> For the complete documentation index, see [llms.txt](https://redhair.gitbook.io/redhair-guides/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://redhair.gitbook.io/redhair-guides/selfhosting-guide-gui-version.md).

# Selfhosting Guide – GUI Version

## 1 - Introduction <a href="#introduction" id="introduction"></a>

First of all, good job on taking your first step to self-hosting. I know this can be extremely overwhelming for beginners, but I want you to know that it is okay and we have all been there. I have made sure to make this guide as easy to follow as possible and used software and services that would eliminate the most annoying and difficult challenges that first time selfhosters face. While I am aware the title of this guide says GUI version guide, unfortunately, some initial steps still need to be done via terminal. It is only an one-time step and I have made sure it is as short as possible.

***

## 2 - Prerequisites <a href="#prerequisites" id="prerequisites"></a>

### **2.1 A VPS with terminal access.**

Please use [this guide](https://guides.viren070.me/selfhosting/oracle) to get a free VPS and complete all steps 1–12 . Only use my guide after reaching step 12. In most regions, you need to upgrade to PAYG tier to get a free VPS, If you still can’t get a free oracle VPS, you can purchase any other VPS and the steps would be similar (in fact the setup would be way easier than oracle). If your free oracle VPS doesn’t have a public IP, follow [this video](https://www.youtube.com/watch?v=ISEP6SIrEVE\&t=279s) and follow the instructions in the chapter **"VCN and Subnet setup"**.

If you are purchasing a VPS from elsewhere, I recommend a minimum of **4 GB RAM and 2 core vCPU**.

***

### **2.2 A paid domain.**

You can easily get a domain for less than 1$ a year by signing up for a 6-9 digit .xyz domain. For instance, you can try to get a domain for your birthday so it’s easy to remember, so if you were born on 12<sup>th</sup> September 1995, you can look for `120995.xyz` or `12091995.xyz`. It won’t be fancy, but it’s cheap and memorable to you.&#x20;

![Domain price example](/files/43fb65d6818bf73ada6aac91261632afdc9aaeb7)

> ⚠️ **MAKE SURE TO CHECK THE RENEWAL PRICE.** Ensure you are locked in at the same price for renewal.

> ❌ Free domains **cannot** be used for the purpose of this guide&#x20;

Some popular domain registrars:

* <https://domains.cloudflare.com/>
* [https://www.spaceship.com](https://www.spaceship.com/)
* <https://porkbun.com/>

***

### **2.3 Connect your domain to your VPS.**

Once you have both a VPS and domain, you need to connect it to each other. This is done in the website you bought your domain from.

{% tabs %}
{% tab title="Spaceship" %}
Go to `Launchpad → Advanced DNS → click your domain → Add Record → Type: A → Host: * → Value: your VPS public IP → TTL: 1 min → Add`
{% endtab %}

{% tab title="Cloudflare" %}
Go to `Dashboard → Domains → click your domain → DNS → Records → Create A record → Name: * → IPv4: your VPS public IP → Proxy: OFF → Save`
{% endtab %}
{% endtabs %}

![Spaceship screenshot](/files/ee658a5e9f5aac2875c0d65c2bde91db5e6aeb3f) ![Cloudflare screenshot](/files/f4bee8bcedd2f4439877a680e709c15e982a74ad)

***

## 3 - Let's Get Started <a href="#lets-get-started" id="lets-get-started"></a>

If you followed Viren's oracle VPS setup guide through step 12, you should see something like the following when you SSH into your VPS for the first time.

![First login view](/files/9c8b57a83a3ae567bec085892d066bf5c684001e)

***

### 3.1 Updating the System <a href="#updating-the-system" id="updating-the-system"></a>

Lets first take care of some housekeeping stuff and update the system. Run the following command in the terminal:

```bash
sudo apt update && sudo apt upgrade
```

Wait for it to download the updates and you will see something like this:

![apt update prompt](/files/0d02483d6070ec85362d863e86c64a41b5edd0df)

Enter `Y` on your keyboard and wait for the installation to finish. Once it finishes, the progress bar disappears and you can type new commands again.

