{"person_view":{"person":{"id":15140025,"name":"fanta","display_name":"fanta","banned":false,"published":"2024-10-27T00:00:00Z","actor_id":"https://social.tchncs.de/users/fanta","bio":"","local":false,"deleted":false,"bot_account":false,"instance_id":1379},"counts":{"person_id":15140025,"post_count":0,"comment_count":1},"is_admin":false},"comments":[{"comment":{"id":14230860,"creator_id":15140025,"post_id":17519046,"content":"[@Tiritibambix](https://lemmy.ml/u/Tiritibambix) is this config working in a LAN envirovment too? \nThank you and best Regards!","removed":false,"published":"2025-01-25T21:52:37Z","deleted":false,"ap_id":"https://social.tchncs.de/users/fanta/statuses/113891210502432702","local":false,"path":"0.14230860","distinguished":false,"language_id":0},"creator":{"id":15140025,"name":"fanta","display_name":"fanta","banned":false,"published":"2024-10-27T00:00:00Z","actor_id":"https://social.tchncs.de/users/fanta","bio":"","local":false,"deleted":false,"bot_account":false,"instance_id":1379},"post":{"id":17519046,"name":"Notesnook sync server: a Noob-Friendly Setup Tutorial","url":"https://github.com/streetwriters/notesnook-sync-server","body":"Hello.\n\nNotesnook is an end-to-end encrypted note taking alternative to Evernote.\nI wanted to self-host a Notesnook sync server really badly, but I'm a noob. So, I worked hard on it and came up with this noob-proof tutorial on how to set up a Notesnook sync server with local file storage, getting inspiration from the provided docker-compose in the repository.\n\nThat's my way of giving back to the self-hosting community. I hope it can help some people.\n\n***\n\n## Overview\nThis guide will help you set up a self-hosted instance of [Notesnook](https://github.com/streetwriters/notesnook-sync-server) using Docker Compose.\n\n---\n\n## Prerequisites\n- **Linux server** with Docker and Docker Compose installed.\n- **Domain name** with the ability to create subdomains.\n- Basic understanding of terminal commands.\n- Ports **5264**, **6264**, **7264**, **8264**, **9090** and **9009** available. Or you can change them but take good note of your changes.\n\n---\n\n## 1. Directory Structure Setup\nCreate the required directories:\n\n```\n# Create data directories\nmkdir -p /srv/Files/Notesnook/db\nmkdir -p /srv/Files/Notesnook/s3\nmkdir -p /srv/Files/Notesnook/setup\n```\n\n---\n\n## 2. Configuration Files\n\n### 2.1. Environment File\nCreate the `.env` file:\n\n```\ncd /srv/Files/Notesnook/setup\nnano .env\n```\n\nAdd the following content (modify the values accordingly):\n\n```\n# Instance Configuration\nINSTANCE_NAME=My Notesnook\nDISABLE_SIGNUPS=false\nNOTESNOOK_API_SECRET=your_secure_api_secret_here\n\n# SMTP Configuration\nSMTP_USERNAME=your_email@domain.com\nSMTP_PASSWORD=your_smtp_password\nSMTP_HOST=smtp.your-server.com\nSMTP_PORT=587\n\n# Public URLs (replace domain.com with your domain)\nAUTH_SERVER_PUBLIC_URL=https://auth.domain.com/\nNOTESNOOK_APP_PUBLIC_URL=https://notes.domain.com/\nMONOGRAPH_PUBLIC_URL=https://mono.domain.com/\nATTACHMENTS_SERVER_PUBLIC_URL=https://files.domain.com/\n\n# MinIO Configuration\nMINIO_ROOT_USER=admin\nMINIO_ROOT_PASSWORD=your_secure_password_here\n```\n\n---\n\n### 2.2. Docker Compose File\nCreate the `docker-compose.yml` file:\n\n```\nnano