Setup, power and thermals, and software tips for running a Mac mini as a home server or self-hosting box.
A self-hosted ThingsBoard server on Ubuntu in Amazon Lightsail works normally with the regular MQTT port 1883. When MQTT over TLS is enabled on port 8883, the service fails. The setup uses TLS 1.2, a PEM certificate file, and a private key file path. The error says “MQTT SSL Credentials: Invalid SSL credentials configuration” and says that none of the PEM or keystore settings can be used. Turning those security settings off makes the service work again, but turning them on also brings the website down.
The old Mac mini still allows file access, but the admin password has been forgotten after moving from an older desktop. Adding the Mac mini to a remote setup requires admin access. The practical question is whether the simplest path is to move the files out first and then reformat the Mac mini.
In this homelab setup, the Mac mini M4 is not the main machine. It is mainly used to run code-server, which makes VS Code available through a self-hosted web setup. Heavier work runs on a separate desktop PC with an Intel i7 12700K, 64GB of DDR5 memory, two 2TB M.2 drives, an RTX 4070 Ti Super, and an RTX 5060 Ti, with both graphics cards having 16GB of memory. That PC runs medium-sized local models using a dual GPU setup. The main self-hosting machine is a Geekom IT15 upgraded to 64GB of DDR5 memory with an Intel Ultra 9 chip. A Dell Optiplex 3046 Micro works as a media server connected to a hard drive enclosure. The hardware sits in a 3D-printed rack with an Amazon patch panel and a Sodola 2.5G managed switch.
Internal web servers need the browser address and the certificate name to match. A Let's Encrypt certificate for `lan.mydomain.com` and `*.lan.mydomain.com` works with `https://storage.lan.mydomain.com`, but it does not work with the short address `https://storage/`. The network uses `dnsmasq` and Pi-hole for internal DNS, and the DNS search domain is set to `lan.mydomain.com`. `nslookup storage` finds `storage.lan.mydomain.com`, but browsers still do not treat the short name as matching the certificate. The same behavior appears on Windows and Linux, and in Chrome, Chromium, and Firefox. Self-signed certificates or installing a private certificate authority on every friend's PC would add more work and can be made worse by antivirus software.
Sencho 0.92.0 makes it easier to manage servers that run apps with Docker Compose. A new Security page brings image and compose vulnerability scans, findings, secrets, scan history, suppressions, and Trivy setup into one place. Compose Doctor adds checks before a stack is started, so problems can be caught earlier. Compose Network Inspector helps show how a stack is exposed on the network and adds a guard against accidental public exposure. The update can also flag when stack documentation no longer matches the real setup. Mobile support is now complete, including editing compose files and environment variables from a phone. Fleet and stack management also gain stalled update detection with recovery actions, adjustable image update check timing, and support for multiple compose files from a Git source. Sencho is built for Docker Compose management on one server or several nodes, with a focus on seeing the whole fleet, safer remote access without SSH or exposed sockets, and practical home server operations; it is positioned as an alternative to Portainer.
A Mac mini M4 running Tahoe 26.5 has very weak and unstable Wi-Fi. YouTube videos often stop, buffer, or fail to load properly. Web pages open very slowly, and the whole connection feels unreliable. Moving the Mac mini or changing the direction it faces can help for a short time, but the improvement does not last and the speed is still poor. A Windows PC with an Intel Wi-Fi chipset works much better in the exact same spot on the same network.
A new homelab setup starts with a Dell PowerEdge R730 with 16 small drive bays. The hardware includes two Intel Xeon E5-2697A v4 processors, two 32GB DDR4 server memory sticks, two 1TB consumer SATA SSDs, dual 1100W power supplies, an Nvidia Quadro K1200 graphics card, iDRAC 8 Enterprise, a 1 gigabit 4-port network card, and an H330 mini RAID card. Proxmox is already installed as the system for running and managing virtual servers. Storage is starting small because of budget limits, with an upgrade planned later. Compared with a quiet, low-power Mac mini server, this is a much larger used business server with more room for drives and virtual servers, but likely higher power use, more noise, and more space needs.
The goal is a pet robot that works fully at home without depending on cloud AI. The planned setup uses Gemma 3 270M for replies, Tiny Whisper for speech recognition, and Kitten TTS for spoken output. A Raspberry Pi 3B+ currently produces about 4 tokens per second, which is slow for a responsive robot. The open question is whether a Raspberry Pi 5 with 4GB of memory would make this setup practical. The item does not include real Raspberry Pi 5 test results or confirmed performance numbers.
A Linkding bookmark automation can change some bookmark fields but cannot save the preview image URL. A PATCH request successfully updates the bookmark title. The same request cannot update preview_image_url, and the value stays null after several tested image addresses. Both JSON data and key:value data were tried. Local URLs reachable by Linkding were also tested. The alternative field name previewImageUrl did not work either. Linkding receives the request in its console, and title changes prove the basic workflow is working. A PUT request gives the same result for preview_image_url.
