My Stack

Self-hosted services I run, grouped by region. Updated once or twice a year when I migrate things.

Europe

Two nodes in Finland and Germany. Most daily-use services run here.

• Miniflux — Lightweight RSS reader
• RSSHub — RSS feed generator
• Audiobookshelf — Audiobook & podcast server
• Actual Budget — Personal budgeting, local-first
• Karakeep — Read-it-later
• Linkwarden — Bookmark archiving with snapshots
• n8n — Workflow automation
• Stirling PDF — PDF merge, split, OCR
• tldraw — Whiteboard for precise diagrams
• Excalidraw — Whiteboard for hand-drawn sketches
• Uptime Kuma — Service monitoring
• Glance — Personal dashboard
• OpenClaw — Personal assistant
• Cloudreve — Cloud storage / netdisk
• Shrink — URL shortener
• Vaultwarden — Password manager
• Apprise — Notification gateway
• ntfy — Push notification server
• Memos — Lightweight notes / microblog

US West

Budget nodes in Los Angeles. Services that benefit from a US exit, plus legacy.

• Forgejo — Self-hosted Git
• Nezha — Multi-node monitoring
• Umami — Privacy-friendly web analytics
• sub2api — Subscription conversion proxy
• Typecho — Legacy blog, migrated to Cloudflare Pages but still running

---

Infrastructure

Hosting

• EU VPS — Best price-to-performance for CPU-heavy workloads, primary backup hub
• US VPS — Budget nodes for US exit and legacy workloads

Networking

• Traefik — Reverse proxy with automatic Let's Encrypt certificates
• Cloudflare — CDN, DDoS protection, and Access for zero-trust auth
• CrowdSec — Collaborative IPS; blocks malicious IPs via shared threat intelligence
• Cloudflare R2 — Image hosting, managed rather than self-hosted

Tooling

• Docker / Compose — All applications deployed uniformly
• 1Panel — Occasional visual management on select hosts

Backup

• Restic — All nodes push snapshots to the primary EU node via SFTP; mirrored off-site to OSS
• OneDrive — Critical config files synced separately

Domains

• linu.me — Blog and self-hosted services hub
• yangliu.dev / liuyang.dev — Personal blog
• ikbc.link — Experimental; home for miscellaneous deployed tools
• yli.li — URL shortener
• dly.ch — Daily check / channel; planned home for notifications and daily task summaries
• xlan.net — Planned: network utilities hub
• yangliu.cc — Parked; purpose TBD
• ******.xyz — VPS IP tracker (private)
• ******.net — Parked, redirects to blog (private)

---

Evaluating

Tools I'm actively testing or seriously considering adding.

• Headscale — Self-hosted Tailscale control plane — evaluating for WireGuard mesh networking between nodes to share internal resources
• Pangolin — Self-hosted tunneled reverse proxy — evaluating as a replacement for Cloudflare Access
• Podman — Daemonless container runtime — planned to replace Docker for rootless, systemd-native deployments
• SearXNG — Self-hosted meta search engine — privacy-friendly alternative to Google
• Radicale — Lightweight CalDAV/CardDAV server — evaluating to self-host calendar and contacts
• Wakapi — Self-hosted WakaTime-compatible coding time tracker
• Changedetection.io — Web page change monitoring — complements Uptime Kuma for content-level alerts

Retired

Kept for reference — lessons learned from each.

• Paperless-ngx — Document management; scanning pipeline too cumbersome, need overestimated
• Authentik — OAuth2 / SSO; IdP overhead outweighed the benefit, reverted to standalone accounts + Cloudflare Access
• YOURLS — URL shortener; replaced by Shlink
• Wallos — Subscription tracker; covered by Actual Budget
• File Browser — Web file manager; replaced by Cloudreve

Last updated: 2026-05-08