docker-compose.yml\n```\n\nPaste the following content:\n\n```\nx-server-discovery: &server-discovery\n NOTESNOOK_SERVER_PORT: 5264\n NOTESNOOK_SERVER_HOST: notesnook-server\n IDENTITY_SERVER_PORT: 8264\n IDENTITY_SERVER_HOST: identity-server\n SSE_SERVER_PORT: 7264\n SSE_SERVER_HOST: sse-server\n SELF_HOSTED: 1\n IDENTITY_SERVER_URL: ${AUTH_SERVER_PUBLIC_URL}\n NOTESNOOK_APP_HOST: ${NOTESNOOK_APP_PUBLIC_URL}\n\nx-env-files: &env-files\n - .env\n\nservices:\n validate:\n image: vandot/alpine-bash\n entrypoint: /bin/bash\n env_file: *env-files\n command:\n - -c\n - |\n required_vars=(\n \"INSTANCE_NAME\"\n \"NOTESNOOK_API_SECRET\"\n \"DISABLE_SIGNUPS\"\n \"SMTP_USERNAME\"\n \"SMTP_PASSWORD\"\n \"SMTP_HOST\"\n \"SMTP_PORT\"\n \"AUTH_SERVER_PUBLIC_URL\"\n \"NOTESNOOK_APP_PUBLIC_URL\"\n \"MONOGRAPH_PUBLIC_URL\"\n \"ATTACHMENTS_SERVER_PUBLIC_URL\"\n )\n for var in \"$${required_vars[@]}\"; do\n if [ -z \"$${!var}\" ]; then\n echo \"Error: Required environment variable $$var is not set.\"\n exit 1\n fi\n done\n echo \"All required environment variables are set.\"\n restart: \"no\"\n\n notesnook-db:\n image: mongo:7.0.12\n hostname: notesnook-db\n volumes:\n - /srv/Files/Notesnook/db:/data/db\n - /srv/Files/Notesnook/db:/data/configdb\n networks:\n - notesnook\n command: --replSet rs0 --bind_ip_all\n depends_on:\n validate:\n condition: service_completed_successfully\n healthcheck:\n test: echo 'db.runCommand(\"ping\").ok' | mongosh mongodb://localhost:27017 --quiet\n interval: 40s\n timeout: 30s\n retries: 3\n start_period: 60s\n\n initiate-rs0:\n image: mongo:7.0.12\n networks:\n - notesnook\n depends_on:\n - notesnook-db\n entrypoint: /bin/sh\n command:\n - -c\n - |\n mongosh mongodb://notesnook-db:27017 < /dev/tcp/127.0.0.1/9000' || exit 1\n interval: 40s\n timeout: 30s\n retries: 3\n start_period: 60s\n\n setup-s3:\n image: minio/mc:RELEASE.2024-07-26T13-08-44Z\n depends_on:\n - notesnook-s3\n networks:\n - notesnook\n entrypoint: /bin/bash\n env_file: *env-files\n command:\n - -c\n - |\n until mc alias set minio http://notesnook-s3:9000/ ${MINIO_ROOT_USER:-minioadmin} ${MINIO_ROOT_PASSWORD:-minioadmin}; do\n sleep 1;\n done;\n mc mb minio/attachments -p\n\n identity-server:\n image: streetwriters/identity:latest\n ports:\n - 8264:8264\n networks:\n - notesnook\n env_file: *env-files\n depends_on:\n - notesnook-db\n healthcheck:\n test: wget --tries=1 -nv -q http://localhost:8264/health -O- || exit 1\n interval: 40s\n timeout: 30s\n retries: 3\n start_period: 60s\n environment:\n <<: *server-discovery\n MONGODB_CONNECTION_STRING: mongodb://notesnook-db:27017/identity?replSet=rs0\n MONGODB_DATABASE_NAME: identity\n\n notesnook-server:\n image: streetwriters/notesnook-sync:latest\n ports:\n - 5264:5264\n networks:\n - notesnook\n env_file: *env-files\n depends_on:\n - notesnook-s3\n - setup-s3\n - identity-server\n healthcheck:\n test: wget --tries=1 -nv -q http://localhost:5264/health -O- || exit 1\n interval: 40s\n timeout: 30s\n retries: 3\n start_period: 60s\n environment:\n <<: *server-discovery\n MONGODB_CONNECTION_STRING: mongodb://notesnook-db:27017/?replSet=rs0\n MONGODB_DATABASE_NAME: notesnook\n S3_INTERNAL_SERVICE_URL: \"http://notesnook-s3:9000/\"\n S3_INTERNAL_BUCKET_NAME: \"attachments\"\n