***

### 3.2 Opening Ports in Oracle Web Console <a href="#opening-ports-in-oracle-web-console" id="opening-ports-in-oracle-web-console"></a>

Now before we proceed, we need to open some necessary ports to be able to access services hosted on your vps.&#x20;

Go to your Oracle console:

`Top left menu → Networking → Virtual Cloud Networks → click your VCN → Subnets → click the default subnet → Security tab → default security list → Security Rules`

<img src="/files/c93f6b770cc9b2e39866d279fdda1826439b4b15" alt="Networking -> VCN" width="375">

![Your VCN](/files/0778e15a1e7d42e24caf2f65d05f859e2c32fcf2)

![Subnets section inside your VCN](/files/600869f39d92b7bcc67173556f982949c03bd581)

![Your default security rules](/files/d7d8626e64b5d91d983abac5af69d4e3570c15e7)

Here, we are going to add **ports 443 (HTTPS)** and **port 80 (HTTP)** for proper functioning of our reverse proxy. Click add Ingress rule and add the following

![Ingress rule for HTTPS](/files/58b96c0ced09fa24ace9d2a77e2ba661e7a4d47b) ![Ingress rule for HTTP](/files/0da45a3809f6b8778271793c1d9fa23bcff11901)

Click **Add Ingress Rules** at the bottom right. If done correctly, the ingress rules will appear as below:

![Both HTTPS and HTTP Ingress rule added](/files/e91c0289551f4188583bffd726acd3e9f4f5f90d)

> 💡 **Optional:** You can also add port `51820` now if you plan to host a WireGuard VPN. It is not necessary, you can always come back and add it later.

***

## 4 - Reverse Proxy - Pangolin

### 4.1 Installing Pangolin <a href="#installing-pangolin-reverse-proxy" id="installing-pangolin-reverse-proxy"></a>

Back in your terminal, run the following script:

```bash
curl -fsSL https://static.pangolin.net/get-installer.sh | bash
```

Once it says `ready to use`, run the installer:

```bash
sudo ./installer
```

When it asks for a directory, enter `./pangolin`, when it asks for confirmation, submit yes by pressing `Y` button on your keyboard. For you, it would say `/home/ubuntu/pangolin`. Which is fine. I just changed the username, so don’t mind that.

<div><img src="/files/127e155eb2f904f1b7b74ce05b9aced2cd29ef6e" alt="Setting Pangolin Directory" width="375"> <img src="/files/d32bc58435d66ca67c7aebc23dc7ae92a5423522" alt="Confirmation of Directory" width="375"></div>

When asked to Install Enterprise version, Say yes. It is free and will come handy in the future.&#x20;

![Enterprise Edition confirmation](/files/b2dccb39998428a4cb0c7c6ad0227aac2d973d3a)

For Postgress, We are going to say No. We don't need it for our use case. Click `N`

<img src="/files/db715838c8c9264f6dd22c48e68628c25b6cc58c" alt="Postgress confirmation" width="375">

Enter the domain when asked for it.&#x20;

<img src="/files/b57ffae5728986855d9fa97bc7784e95702eaffd" alt="Installer directory prompt" width="375">

⚠️ **PLEASE ENTER YOUR CORRECT DOMAIN.** The `123456.xyz` shown in screenshots is only an example.

For Pangolin Domain, just click `enter` button on your keyboard. The default `pangolin.domain.xyz` is fine.

![Pangolin domain entry prompt](/files/98d1c1b87c7b29adbe79169c68024eb87a15f346)

For email, enter your personal/spare **VALID** email address here.

<img src="/files/83ce90aa5c2606f9c299f617b7fb96d035a7b3e6" alt="Email prompt" width="375">

Enter `Y` for Gerbil. Enter `N` for SMTP.

![Gerbil prompt](/files/8888355719da793fb07f9b91092261497e374cc1) ![SMTP prompt](/files/cf5d3bc3eb0a3376149cc95e69de68d05fa232c5)

For IPV6 prompt, enter `Y` if you have one, if you are unsure what that means, just enter `N`.

<img src="/files/e9eb6bd07560c69f412fa3583ff27bc87c684bdc" alt="IPv6 prompt" width="375">

Enter `Y` for geoblock functionality.

![Geo-block prompt](/files/420a35501b785776531f227b6a7524281c482870)

For the choice of docker vs podman, We are going to use docker, by default It is docker, so just press `Enter` . It will ask confirmation to start the containers, and then to install Docker, click `Y`  for both.

![Docker vs Podman](/files/6093fa2a2460ae38287c9ec89afa899293234b90) ![Starting containers](/files/1594a5214fc8c5273cfeaeb686539de310eec4d9) ![Installing Docker](/files/6ce6aba9623cf233879d25694ceee3fcf304afe2)

Once the installation is done, it should now give you a setup token, look for it!