The goal is to run a media server on a home network. The server would host arr apps for media-related tasks, such as managing movies or TV libraries. It would also run game servers when needed. Docker is already seen as a way to use containerization and make several services easier to manage, but the first practical steps are still unclear. The main needs are beginner-friendly guidance on hardware, software, cables, setup order, and useful tips.
A gym has four computers playing video ads across sixteen TVs. Each computer uses VLC to keep videos looping. Every time a new video needs to be shown, someone has to remotely connect to each PC, stop playback, add the video to the playlist, and start the loop again. The practical need is a digital signage or remote media management tool that can control many screens from one place.
PlikShare 1.2.0 is an update for people who run their own file-sharing server. It adds SSO, so login can be tied into a shared sign-in system instead of handled only inside PlikShare. A fix for Entra ID is being deployed. Quick shares let someone pick files and folders, publish them outside the server, choose a custom link name, add a password, set an expiration date, and limit downloads. A Docker image with ffmpeg is now available, so photos can be measured and thumbnails can be created. Those thumbnails can appear in the file list, file tree, and a new gallery view. An audit log now records actions inside PlikShare, with more than 160 event types. Work on an MCP server has also just finished, which opens the door to connecting PlikShare with other tools or AI-based workflows.
This setup combines a Kometa configuration with UMTK and DV-Tagger. UMTK adds release dates and status details to movie and TV overlays through Kometa, so Plex libraries can show groups such as coming soon, new episode dates, new seasons, returning shows, canceled shows, and ended shows. Plex can search for Dolby Vision items, but it only treats them as one broad group instead of separating profiles such as 5, MEL, FEL, and 8. DV-Tagger scans media files, detects the Dolby Vision profile, and adds a matching label in Plex. Checking files with Mediainfo or Plex’s own info screen was slow, especially when new files kept being added to a server. dovi-tools and scripts could do the job, but the aim here is a faster and more modern tagger. AI helped with parts of the app, mainly HTML, while the underlying scripts and tools were not AI-made. Gemma4:26b was used, and testing included Ubuntu.
iPhone backups work smoothly with iCloud, but they are still hard to replace for someone trying to rely less on outside cloud services. The home setup already runs common self-hosted services such as a Minecraft server, Forgejo, Nextcloud, Traefik, Pi-hole, Unbound, and Headscale. The server currently runs Linux, and the goal is to back up iOS devices to that home server. Local iTunes backups are possible, but they are not automatic and require the phone to be plugged in with a cable. The preferred setup would back up over the network, ideally through a WireGuard VPN connection. One possible route is to run a macOS virtual machine and use iMazing inside it to handle the iPhone backups.
Anubis is a reverse-proxy tool that blocks AI scraper bots from overloading a website by making visitors solve a small computational puzzle (proof-of-work) before they can get through, which filters out most automated bots while letting real people in. A new build, version 2.6.6c 'Community Edition,' has now been released. The post itself only points to the download and does not list specific changes.
Running more services for a family makes backup planning harder. A home setup can include a media server, Immich photo storage, a Minecraft server, and shared files that used to live in OneDrive or Google Drive. Some data is currently backed up to external drives, some to cloud storage, and the most important files go to both. The goal is to get as close as possible to a 3-2-1 backup setup. The problem is that there is not enough hard drive space or cloud storage to back up everything in one place. The needed solution is a low-cost way to back up several Windows and Linux computers to one centrally managed cloud destination. Backblaze looks useful, but it is mainly built around one computer, and there is no single machine with enough space to hold everything. Renting an FTP server is being considered as one possible cheap option.
DashCord 1.4.0 is a major interface update for a headless Discord-to-webhook bridge for home labs. The earlier version kept simple button panels pinned near the bottom of a Discord chat so automation commands stayed easy to reach. That became messy when there were many commands, because Discord allows only 25 buttons in one message. The new version adds dropdown menus, and each dropdown can hold up to 25 choices. Buttons can now open modal forms, so tasks like logging a weight or deploying a container can ask for values before sending the request. Those values are added to the outgoing webhook data under a modal_inputs field. Panels can also use Discord embeds with colors, titles, descriptions, and thumbnails, configured from routes.json. The tool still runs headless from one routes.json file and fits into a Docker setup.
AudioMuseAI finished analyzing about 5,000 songs in roughly 12 hours using 6 workers across different hardware. A Mac with an M-series chip was recommended for this kind of job. After the analysis, playlist creation was attempted by song similarity, with cluster runs of 1,000 and 5,000. The best score was 18.10. The logs showed 99 possible playlists, but the final result became 0 playlists after the “minimal track in playlist” setting was applied. Changing several settings still did not create any playlists.
Running a RustDesk server at home mainly moves the remote access traffic through your own house instead of RustDesk’s servers. That does not automatically mean every convenience feature is included. One wanted feature is an address book, which saves remote devices so they are easier to find and connect to. Some third-party self-hosted RustDesk setups are said to include features like an address book. The practical question is whether there is a good way to get an address book in self-hosted RustDesk without paying.