S3_ACCESS_KEY_ID: \"${MINIO_ROOT_USER:-minioadmin}\"\n S3_ACCESS_KEY: \"${MINIO_ROOT_PASSWORD:-minioadmin}\"\n S3_SERVICE_URL: \"${ATTACHMENTS_SERVER_PUBLIC_URL}\"\n S3_REGION: \"us-east-1\"\n S3_BUCKET_NAME: \"attachments\"\n\n sse-server:\n image: streetwriters/sse:latest\n ports:\n - 7264:7264\n env_file: *env-files\n depends_on:\n - identity-server\n - notesnook-server\n networks:\n - notesnook\n healthcheck:\n test: wget --tries=1 -nv -q http://localhost:7264/health -O- || exit 1\n interval: 40s\n timeout: 30s\n retries: 3\n start_period: 60s\n environment:\n <<: *server-discovery\n\n monograph-server:\n image: streetwriters/monograph:latest\n ports:\n - 6264:3000\n env_file: *env-files\n depends_on:\n - notesnook-server\n networks:\n - notesnook\n healthcheck:\n test: wget --tries=1 -nv -q http://localhost:3000/api/health -O- || exit 1\n interval: 40s\n timeout: 30s\n retries: 3\n start_period: 60s\n environment:\n <<: *server-discovery\n API_HOST: http://notesnook-server:5264/\n PUBLIC_URL: ${MONOGRAPH_PUBLIC_URL}\n\nnetworks:\n notesnook:\n```\n\n---\n\n## 3. Docker Images Preparation\nPull all required images to avoid timeout issues:\n\n```\ncd /srv/Files/Notesnook/setup\ndocker pull mongo:7.0.12\ndocker pull minio/minio:RELEASE.2024-07-29T22-14-52Z\ndocker pull streetwriters/identity:latest\ndocker pull streetwriters/notesnook-sync:latest\ndocker pull streetwriters/sse:latest\ndocker pull streetwriters/monograph:latest\ndocker pull vandot/alpine-bash\n```\nor just\n\n```\ncd /srv/Files/Notesnook/setup\ndocker compose pull\n```\n\n---\n\n## 4. Deployment\nStart the services:\n\n```\ncd /srv/Files/Notesnook/setup\ndocker compose up -d\n```\n\n---\n\n## 5. Service Verification\n\n### 5.1. Check Container Status\n\n```\ndocker compose ps\n```\n\nExpected status:\n- **Running containers**:\n - `notesnook-db`\n - `notesnook-s3`\n - `identity-server`\n - `notesnook-server`\n - `sse-server`\n - `monograph-server`\n- **Completed containers** (should show `Exit 0`):\n - `validate`\n - `initiate-rs0`\n - `setup-s3`\n\n### 5.2. Check Logs\n\n```\ndocker compose logs\n```\n\n### 5.3. Test MinIO Access\nVisit: `http://your-server:9009/`\n\n---\n\n## 6. Reverse Proxy Configuration with Nginx and SSL\n\n**Enable WebSockets Support for:**\nnotes.domain.com (port 5264) - For real-time synchronization \nevents.domain.com (port 7264) - For real-time notifications \n\n**Enable Cache Assets for:** mono.domain.com (port 6264) - For optimizing public notes loading\n\n### Step 1: Install Certbot\n```bash\nsudo apt-get update\nsudo apt-get install certbot python3-certbot-nginx\n```\n\n### Step 2: Obtain SSL Certificates\n```bash\nsudo certbot --nginx -d auth.domain.com -d notes.domain.com -d events.domain.com -d mono.domain.com\n```\n\n### Step 3: Modify Nginx Configuration\nUse the following example configurations for each subdomain:\n\n```nginx\n# Auth Server - Basic (no cache/websocket needed)\nserver {\n listen 80;\n server_name auth.domain.com;\n return 301 https://$host$request_uri;\n}\n\nserver {\n listen 443 ssl;\n server_name auth.domain.com;\n\n ssl_certificate /etc/letsencrypt/live/auth.domain.com/fullchain.pem;\n ssl_certificate_key /etc/letsencrypt/live/auth.domain.com/privkey.pem;\n include /etc/letsencrypt/options-ssl-nginx.conf;\n ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;\n\n location / {\n proxy_pass http://localhost:8264/;\n proxy_set_header Host $host;\n proxy_set_header X-Real-IP $remote_addr;\n }\n}\n\n# Notes Server - With WebSocket\nserver {\n listen 80;\n server_name notes.domain.com;\n return 301 https://$host$request_uri;\n}\n\nserver {\n listen 443 ssl;\n server_name notes.domain.com;\n\n ssl_certificate /etc/letsencrypt/live/notes.domain.com/fullchain.pem;\n ssl_certificate_key /etc/letsencrypt/live/notes.domain.com/privkey.pem;\n include /etc/letsencrypt/options-ssl-nginx.conf;\n ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;\n\n location / {\n proxy_pass http://localhost:5264/;\n proxy_http_version 1.1;\n proxy_set_header Upgrade $http_upgrade;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header Host $host;\n proxy_read_timeout 3600;\n proxy_send_timeout 3600;\n }\n}\n\n# Events Server - With WebSocket\nserver {\n listen 80;\n server_name events.domain.com;\n return 301 https://$host$request_uri;\n}\n\nserver {\n listen 443 ssl;\n server_name events.domain.com;\n\n ssl_certificate /etc/letsencrypt/live/events.domain.com/fullchain.pem;\n ssl_certificate_key /etc/letsencrypt/live/events.domain.com/privkey.pem;\n include /etc/letsencrypt/options-ssl-nginx.conf;\n ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;\n\n location / {\n proxy_pass http://localhost:7264/;\n proxy_http_version 1.1;\n proxy_set_header Upgrade $http_upgrade;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header Host $host;\n proxy_read_timeout 3600;\n proxy_send_timeout 3600;\n }\n}\n\n# Monograph Server - With Cache\nserver {\n listen 80;\n server_name mono.domain.com;\n return 301 https://$host$request_uri;\n}\n\nserver {\n listen 443 ssl;\n server_name mono.domain.com;\n\n ssl_certificate /etc/letsencrypt/live/mono.domain.com/fullchain.pem;\n ssl_certificate_key /etc/letsencrypt/live/mono.domain.com/privkey.pem;\n include /etc/letsencrypt/options-ssl-nginx.conf;\n ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;\n\n location / {\n proxy_pass http://localhost:6264/;\n proxy_cache_use_stale error timeout http_500 http_502 http_503 http_504;\n proxy_cache_valid 200 60m;\n add_header X-Cache-Status $upstream_cache_status;\n expires 1h;\n add_header Cache-Control \"public, no-transform\";\n }\n}\n```\n---\n\n## 7. Useful Commands\n\n### Service Management\n\n```\n# View real-time logs\ndocker compose logs -f\n\n# View logs for specific service\ndocker compose logs [service-name]\n\n# Restart specific service\ndocker compose restart [service-name]\n\n# Stop all services\ndocker compose down\n\n# Update services\ndocker compose pull\ndocker compose up -d\n```\n\n---\n\n## 8. Maintenance\n\n### 8.1. Backup\nRegularly backup these directories:\n- `/srv/Files/Notesnook/db/` (MongoDB data)\n- `/srv/Files/Notesnook/s3/` (MinIO data)\n- `/srv/Files/Notesnook/setup/.env` (Configuration)\n\n### 8.2. Updates\nTo update all services:\n\n```\ncd /srv/Files/Notesnook/setup\ndocker compose pull\ndocker compose down\ndocker compose up -d\n```\n\n---\n\n## 9. Troubleshooting\n\n### Common Issues:\n\n#### Service won't start\n- Check logs: `docker compose logs [service-name]`\n- Verify port availability.