<img src="/files/d0685f4faf38a21cc8dac140ca096f5b9a770087" alt="Pangolin Setup token" width="375">

***

### 4.2 Setting Up Pangolin via GUI <a href="#setting-up-pangolin-via-gui" id="setting-up-pangolin-via-gui"></a>

Open your browser and go to `pangolin.yourdomain.xyz`. You should see the following

<img src="/files/3a0174133dca788c4491d4c2142e3622f1fa3efb" alt="Setup token" width="188">

<details>

<summary>Can't access the website?</summary>

1. Ensure the prerequisite steps were done properly by pointing your domain to the VPS IP.
2. Make sure your ports 443 and 80 are open.
3. Check that you entered your correct domain during installation (re-run the install script if needed).

</details>

Copy and paste the setup token here and create an admin account. Once done, login using the details. Proceed to create an organization using any name, it doesn’t matter. It would then ask you to create a new site.&#x20;

When asked to create a new site, click **Local**, name it "oracle vps" (or anything you like), and click **Create Site**.

![Creating organization](/files/6ade61a3f13955577dd54db9987cd3c2324f6dda) ![Creating site](/files/3fccdc2becd68dfa8297cd2a60e4b74290d9ec05)

You have now finished setting up your GUI-based reverse proxy. On the left sidebar, click **Sites** to confirm it was created.

![Site creation confirmation](/files/da71ac5e1c3bc9a64d72f27017034ce2add07a98)

***

## 5 - Docker Manager - Dockhand

### 5.1 Deploying Dockhand <a href="#deploying-dockhand" id="deploying-dockhand"></a>

Run the following script in your terminal:

```bash
curl -fsSL https://raw.githubusercontent.com/Redhair777/dockhand-install-script/main/install.sh | sudo bash
```

All containers should be created smoothly.

![Dockhand installation confirmation](/files/5c0a1baa9ff477424d113c4b695dd913fefd9d4d)

Now go back to `pangolin.yourdomain.xyz`. Click on the ‘Public’ under ‘ Resources’.

![Pangolin Sidebar](/files/0cb245b395dd2d30132ce4e0f520bf3a7b4f52c9) ![Empty Resource Screen](/files/836864342ff10d47e92ff90da60d8242f91b7607)

Click ***Add Resource***, Enter **dockhand** as both the name and subdomain. Scroll down and click **Add Target**, then enter:

* **Host:** `dockhand`
* **Port:** `3000`

<img src="/files/143b174cc6922ea6c01697c8699fff7347406b50" alt="Creating Dockhand Resource" width="375">

![Add Target](/files/209e94ebaf264005d00deda68655ef919f99a32f) ![Dockhand Target](/files/c42db03b01cfc87005e5341c72cb638d2c846568)

***

### 5.2 Setting Up Dockhand in GUI <a href="#setting-up-dockhand-in-gui" id="setting-up-dockhand-in-gui"></a>

Now go to `dockhand.yourdomain.xyz`. You should be welcomed with the following page.&#x20;

Click **Got it** and then **Go to Settings**.

<div><img src="/files/c632f0593b7010d223448c4e88d859e1d0933c0f" alt="Dockhand First time screen" width="375"> <img src="/files/f00763170be122c81bc76cee8afbbcde43dfc2f4" alt="Dockhand Environments" width="375"></div>

Click **Add Environment**.

Configure the environment as follows:

* **Name:** `Oracle VPS` (or anything you like)
* **Connection Type:** `Direct Connection`
* **Host:** `socket-proxy`
* **Port:** `2375`

<div><img src="/files/f16a5f5f8d0911df4a59ece95128b6e616016ad8" alt="Add Environment" width="375"> <img src="/files/e87e0a8d343a0e120c93654ea266337182fc8a58" alt="Environment settings" width="375"></div>

Click **Test Connection,** you should see "Connected" appear in the bottom right.

Under the **Update** section, enable:

* `Scheduled update check`
* `Automatic image pruning`

Set your time zone, then click **Add**.

![Scheduled Update Check](/files/b2bcaa810096dc920e0460f7706a7870c4ac8770) ![Automatic Image Pruning](/files/4459dc2f61fc3d0144b54382060a87ab98dc347c)

Click the WiFi button to check the connection, The status should show as **Connected**.

