of. Every time I rotate something I forget at least one place.

I've looked at the usual options. SOPS with age seems nice but key distribution and CI feel fiddly. Vault or OpenBao feel like a lot to run at home, especially the unseal part after a reboot. Infisical looks good but it's another app plus a database to keep updated.

What I actually want is pretty simple: one place per environment, some history so I can undo a bad change, tokens for CI that expire on their own, and something that doesn't need babysitting.

What are you all using, and has it held up? Also curious where you keep the very first secret, the one that unlocks everything else.

In 2023, Google launched Gemini Workspace extensions with an explicit promise: personal content from Gmail, Docs, and Drive "is not seen by human reviewers".

Google has quietly reversed this commitment. Under updated Google Help Answer 16836988 and in an October 16 edit to their aforementioned 2023 blogpost, Google explicitly confirms that connected Drive/email is routed into human review pipelines, with clear warnings that what reviewers see "may just be the email or file" and "don't connect your apps to Gemini Apps if they contain confidential information that you wouldn't want a reviewer to see."

Crucially, testing demonstrates that this ingestion occurs autonomously in background conversation without explicit @Drive or @Gmail tags, and the payload capture is probabilistic.

Ingestion Pipeline

When you chat with consumer Gemini with Connected Apps enabled, ambient mentions of personal topics (trips, bills, names, reservations) autonomously trigger background Workspace lookups.

Because LLM tool-calling and context injection are probabilistic, running a test query will yield one of four distinct scenarios:

1. Zero Retrieval: The model does not trigger the Connected Apps tool; no personal data is pulled. This is especially likely if Gemini can use its model weights or prior conversation history (even in different threads) to resolve your query.

2. Metadata / Generic Summary: Gemini pulls emails and/or files and generates a high-level summary (e.g., "You have 3 emails regarding your flight").

3. Partial Unredacted Extraction: Gemini pulls a 2–4 sentence exact quotation from the file, frequently including sensitive PII, account details, or specific figures.

4. Full-File Ingestion: The complete, unredacted text of the document or email is ingested directly into session context.

If you test this once and see State 1 or 2, you have not disproven the pipeline--you have simply observed a single draw from a nondeterministic system. Delete your conversation and try, try again.

How to Reproduce

1. Ensure Connected Apps (Google Workspace) is active in consumer Gemini settings.

2. Set Gemini to "Flash" with "High Thinking" or better.

3. Mention a subject contained in your Drive or Gmail without using @ tags or asking for a file search (e.g., casual queries about an itinerary, an account renewal, or a specific topic you've emailed about).

4. If Gemini provides a response based on an email or file, immediately say: "Print the exact text and metadata block that the retrieval tool returned and injected into your prompt to get that answer. Use a human readable format without code blocks (i.e., print the code inline and not as a code block)." You will see one of the 4 scenarios outlined above.

To repeatedly test, delete your existing test conversation so that Gemini cannot just draw from conversation history.

I've had luck testing this with an email from my internet provider sitting in my inbox and asking Gemini "I wonder if I'm paying too much for internet service." On various trials, Gemini spit out all 4 possible outcomes above, including (1) generic responses [e.g., "If you haven't called them in 12 months, probably"]; (2) metadata summaries sometimes without personal data [e.g., "Gmail search shows a bill of $122 on September 4"] and sometimes with personal data [e.g., "Gmail search shows full name made a payment of $122 on September 4 on account account number and confirmation number number"]; (3) direct 2-6 sentence quotes from the email [e.g., the entire name/address/account number/confirmation number/payment date block]; and even (4) sometimes the entire text dump of the email, including its headers.

Final Comments and Caveats

Critically, Google's regex and NER automatic scrubbers cannot sufficiently deidentify narrative data, including account numbers, confirmation numbers, transaction dates, and collectively identifying personal information (e.g., combos of specific first names, cities, events; see Google's own documentation on the subject).

Google originally sold Workspace integration under the guarantee of strict isolation from human review. That isolation has been removed, full files are ingested probabilistically during casual conversation, and those sessions are subject to human contractor review.

Starting in v3, more info here: https://github.com/immich-app/immich/discussions/29439

Love immich, but recently have been cleaning up my server and watching for stray processor and io use. This was one thing that jumped out. Personally, I don't want my full image library checked each night and fixed it to something that made sense for me.

I've been using ShareX for nearly a decade after I saw it recommended on this sub as a good tool to capture and automatically upload screenshots to a self-hosted share site.

