❌

Reading view

SurfSense: a self-hosted NotebookLM alternative

SurfSense: a self-hosted NotebookLM alternative

I'm one of the maintainers, so this is self-promotion. I want honest feedback more than upvotes.

What it is

SurfSense is an open-source (Apache-2.0) NotebookLM alternative: cited Q&A over your documents, mind maps, flashcards, quizzes and podcasts, and an agent that writes Word, PDF, PowerPoint and Excel files and edits your own files as a new copy, with Word edits coming back as tracked changes. It started as a desktop app, and since 2.3.0 the same app runs as one container.

Why self-host it

NotebookLM sends every document to Google and only works with Gemini. That rules it out for contracts, client files, medical or company documents. SurfSense keeps your documents on your own server and works with any model.

The container

  • One image, ghcr.io/modsetter/surfsense, with one service and one /data volume. No Postgres, Redis or other services to run alongside it.
  • Caddy is the only thing listening. Everything else stays on the container's loopback, and it needs no Docker socket.
  • Local models run inside it on the CPU (llama.cpp, plus local OCR, embeddings and voices), or you can point it at Ollama, vLLM or any OpenAI-compatible API on your network.
  • One password, no accounts. You can set the password on first visit or with SURFSENSE_PASSWORD, or turn sign-in off when your own reverse proxy handles it.
  • HTTPS on your LAN through Caddy's own certificate authority, or with Let's Encrypt for a public domain.

Getting it running

curl -fsSL https://raw.githubusercontent.com/MODSetter/SurfSense/main/docker/scripts/install.sh | bash 

Or grab docker/surfsense/docker-compose.yml and .env.example from the repo and run docker compose up -d. It's on port 4929, and 4943 for HTTPS. Running the script again updates it.

Good to know

  • amd64 and CPU only for now. A GPU image and arm64 are planned.
  • The image is several GB: Docling, torch and about 1 GB of bundled models. Chat models download into /data at run time.
  • Docker's published ports bypass ufw, so if the server is reachable from the internet, set SURFSENSE_PASSWORD before the first start.

How we used AI in development

Most of the code is written with AI coding assistants, mainly Claude Code and some Cursor, with maintainers designing the features, reviewing every change and testing the releases. New behaviour starts with a failing test, and each feature has an architecture doc the assistants read before changing it.

Repo: https://github.com/MODSetter/SurfSense

Docs: https://surfsense.com/docs

submitted by /u/FurtiveMirth to r/selfhosted
[link] [comments]
  •  

Netbird vs. Pangolin in late 2026

Hi all,

I am currently working through a rebuild of my homelab and am re-evaluating how I access my stuff remotely. Local access is controlled via Caddy+Authelia, and I would like to keep Authelia for authentication at the very least. I had been using a mix of Cloudflare tunnels and twingate for remote access, but I would like to get that more centralized. Also, no port forwarding as I am behind CGNAT with no way to get a public IP (parent's internet at home and dorms at college). I do have a PAYG Oracle VM, 2c+12gb for hosting the coordination services.

Why even bother with a reverse proxy you may ask? Well, I would like to access some services on my iPhone, which already has a 24/7 VPN needed for another app. I would like to access services like Obsidian-Livesync, Cal/CardDAV (unless ios or gmail calendar uses something else), and potentially some other small web services. I will not be exposing any management tools, rest assured.

  • Pangolin is from what I have heard the self-hosted replacement for Cloudflare tunnels, giving you a reverse proxy with solid access controls and object-based permissions. It also has a VPN now, which is really neat!
    • How are the speeds on this?
    • For the VPN client, would it be possible to make a small TUI script for the Linux CLI? My mother would be using the VPN and I want to make it simple for her to connect (yes, she will be using Mint).
    • I like the simplicity of the central server that everything goes through, I have also heard that the rules are easier to understand here?
  • Netbird is effectively a WireGuard overlay network AFIAK, really nice for P2P connections. Network and device based rules, wireguard is fast and reliable, plus native GUI clients for all operating systems. Some people say that they are moving faster than Pangolin?
    • Mesh based VPN, having used this a little I can say that the access rules seem really complex to me, but maybe I just need to spend more time with them? Due to the mesh I will have to manage inter-device relations, Pangolin not so much.

Some other architectural questions:

  • Do I point the reverse proxy endpoints directly at my Caddy instance, or should they point at the service itself? This would make two paths for authentication, Caddy for internal/local only, and Netbird/Pangolin for public/remote.
    • If I do split them, is there a good way to manage the permissions for both using IaC like ansible?

Looking for advice and feedback!

submitted by /u/Entity_Null_07 to r/selfhosted
[link] [comments]
  •  

Looking for affordable and scalable hosting for our app

Hey everyone,

We’re a team of four currently developing an app and we’re looking into hosting options.

Since we’re still at an early stage, we don’t really know how many users we’ll have. Maybe 10–20 initially, then hopefully 100, 1,000 or more over time.

We’re looking for something affordable to start with that allows us to scale resources as the number of users and the workload increase. We understand that hosting costs will grow as well, and that’s completely fine.

Our current stack:

  • Backend: Node.js, NestJS, TypeScript
  • Database: MongoDB
  • Redis + BullMQ
  • Socket.IO
  • SeaweedFS for file storage
  • ClamAV
  • Frontend: Flutter (Web and Mobile)
  • Docker Compose

We’ve looked at providers like Hetzner and Netcup, but we’re still unsure what would make the most sense for our setup.

Would you start with everything on a single VPS or separate certain services from the beginning? Which hosting providers would you recommend, and how easy is it to scale later?

We’re comfortable with Linux and Docker, so managing a server ourselves wouldn’t be an issue.

I’d be interested to hear what server specs you’d recommend for the beginning and how hosting costs typically develop as usage grows.

submitted by /u/MrGraga to r/selfhosted
[link] [comments]
  •  

Non-*arr self-hosted recommendations?

Been self-hosting for a while and I keep seeing the same recommendations. I’m specifically looking for things that aren’t piracy-related or *arr-adjacent. No DRM removal needed. The reason I skip Audiobookshelf since used mostly with Libation or piracy. I’m not trying to fill the usual media automation niche

Here’s what I’m already running so you can skip the obvious ones:

  • Homarr (dashboard)
  • Open WebUI
  • SearXNG (mostly wired up for AI search; I still prefer Brave for normal browsing)
  • Dawarich (location history, big fan of this)
  • Immich (photos)
  • Nextcloud
  • Uptime Kuma
  • Hister (personal search index of pages and files)
  • Speedtest Tracker
  • Invidious
  • qBittorrent (not for piracy, I just seed about 7 TB of AI models and I’m currently #5 on the pirateface.co leaderboard)
  • Frigate
  • WUD
  • Grafana
  • MeTube
  • A custom Signal bot
  • Forgejo (and workers or whatever it is called)
  • Scrutiny
  • A couple of fully custom things (I had Claude build and just put behind a zero-trust policy)

I bought a a lot of storage when I first got into this and still don’t really know what to put on most of it. 16TB HDD & 1 TB SSD & 4TB SSD.

Looking for the non-obvious stuff people find useful not monitoring tools.

submitted by /u/Any-Cartographer9406 to r/selfhosted
[link] [comments]
  •  
❌