![Connection test success](/files/63e680bcf9f0840ad438c62d92c41198545ee897)

Click **Containers** on the left and you can now see all the services you are running.

![List of Containers](/files/8644e0dae493bc920fe84a13c7b630a2a9a975c0)

> If you have reached this point. Congratulations! Pat yourself on the back, you have now finished setting up the hardest parts of selfhosting and everything from now on is only easier and can be done fully via GUI in a web browser, feel free to close all your terminal.

***

## 6 - AIOstreams

### 6.1 Deploying AIOstreams <a href="#deploying-aiostreams" id="deploying-aiostreams"></a>

First, Let's create a dedicated network for all AIOstreams-related services.&#x20;

`Dockhand GUI → Networks → +Create → Name: aiostreams → Create Network`

![Containers view](/files/16f769ab957b990ada0b8bd2a00b7bc9782e4599) ![Connection status](/files/f108f8e452ee6965d5eb77116d3a9dac3748dfe9)

Now Let's create the stack:

`Dockhand → Stacks → +Create`

Give the stack the name **aiostreams**. In the left compose file section, paste the following:

```yaml
services:
  aiostreams:
    image: ghcr.io/viren070/aiostreams:latest
    container_name: aiostreams
    restart: unless-stopped
    expose:
      - 3000
    env_file:
      - .env
    volumes:
      - ./data:/app/data
    networks:
      - pangolin_frontend
      - aiostreams

networks:
  pangolin_frontend:
    external: true
  aiostreams:
    external: true
```

In the **right side (environment variables)**, add the following env values:

<img src="/files/9b63b1572728e08b29f444ac8fd3244d67407fe3" alt="AIOstreams env" width="375">

Replace the `https.//aiostreams.domain.xyz` value with your actual domain. Change `user:pass` to your a username and password of your choice.

For **secret key** you need to generate one. Here are two ways to do it, choose whichever is simple for you:

{% tabs %}
{% tab title="Option 1" %}
Click **Shell** in the Dockhand sidebar, choose the `pangolin` container from the dropdown, and run:

```bash
openssl rand -hex 32
```

{% endtab %}

{% tab title="Option 2" %}
Use <https://codebeautify.org/generate-random-hexadecimal-numbers> with the Length set to **64**.
{% endtab %}
{% endtabs %}

![Option 1 via Dockhand](/files/9b546d0311b2a0f3b4f99652158b5ef9a6b7ad30) ![Option 2 via External Website](/files/2f44738e7fb9ed65f0d422b6f62371006d654a34)

Regardless of what method you choose, just copy the hex string and paste it into the `SECRET_KEY` env variable.

Click **Save and Deploy**.

***

### 6.2 Setting Up Auth and Reverse Proxy for AIOstreams <a href="#setting-up-auth-and-reverse-proxy-for-aiostreams" id="setting-up-auth-and-reverse-proxy-for-aiostreams"></a>

Now time to go to pangolin and tell it to put aiostreams behind this domain `aiostreams.domain.xyz`. See how in the compose file on the left we have `container_name: aiostreams` and `expose: 3000` , this means that the app is available at `aiostreams:3000` to pangolin.

`Pangolin Dashbaord → Resources → Public (in the left sidebar) → Add Resource`

Add `aiostreams` resource as shown below and click **Create Resource**.

<img src="/files/e3b340d69e7782e32d46685127b1976cd598202b" alt="AIOstreams Pangolin resource" width="375">

AIOstreams should now be accessible at `aiostreams.yourdomain.xyz`.

Let's test it, go add **Comet** from the marketplace, save the config, and click **Install to Stremio**.

![Adding Comet](/files/15e3a245604b87d81a60f65756dee892320e1336)

<img src="/files/e1d1bca80b7ae1845563f6200564f8b1a63af4e6" alt="Failed manifest error" width="375">

If you get the failed to get manifest, **DO NOT PANIC**. This is expected and intentional. I purposefully made this error because I want **YOU TO LEARN** why this is happening. To understand why this is happening, copy the manifest URL in the save section of aiostreams instead of clicking install to stremio and paste it in a browser in **INCOGNITO** mode. You should get pangolin’s auth screen.

<img src="/files/08f4423271e01669fc3c6ef05d96446c23480530" alt="Pangolin Authentication Screen" width="188">

This is why Stremio can’t install it. It is because Pangolin is blocking the installation. You can also confirm this by going to pangolin dashboard.