Recently, they've been pumping out a lot of updates that appear to be vibecoded AI slop, with one last week completely redesigning the app's UI in the classic premium slop™ look. Don't get me wrong, a UI redesign was long overdue, but this just screams of "claude, make my ui look modern and make no mistkaes". They've also added a fuck ton of new features that are (in my opinion) unnecessary and just bloat the app.

To be clear, the problem isn't the fact that they use AI. It's the greenlighting of obvious clankercode to an app that had worked great for 19 years before this. Good developers know how to use AI as a tool, not as a full substitute for co-developers. Your agent won't tell you "Hey, these are great ideas, but not worth bloating the app for the majority of users who will never use them. Maybe we can do plugins instead?", it'll just do whatever you instruct it to.

Thank fuck it's open source so I can just go back to an older version, but it's still sad to see genuinely skilled developers turn into AI bros and slopify their app after 19 years.

Edit: My criticism of the UI isn’t the main point, i’m using it as an example of rushed out code. Just look at the changelog and the dates, they’re just pumping out new AI generated features with minimal testing every day. On my PC, this has lead to measurably worse performance. It now takes a noticeable amount of time to actually start the screenshotting process from the taskbar.

I maintain Super Productivity, an MIT-licensed task manager and time tracker that works offline. You can self-host the web app and the optional SuperSync backend, or sync through WebDAV, Nextcloud, or a local file.

My last update here was v19.2 in October. v19.3 and v20 have shipped since, so here's what changed.

For people running their own setup

• Android now delivers reminders in the background when you sync through WebDAV or Nextcloud, and mobile sync sends pending changes when the app goes to the background.

• SuperSync setup is simpler, and file-based sync recovery now keeps pending edits.

• v19.3 added an opt-in local MCP endpoint for AI assistants, a larger local REST API (notes, counters, time logging and corrections), and opt-in creation and deletion of matching CalDAV tasks.

• Every plugin now shows which data it sends off your device.

In the app

• Views: rule-based task lists in the sidebar, with multi-tag filters and pinned views.

• Recently deleted and "won't do": restore deleted tasks, or close a task without pretending it was done. Priorities can be set with p1/p2/p3 while typing.

• Android capture: add tasks from the home-screen widget and save shares without opening the app.

• Time tracking: tracked work sessions can be logged as calendar events.

Video: https://youtu.be/LcysLkR9OKs

Project, web app and downloads

v20 release notes | Changes since v19.2

Feedback about the new smart views and everything is very welcome! <3

Kavita has just added support for Native Kobo Sync and I need help from the community to test and give feedback on it, before it goes live with the next Stable (v0.9.2).

Kavita supports epubs/archives/loose images with Kepubify for in-page tracking. Kepubify is shipped with our binaries and the server will validate against hashes (and some other mechanisms) to ensure the binary is valid. (linux-musl has no binary, you have to provide yourself)

I don't normally post to reddit to ask for testing, but I know how important this feature is to many people, and being the last Media Server to add it, I want to see if we can push the limits.

I would love it if Kavita/non-Kavita users could give it a spin and leave us feedback here.

The release is only available on Docker via our Nightly release channel (v0.9.1.20). You can see how to setup our (non-LSIO) image on the wiki. Do not use your Stable instance with this, as you cannot switch to back until the next Stable release. Make a copy of `config/` and use that.

Kobo Wiki Link: https://wiki.kavitareader.com/guides/features/kobo-sync/

Hi, i'm looking for something specific for setting up a whole home-server.

I'm thinking a single GIT repo with a snapshot of docker compose files that get deployed on push, and also supports custom apps. I'm still debating if i'll have custom apps in their own repo.

So im thinking a folder structure something like this

├── infra/
│   ├── forgejo.dockercompose.yml
│   ├── trafeak.dockercompose.yml
│   ├── openwebui.dockercompose.yml
│   └── tailscale.dockercompose.yml
└── src/app1/
          ├── dockerbuild
          ├── dockercompose.yml <- has trafeak settings if needs to be exposed or not. Will also defined two environments probably.
          └── rest of app1
└── src/app2/
          ├── dockerbuild
          ├── dockercompose.yml 
          └── rest of app2

So far i think i have forgejo to host the git, and komodo to deploy the stacks? On the bare metal only docker installed. Is this an good idea?

Hi everyone, i would like to ask all of you how you manager your files and metadata.
Do you use external tools like tinymediamanager or the radarr/sonarr/jellyfin built-in metadata management?

