My Stack
Self-hosted services I run, grouped by region. Updated once or twice a year when I migrate things.
Europe
Two nodes in Finland and Germany. Most daily-use services run here.
- Miniflux — Lightweight RSS reader
- RSSHub — RSS feed generator
- Audiobookshelf — Audiobook & podcast server
- Actual Budget — Personal budgeting, local-first
- Karakeep — Read-it-later
- Linkwarden — Bookmark archiving with snapshots
- n8n — Workflow automation
- Stirling PDF — PDF merge, split, OCR
- tldraw — Whiteboard for precise diagrams
- Excalidraw — Whiteboard for hand-drawn sketches
- Uptime Kuma — Service monitoring
- Glance — Personal dashboard
- OpenClaw — Personal assistant
- Cloudreve — Cloud storage / netdisk
- Shrink — URL shortener
- Vaultwarden — Password manager
- Apprise — Notification gateway
- ntfy — Push notification server
- Memos — Lightweight notes / microblog
US West
Budget nodes in Los Angeles. Services that benefit from a US exit, plus legacy.
- Forgejo — Self-hosted Git
- Nezha — Multi-node monitoring
- Umami — Privacy-friendly web analytics
- sub2api — Subscription conversion proxy
- Typecho — Legacy blog, migrated to Cloudflare Pages but still running
Infrastructure
Hosting
- EU VPS — Best price-to-performance for CPU-heavy workloads, primary backup hub
- US VPS — Budget nodes for US exit and legacy workloads
Networking
- Traefik — Reverse proxy with automatic Let's Encrypt certificates
- Cloudflare — CDN, DDoS protection, and Access for zero-trust auth
- CrowdSec — Collaborative IPS; blocks malicious IPs via shared threat intelligence
- Cloudflare R2 — Image hosting, managed rather than self-hosted
Tooling
- Docker / Compose — All applications deployed uniformly
- 1Panel — Occasional visual management on select hosts
Backup
- Restic — All nodes push snapshots to the primary EU node via SFTP; mirrored off-site to OSS
- OneDrive — Critical config files synced separately
Domains
- linu.me — Blog and self-hosted services hub
- yangliu.dev / liuyang.dev — Personal blog
- ikbc.link — Experimental; home for miscellaneous deployed tools
- yli.li — URL shortener
- dly.ch — Daily check / channel; planned home for notifications and daily task summaries
- xlan.net — Planned: network utilities hub
- yangliu.cc — Parked; purpose TBD
- ******.xyz — VPS IP tracker (private)
- ******.net — Parked, redirects to blog (private)
Evaluating
Tools I'm actively testing or seriously considering adding.
- Headscale — Self-hosted Tailscale control plane — evaluating for WireGuard mesh networking between nodes to share internal resources
- Pangolin — Self-hosted tunneled reverse proxy — evaluating as a replacement for Cloudflare Access
- Podman — Daemonless container runtime — planned to replace Docker for rootless, systemd-native deployments
- SearXNG — Self-hosted meta search engine — privacy-friendly alternative to Google
- Radicale — Lightweight CalDAV/CardDAV server — evaluating to self-host calendar and contacts
- Wakapi — Self-hosted WakaTime-compatible coding time tracker
- Changedetection.io — Web page change monitoring — complements Uptime Kuma for content-level alerts
Retired
Kept for reference — lessons learned from each.
-
Paperless-ngx— Document management; scanning pipeline too cumbersome, need overestimated -
Authentik— OAuth2 / SSO; IdP overhead outweighed the benefit, reverted to standalone accounts + Cloudflare Access -
YOURLS— URL shortener; replaced by Shlink -
Wallos— Subscription tracker; covered by Actual Budget -
File Browser— Web file manager; replaced by Cloudreve
Last updated: 2026-05-08