`Pangolin → Organisation → HTTP Requests`

![HTTP requests log](/files/7e63637f08d2a449814af88f2e4aebf8ab22b5a2)

> 💡 If you don't see the HTTP Requests section, you need to upgrade to Pangolin Enterprise Edition, which is **free for personal use.** Please check FAQ section on how to activate it.

Filter requests by resource and choose **aiostreams**:

![Blocked request details](/files/581ee38ed7e6554419755bf8cf0701cf860aeafc)

You'll see that Stremio tried to access `aiostreams.yourdomain.xyz/stremio/…` and was denied. Let's fix that.

Go to `Pangolin → Public → Resources → Edit aiostreams → Access Rules`

Add a rule to bypass auth for the path `stremio/*` like shown below.

![Blocked request details](/files/4f42a81248eced97aba1deecc054ac9451d3bca7)

Click **Save Settings**. This setting means that anyone trying to access a URL that starts with `aiostreams.domain.xyz/stremio/…` will no longer be blocked by pangolin. To confirm it, try pasting your manifest URL in incognito again and it should work. Now try installing it to stremio and it should successfully install. However, this alone is not enough for proper functioning of aiostreams.  Since you may use proxy features. For proxy streams to work properly you need to also add rule to bypass `api/v1/proxy/*` . I also blocked all config pages by blocking `*/configure/*` and by setting it at the highest priority. This will ensure anyone trying to create a config needs to login to pangolin ( for friends and family you can create a temporary password for pangolin).

![Aiostreams Access rule](https://i.postimg.cc/RhcLKfPL/Screenshot-2026-06-24-125837.png)

### 6.3 Understanding Pangolin's Security

You may need to add more rules depending on your use case. The way to find what's being blocked is, go to `Pangolin → Organisation → HTTP Request Logs`. Identify your own requests by IP and country, then add bypass rules for any paths being blocked for your IP.

However, Do not allow random requests! For example, A bot from the Netherlands is probing my AIOstreams and is being denied, I do NOT want to accidentally allow it. Ensure whatever path or IP you allow is relevant to you. Do not let any malicious requests through.

![A bot scanning Example](/files/16bef3c5b1bfc8118745b76f578b382784c80e31)

Here is an example of how I am adding a **country-based rule** to restrict access to only my country and stop the activity of foreign bots.&#x20;

![Country based access rules](https://i.postimg.cc/9z5yfMCD/Screenshot-2026-06-24-125613.png)

> ⚠️ **Do not rely solely on geo-blocks.** There can be bots or bad actors from your own country. For safe usage, **block all access by default**, then **only allow specific paths** (like `stremio/*`) on top of geo-blocks.

I have purposefully only gone through only the basic configuration of aiostreams since it’s a highly customizable and configurable tool and there already exists documentation for it. If you are looking for specific options, you can check out the  [official documentation](https://docs.aiostreams.viren070.me/). The AIOstreams Discord is also a great place to ask for help. **I have also intentionally NOT added all possible access rules for AIOstreams to function properly. I want YOU to learn!! So look at HTTP logs and add access rules to make it work for your use case.**

> If someone tells you to "add something to your env", go to `Dockhand → Stacks → aiostreams` and add/change what you need on the right side. On the latest versions, you can do most things directly via the AIOstreams admin panel.

***

## 7 - AIOmetadata <a href="#deploying-aiometadata" id="deploying-aiometadata"></a>

### 7.1 Deploying AIOmetadata

Once again, Let's create a dedicated network for AIOmetadata:

`Dockhand → Networks → Create New → Name: aiometadata`

<img src="/files/3d09a021bbb03208a7b10a336167fc36c9f66c74" alt="Geo-block config" width="375">

This allows Redis and other future containers to communicate with AIOmetadata.