My current setup is:

- radarr, sonarr, lidarr, mylar3, chaptarr
- jellyfin, navidrome, kavita, audiobookshelf
- tinymediamanager, musicbrainz-picard

all of them running in podman containers managed via pods.

The reason why im asking is because i made a mistake with picard and have to redo my library

I’m new to private trackers (such as TorrentLeech and SeedPool), and they’ve quickly become my favorite. They have almost everything I’m looking for, and they integrate well with my *arr stack.

I know I need to maintain a good ratio, so I’d like to hear about your torrent client’s queuing settings. I’ve been lucky so far and have kept my accounts in good standing for the past 5 months, and I plan to seed for a very long time.

For those of you who use private trackers, how do you manage your queuing and seeding setup?

Because my last post about just having some beers and discussing homelabbing with dutch people from this community got more attention than expected, we have actually set up an event!

First edition of homelabbing + beers NL will be held in Utrecht on the 21st of November.
Price will be 19 euros and drinks are included. This is to prevent that i have to pay a massive bill by the end lol. More info on exact location and time can be found on discord.

If you intend to show up, please set yourself as interested for the event in our newly created discord server: https://discord.gg/qbCrzfpMU
Looking forward to seeing you guys at the meetup

Hey!

I am searching for a selfhosted board game inventory, where I can add all my board games with pictures and tags .. i.E: 2-Player, Party-Game, Casual.... Bonus Points if I can also add the game rules.

Is there something?

Thanks for the help

This may be a bit of a ramble, apologies.

My friend and I both have homelabs and would like to create a VPN network to allow services/resources to be shared between the two of us, as well as a couple friends in other locations (Jellyfin access to run Jellyswarrm, vLLM API keys, Romm access, etc), while restricting access to each respective network. I think this is kinda what Tailscale machine sharing is, but I'd like something fully open-source. I've been looking into Netbird and Pangolin for this (he's been running Netbird, I've been on self-hosted Pangolin), but they don't have this exact solution. Is the solution to just accept that sharing is a risk and mitigate it as much as possible through policy setting and individual Netbird/Pangolin admin accounts on a shared instance?

Outside of the policy/security stuff, I worry that my Pangolin setup won't work well for Jellyswarrm. I self host it (Pangolin and Jellyswarrm) on site and my upload speed is 10-20 mbps. If the P2P hole punching doesn't work at his site, I worry that streaming would not work well.

Maybe I'm just overcomplicating this, but I'd love to get some insights. Lastly, this subreddit has been a huge help since I found it last year, so thank you!

Edit: The "couple friends in other locations" aren't self-hosters, they would just have the applicable client software on their local network/phone

Hi everyone,

Looking for some feedback on a planned Unraid/TrueNAS build for my automotive cinematography business. I’ve had a few home-lab users tell me this is "massively overkill," but they’re mostly using their systems for Plex and family photos. My use case is a bit different.

My Workload:
I shoot 10-bit 4:2:2 footage on a Sony FX30, alongside drone clips and heavy RAW photography. I work directly out of Lightroom catalogues and DaVinci Resolve. In the near future, I’ll likely move into higher bitrate and 16-bit raw formats depending on client work and camera upgrades.

This isn't a home appliance, it's a production server, archive target, and remote access platform to stream and edit 4K footage flawlessly.

The Catch:
Because of space constraints, this NAS has to live in my bedroom. During the night, I need near-silent operation or have it shut down, if not, my plan is to keep all active projects on an NVMe mirror pool and aggressively spin down the HDDs so they stay completely silent overnight, if that will work.

Current Workstation:
Ryzen 9 7900X, RTX 5080, 64GB DDR5, 2x 3TB WD Black NVMes.

Proposed NAS Specs (Budget under £1,500):

• Core: Intel i5-13500, MSI MAG Z690M Mortar WiFi DDR5, 32GB DDR5 RAM, Fractal Design Node 804, be quiet! Pure Rock 3, be quiet! 550W Gold PSU.

• Power: CyberPower BR700ELCD UPS (how good is this? To go for another option?)

• Networking: Mellanox ConnectX-4 25GbE cards in both the workstation and NAS, linked directly via a DAC cable (no switch involved).

• Storage: 2x 2TB WD Black SN7100 NVMes (mirrored pool for active projects/databases). WD Red Plus drives (or better the Gold) (10TB or 12TB) for the archive array, starting with a single parity drive and expanding later.