An external SSD used with a Mac mini became corrupted after an unexpected power outage. The important files were recovered with a one-month EaseUS data recovery license, and the SSD worked again after being formatted. A technician said this can happen when an SSD is cut off while it is busy reading or writing files. MAMP had its root directory set to the external SSD, so projects were stored there. Earlier random shutdowns also made MAMP behave strangely until the whole Mac was restarted. The same problem did not appear while the SSD was unplugged for about two weeks, which points to the external SSD setup as a likely part of the issue. The drive was less than three months old and only used about 20GB out of 1TB. The model was a Verbatim Vx500 SATA III SSD with about 500MB/s read and write speed.
Reactive Resume now has a job application tracking feature. Job opportunities can be followed from saved, applied, screening, interview, and offer stages. Search, filters, sorting, and tags help manage applications without relying on a spreadsheet. Existing application lists can be imported from CSV. Each application can include salary, location, source, status, sent documents, contacts, follow-ups, and activity history. AI support works with a user-provided key and can draft cover letters, follow-up messages, and job-specific resume versions. Older applications can be archived without losing the record, and the tool offers board, list, and analytics views for response rate, interviews, offers, and drop-off points.
A self-hosted Pangolin setup needs a login method for friends and family. Google is being considered as an identity provider, or IdP, so people can sign in with their Google accounts. The main concern is whether adding Google as an IdP gives up any privacy for the server operator, who avoids Google and cares about privacy. There is also a need to understand the benefits of running a personal IdP and how the available IdP options differ.
A small group learning a new language needs a web app they can run on their own server. The desired setup is simple: everyone can add vocabulary cards to a shared deck, then review those cards with spaced repetition. Anki is a strong flashcard tool, but it is mainly built around desktop use, and AnkiWeb cannot be self-hosted. Scholarsome looks like a possible option, but it appears unmaintained. Other similar projects found on GitHub also seem abandoned. There does not appear to be an obvious serious self-hosted web app for shared decks and multi-person review.
The needed tool is a self-hosted service that checks multiple devices regularly and records how long each one was powered on during the day, down to hours and minutes. Docker support is preferred. The uptime data should be available through a REST API or a similar method so it can be shown on a personal homepage dashboard. It should also send alerts through Webhook or another notification method when a device passes a chosen limit. Uptime Kuma is useful for checking whether something is online and healthy, but it does not fit well when the goal is to find devices that are running too much.
A Mac setup needs an external drive that can read and burn music CDs, DVDs, and regular Blu-ray discs. The goal is to copy owned discs into files and host them on a Plex media server. Clear, recent recommendations have been hard to find, especially from the last two years. Support for 4K Blu-ray or UHD Blu-ray is not a priority because that format is not currently in the collection. The preferred budget is under $100.
The home server setup began years ago with an old Dell Precision 5810 used mainly for PLEX. It let a deployed friend and family members watch shared media. The machine worked for years, but the motherboard failed, so streaming services replaced the home setup for a while. The project restarted when reliable photo backup became important and a custom personal tool needed a place to run. A Lenovo ThinkStation P520 was added and set up with Proxmox, using a VM to run services separately. Discovering Homepage led to adding more home services and organizing them in one place. The current setup includes a ThinkStation P520, a Dell XPS 8940, a QNAP storage box, a 24-port managed switch, and daily plus weekly Proxmox backups.
An APC SmartUPS1500(SUA1500i) made in 2010 is still in use, and its batteries are replaced whenever needed. Other maintenance is limited to occasionally clearing dust from the fan. The main concern is not the battery, but the aging UPS unit itself. The practical question is whether internal parts wear out with age and raise the chance of a serious failure, even when the unit still appears to work, and whether it is time to buy a newer used UPS.
HomeBranch is a lightweight ebook management service that can run on a personal server. It lets people organize book files and read them through a built-in ebook reader while keeping control of their own data and privacy. The update adds OIDC login, LDAP login, PDF support, book deduplication, an easier book drop feature, PWA support, and better metadata fetching. The next main goal is a native Android app with offline reading. A paid hosted option may come later to help cover developer fees and hardware costs for building an iOS app. Self-hosting HomeBranch will stay free and open source.
Raccoon(rcc) is an open-source CLI tool for quickly checking a Mac’s security and basic health. It uses only what already ships with macOS, so it has no extra runtime dependencies. Its security audit covers more than 30 checks across core security settings, startup persistence, authentication, and privacy. Optional fixes can be enabled with --fix, and scheduled checks can run through LaunchAgent. Reports can be exported as JSON, CSV, or HTML, which helps when keeping records for more than one Mac. Its diagnostic checks include SMART disk status, open ports and listeners, LaunchAgents, login items, and Time Machine status. Its app update command handles both Mac App Store apps and outside apps in one pass. It supports Apple Silicon and Intel Macs, but it is a per-machine tool, not a replacement for MDM.
A Pangolin setup that protects Vaultwarden may still need some paths to skip extra login checks. The Vaultwarden app can require paths such as /api to stay reachable so it can talk to the server. That creates a clear concern: a bypass rule may become a weak spot because it lets traffic avoid Pangolin’s added authentication. In this setup, Pangolin and Vaultwarden are running on the same VPS. The core issue is how to keep app access working without turning bypassed paths into an easy attack route.