Now create the stack:

`Dockhand → Stacks → Create`

Paste the following compose on the left:

```yaml
services:
  aiometadata:
    image: ghcr.io/cedya77/aiometadata:latest
    container_name: aiometadata
    restart: unless-stopped
    expose:
      - 3232
    env_file:
      - .env
    volumes:
      - ./aiometadata/data:/app/addon/data
    networks:
      - pangolin_frontend
      - aiometadata
    depends_on:
      aiometadata_redis:
        condition: service_healthy
    tty: true
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3232/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  aiometadata_redis:
    image: redis:latest
    container_name: aiometadata_redis
    restart: unless-stopped
    networks:
      - aiometadata
    expose:
      - 6379
    volumes:
      - ./aiometadata/cache:/data
    command: redis-server --appendonly yes --save 3600 1
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

networks:
  pangolin_frontend:
    external: true
  aiometadata:
    external: true
```

<img src="/files/19a551519ca62c219e8c5cda98922388f9b74a96" alt="AIOmetadata env" width="375">

Click **Deploy** and AIOmetadata should be ready to use.

And as always, go to Pangolin:

`Pangolin → Public → Resources → Add Resource → aiometadata → Create Resource`

<img src="/files/ce4050c81c588ef7769110e3e1850f6306a91e11" alt="AIOmetadata compose filled" width="375">

AIOmetadata should now be accessible at `aiometadata.yourdomain.xyz`. Add the following Access Rules to prevent Pangolin from Interfering with any functionality.

![AIOmetadata Access rules](https://i.postimg.cc/V6LQxTx4/image.png)

You may need to add more rules, If you plan on adding Trakt, Simkl and other integrations integration. Loop back to this section later when you are setting them.

### 7.2 Setting up AIOmetadata

Comprehensive warming is one of the main reasons to selfhost Aiometadata. It ensures that all your catalogues and lists are warmed/prepped so that all the titles load instantly on your client. It makes the performance of your stremio client so much faster. Note that posters would still not load as fast without poster cache. In order to do this, first create a config in aiometadata with whatever lists you desire. If you have no idea where to start, the default presents are a great place to start. Choose any present you want

<figure><img src="https://i.postimg.cc/XvzpKDHw/Screenshot-2026-06-17-190550.png" alt="" width="375"><figcaption></figcaption></figure>

For this example I have chosen the Movies & Shows + Anime (TVDB). Click continue after making your choice.  Choose if you want to enable Adult content, I would leave the bottom label as default, and click continue.

<figure><img src="https://i.postimg.cc/ZnhYVkrC/Screenshot-2026-06-17-190732.png" alt="" width="375"><figcaption></figcaption></figure>

The next step is to enter TMDB and TVDB keys. You **NEED** both of them for this preset. If you don't have one, simply click 'get key' and it should take you to appropriate website to get them. Both keys are completely free. Once you got the keys, enter them and click **Test key.**  It should say key valid. You can then click continue.&#x20;

<figure><img src="https://i.postimg.cc/tRrm3dpj/Screenshot-2026-06-17-190950.png" alt="" width="375"><figcaption></figcaption></figure>

If you want any of these streaming catalogues, enable them and then click continue. I am going to leave them disabled for my example

<figure><img src="https://i.postimg.cc/MKMt1h91/Screenshot-2026-06-17-191442.png" alt="" width="375"><figcaption></figcaption></figure>

You can skip the MDBlist collections for now. You can come back later and add any specific lists you want after integrating MDBlist. Click **Continue.** I am also skipping AI catalogues for this guide. You can do it later once you get your Gemini API key.

<div><figure><img src="https://i.postimg.cc/5tNsQjTf/Screenshot-2026-06-17-191817.png" alt=""><figcaption></figcaption></figure> <figure><img src="https://i.postimg.cc/Ls6xghwM/Screenshot-2026-06-17-191826.png" alt=""><figcaption></figcaption></figure></div>

Once done, Click **Apply Preset** and click **Go to Configuration,** Then Click **Save Configuration.**

<div><figure><img src="https://i.postimg.cc/pd4KVTt0/Screenshot-2026-06-17-192059.png" alt=""><figcaption></figcaption></figure> <figure><img src="https://i.postimg.cc/5tT890Mn/Screenshot-2026-06-17-192147.png" alt=""><figcaption></figcaption></figure></div>

You will now be able to install the addon, as well view your UUID. Feel free to install the addon. But also copy your UUID. We will need it to setup comprehensive warming.

### 7.3 Setting up Comprehensive Warming

Visit `aiometadata.yourdomain.xyz/dashboard` . As always, replace `yourdomain` with your actual domain. You will be welcomed with a login screen. Choose **Admin Login**, and enter your Admin key. If you forgot what that is, go to dockhand->stacks->aiometadata->see admin key in the env on the right side.