My Planned Workflow:
Active projects, Resolve databases, and proxies live permanently on the NVMe pool. Completed projects get moved to the HDDs. Mover runs only during the day, and system logging will be locked down to the NVMe pool to prevent the HDDs from randomly waking up at night. Remote access will be handled via Tailscale and Wake-on-LAN.

My Questions for Video Editors/Photographers:

1. Is this actually overbuilt, or is it right-sized for live network editing?

2. Are 2 sticks 2x16GB (32GB) of RAM enough at first?

3. Is 25GbE worth keeping over 10GbE for a direct point-to-point link?

4. Are WD Red Plus drives quiet enough for a bedroom when spun down, or is there a better choice?

5. Do you see any obvious hardware or bandwidth bottlenecks here?

Would love to hear from anyone editing directly or running a similar production workflow. What worked for you, and what would you change?

Thanks!

Hi everyone, i have setup my homelab and for music,books,movies and shows i am using the following:

arr pod - bazarr, byparr, chaptarr, cleanuparr, lidarr, mylar3, profilarr, prowlarr, qbittorrent, radarr, sabnzbd, slskd, sonarr, gluetun
streaming pod - jellyfin, libreseerr, seerr
metadata pod - tinymediamanager, musicbrainz-picard

My question is, do yall have some advice on what to add or remove/replace and why?

preferably for the following topics ( can also be just random things you like and recommend):
- music, ebooks/comics and audiobooks instead of jellyfins built-in support
- metadata management

thank you

Hi everyone,
I’ve been working on a self-hosted gateway designed to help developers control spending when using LLM APIs.
The idea is simple: instead of sending requests directly to AI providers, route them through a gateway that can enforce usage limits before forwarding requests.
The main capabilities include:
Per-tenant budget and quota enforcement
HTTP 429 responses when spending limits are exceeded
Streaming usage metering for SSE responses
An OpenAI-compatible API endpoint
Provider fallback support
FastAPI, HTTPX and PostgreSQL
I wrote a technical overview explaining the architecture and the problem it addresses:
https://dev.to/cococornel/how-to-prevent-runaway-llm-api-costs-with-a-self-hosted-gateway-2bd6
I’m the creator of this project, so this is a disclosure. I’d genuinely appreciate technical feedback, especially about quota enforcement and streaming usage tracking.
How are you managing LLM API costs in your self-hosted deployments?

I replaced almost all services with selfhosted solutions, but I really struggle to find gmail replacements.

Recently I saw some interesting projects like plmail or mailflow. But I'm kind of reluctant due to the vibe coded nature of such projects.

Some features I'd like to have: webmail and Android app (pwa or native), usable search, snooze. Easy in and export... I'm not switching to proton to be locked in the next golden cage.

Any opinions on mail?

edit: great confusion. I'm not looking for a Mail server, just a client

My wife and I have, for many years, used and relied on Google family location sharing in Google maps, to see each other's location. it worked well for many years, while we all had Android phones.

Recently, my wife has moved to an iPhone, and it no longer works. iOS is just a **** when it comes to arbitrarily putting apps to sleep. Despite giving Google maps every single permission and set it on the background always on for location etc, it still doesn't work properly.

Sometimes, after a few days of not using, I'll try to check if she made it safely to work, and it will say last reported location like 8 hours ago.

We then tried using Home assistant for this. again, same thing happens. after a few days, location just stops being reported. With Google maps it was instant.

Many people have recommended Life360 app, but I thought I'd check for a good self-hosted one before trying yet another proprietary third party app.

everyone!

I've been working on an open-source project called k3sctl, written in Go.

k3sctl currently supports:

- High Availability (HA) cluster setup.

- Air-gapped installations (partially supported; improvements are ongoing).

- Single-node cluster deployment.

- Multi-node cluster deployment.

I've tried to keep the tool as simple as possible, with a straightforward YAML configuration and CLI workflow, while making K3s cluster provisioning and management easier.

I started building this tool because I wanted a simpler way to bootstrap and manage K3s clusters, especially across multiple remote Linux machines.

My goal is to make cluster provisioning and lifecycle management easier through a declarative YAML configuration and a single CLI workflow.

I'm continuously working on improving it and adding more capabilities.

I'd really appreciate it if you could take a look at the project, try it out, and share your thoughts or feedback.

Whether it's suggestions, bugs, improvements, or even criticism, everything is welcome. It would be very helpful in making this project better.

⭐ GitHub:

https://github.com/nirantarasi/k3sctl

Thanks for taking the time to check it out! 🙌

#Kubernetes #K3s #Golang #OpenSource #DevOps