Seafile is extremely fast. I don’t use syncthing so cant compare.
I use SSO with authentik and works very well with multiple users.
Android app doesn’t have 2 way sync if you need that (nextcloud doesn’t either).
There are no limitations with self hosted as far as I know. I just wanted a simple sync all that works with sso for multiple users and it works very well.
A previous thread put it best. It always feels 75% complete.
I’ve been using it since back when it was owncloud. It never felt stable.
Finally went with seafile and it’s super fast, stable and reliable.
Oh wow, direct obsidian seafile sync sounds amazing.
It bypasses the android sync app and just syncs to the server directly! This is brilliant!
Main issue with live sync is if you have multiple users you need multiple sync servers. This will allow all your seafile users to sync right away which us amazing!
Seafile doesn’t have 2 way sync on android. Would probably work well enough for sync between two computers
Obsidian with self hosted live sync plugin also works very well
Self hosted obsidian live sync eorks very well. I use it on 3 devices each with a different OS. Super fast and responsive. I can see text appear almost as fast as Google docs when types on one device and watched from another.
I know obsidian itself is not FOSD but the files are markdown and you can easily back them up with your existing backup setup (seafile for me) and then open up the plain md files if needed for some reason
The 1.95 update was trivially easy to update with their instructions if you already have the skill to use docker compose.
Yes, when you look into a new self hosted app, you have to check if they offer some kind of SSO option. Authentik can pretty much do every protocol there is. Each all will have different instructions on how to set it up.
They don’t really do the same thing. I use both. Authentik provides 1 password/account for all my self hosted apps. Along with other people that use my services. I create one account on authentik and suddenly they can access everything.
I then save that password in vaultwarden.
For what it’s worth I don’t use SSO for my vault warden master password, that is a separate password not saved anywhere
Do you want to create your own certs? You can use let’s encrypt certs on internal only local subdomains using DNS challenge.
I do this with traefik and authentik and use SSO for both internal and external domains.
I can’t imagine why it wouldn’t. The configuration just needs a URL, what domain they are actually on should be irrelevant.
Highly recommend Authentik for SSO.
I run it on it’s own sub domain and all my other apps on their own sub domains.
It has pretty much every login protocol you could want (oauth, saml, ldap) etc.
Currently using it for jellyfin, immich, linkwarden, freshrss, and seafile.
The above YouTube video shows that you can get authentik to send a 2fa push authentication that requires the phone to hit a button in order to complete the authentication flow.
Because authentik uses flows, you can insert the 2FA part into any login flow (proxy, oauth, ldap etc)
This, I used to have a kubernetes setup but how much redudency can you really have at home. Do you have a generator? Multiple Internet lines?
The fact is most hardware is highly reliable. Having good backups to restore from is all you need and you gain a huge improvement in simplicity which adds reliability in and of itself.
For your last point, portainer fixes that. I use portainer to pull compose files from my gitea instance. There is an option to auto update on git comit but I prefer to press the button to update.
I write the compose files in vscode and push them to my repo.
I have a setup similar to what you want.
My nas is a low powered atom board that runs unraid.
My dockets run on a ryzen CPU with proxmox. I don’t have a cluster, just 1.
In proxmox I run a VM that runs a all my dockets.
I use portainer to run all my services as stacks. So the arr stack has all the arrs together in a docker compose file. The docker compose files are stored in gitea (one of the few things I still run on unraid) and Everytime I make a change to the git, I press one button on portainer and it pulls down the latest docker compose.
For storage, on proxmox I use zfs with ssds only. The only thing that needs HDDs is the media on my unraid.
When a docker needs to access the media it uses an NFS mount to the unraid server.
Everything else is on my zfs array on proxmox. I have auto zfs snapshots every hour. Borg backup also takes hourly incremental backups of the zfs array and sends it to the unraid server locally and borg base for off-site backup.
The whole setup works very well and it very stable.
The flexibility of using proxmox means that things that work better in a VM (HaOS) I can install as a VM. Everything else is docker.
Free for self hosted which is probably what matters to most here
If you have to add a whole other app the match what authentik can do, is authelia really lighter weight?
Im joking because authentik does takes a decent chunk of ram but having all protocols together is nice. You can actually make ldap authentication 2FA if you want.
For services that I want exposed, I use traefik reverse proxy (jellyfin etc).
For things that warrant an extra layer of security I use wireguard and then also traefik reverse proxy with HTTPS but it’s only accessible locally (vault warden).