\n- Check directory permissions.\n- Verify environment variables.\n\n#### Database Connection Issues\n- Ensure MongoDB replica set is initialized.\n- Check MongoDB logs: `docker compose logs notesnook-db`.\n\n#### Storage Issues\n- Verify MinIO credentials.\n- Check MinIO logs: `docker compose logs notesnook-s3`.\n\n#### Email Not Working\n- Verify SMTP settings in `.env`.\n- Check identity-server logs.\n\n---\n\n## Security Notes\n- Change default passwords in `.env`.\n- Use strong passwords for MinIO and API secret.\n- Keep your `.env` file secure.\n- Regularly update all services.\n- Enable HTTPS on your reverse proxy.\n- Consider implementing `fail2ban`.\n- Regularly monitor logs for suspicious activity.\n\n---\n\n## Support\nIf you encounter issues:\n- Check the logs.\n- Visit the [Notesnook GitHub repository](https://github.com/streetwriters/notesnook).\n- Join the [Notesnook Discord](https://discord.gg/5davZnhw3V) for support.","creator_id":1750,"community_id":11,"removed":false,"locked":false,"published":"2025-01-20T19:23:51.206940Z","updated":"2025-01-22T09:09:22.916684Z","deleted":false,"nsfw":false,"embed_title":"GitHub - streetwriters/notesnook-sync-server: Sync server for Notesnook (self-hosting in alpha)","embed_description":"Sync server for Notesnook (self-hosting in alpha). Contribute to streetwriters/notesnook-sync-server development by creating an account on GitHub.","thumbnail_url":"https://lemdro.id/pictrs/image/2e484465-fae9-4cc6-bd24-83ed7b1806a4.png","ap_id":"https://lemmy.ml/post/25006407","local":false,"language_id":37,"featured_community":false,"featured_local":false,"url_content_type":"text/html; charset=utf-8"},"community":{"id":11,"name":"selfhosted","title":"Selfhosted","description":"A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.\n\nRules:\n1) Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.\n2) No spam posting.\n3) Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.\n\n4) Don't duplicate the full text of your blog or github here. Just post the link for folks to click.\n5) Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n6) No trolling.\n\n\nResources: \n* [selfh.st](https://selfh.st/) Newsletter and index of selfhosted software and apps\n* [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n* [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n* [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show/)\n\n> Any issues on the community? Report it using the report flag.\n\n> Questions? DM the mods!","removed":false,"published":"2023-06-05T11:23:43.291224Z","updated":"2024-10-23T06:42:07.331884Z","deleted":false,"nsfw":false,"actor_id":"https://lemmy.world/c/selfhosted","local":false,"icon":"https://lemmy.world/pictrs/image/8286e071-7449-4413-a084-1eb5242e2cf4.png","banner":"https://lemmy.world/pictrs/image/9111ecb9-344c-4836-bbda-a87c27f3bdb9.jpeg","hidden":false,"posting_restricted_to_mods":false,"instance_id":24,"visibility":"Public"},"counts":{"comment_id":14230860,"score":0,"upvotes":0,"downvotes":0,"published":"2025-01-25T21:52:37Z","child_count":1},"creator_banned_from_community":false,"banned_from_community":false,"creator_is_moderator":false,"creator_is_admin":false,"subscribed":"NotSubscribed","saved":false,"creator_blocked":false}],"posts":[],"moderates":[]}