<div><figure><img src="https://i.postimg.cc/SNH4rbk0/Screenshot-2026-06-17-192753.png" alt=""><figcaption></figcaption></figure> <figure><img src="https://i.postimg.cc/L6GSTFRw/Screenshot-2026-06-17-192805.png" alt=""><figcaption></figcaption></figure></div>

In the dashboard, Go to **`Settings`**` ``->`` `**`Comprehensive Warming`**. Switch **Warmup Mode** from Essential to comprehensive. Enter your UUID you got from earlier and click the save button. And you should be done with enabling comprehensive warming. One of the best features of AIOMetadata!

<figure><img src="https://i.postimg.cc/hPRWzbrL/Screenshot-2026-06-17-193126.png" alt=""><figcaption></figcaption></figure>

### 7.4 Disabling Cinemeta

In order to make sure your client is actually AIOMetadata and not just Cinemeta that comes bundled with Stremio and some other clients, we need to disable cinemeta. If you are not using Stremio client, just delete Cinemeta if you see it in your addon list. If you are using stremio, go to [`https://cinebye.elfhosted.com/`](https://cinebye.elfhosted.com/)`.` Login using your stremio credentials.

<figure><img src="https://i.postimg.cc/d0PTgfmQ/Screenshot-2026-06-17-193815.png" alt=""><figcaption></figcaption></figure>

Scroll down to **Options**, and enable all the options (download a backup if you are afraid). Then scroll down to **Manage Addons** and drag AIOMetadata all the way to the top, but right below Cinemeta. Then scroll back up one section and click **Sync to Stremio**. Then force restart your clients and all your clients should now be using AIOMetadata.

<div><figure><img src="https://i.postimg.cc/bwQvSwky/Screenshot-2026-06-17-194051.png" alt=""><figcaption></figcaption></figure> <figure><img src="https://i.postimg.cc/nhvL9hBx/Screenshot-2026-06-17-194139.png" alt=""><figcaption></figcaption></figure></div>

<figure><img src="https://i.postimg.cc/7YSC09rc/Screenshot-2026-06-17-194409.png" alt=""><figcaption></figcaption></figure>

You can now play around your configuration (where you got your UUID) and add custom posters, custom catalogues, edit catalogue names and so much more, all for **FREE**. Feel free to join the AIOMetadata channel inside the AIOstreams discord server for help on how to make your setup better.

<figure><img src="https://i.postimg.cc/5tD1Pcwg/Screenshot-2026-06-17-194932.png" alt=""><figcaption><p>Fully customised stremio with custom posters and edited catalog names</p></figcaption></figure>

For more features like anilist/mdblist/trakt integration, Poster cache and how to set them up, please look at the [official documentation](https://github.com/cedya77/aiometadata). find the sample env, look for features you want and add them to env section (the right side of compose in dockhand UI).

> 📝 I am not going to go over PosterCache in this guide because it requires terminal access for some steps and this guide is focused on GUI

***

## 8 - Usenet Streaming setup

### 8.1 Deploying NZBDavex <a href="#deploying-nzbdavex-usenet-streaming" id="deploying-nzbdavex-usenet-streaming"></a>

`Dockhand → Stacks → Create New`

Paste the following compose on the left:

```yaml
services:
  nzbdavex:
    image: ghcr.io/qooode/nzbdavex:edge
    container_name: nzbdavex
    restart: unless-stopped
    expose:
      - 3000
    volumes:
      - ./nzbdavex_config:/config
    environment:
      - DISABLE_FRONTEND_AUTH=true
    networks:
      - pangolin_frontend
      - aiostreams

networks:
  pangolin_frontend:
    external: true
  aiostreams:
    external: true
```

Click **Save and Deploy**. We are adding NZBdavex to AIOstreams network as well so we can connect them later. Once deployed, To confirm they are connected to each other, click on the **Networks** on the left side. And click **View graph**

We can see two lines from  `aiostreams` network, one to the `aiostreams` container and one to `nzbdavex` container. This means that both AIOstreams and NZBdavex can talk to each other via the `aiostreams` network.

![](/files/f647a27e5be7da698b5d4cac305edd0347a5f321) ![](/files/182ce78ecf2a14668476672eb45834cde6444877)

By this time, you should know the usual drill. Go to Pangolin dashboard and add nzbdavex as a resource. You can look up the container name and the exposed port in the compose file. I am purposefully not putting a screenshot here, so that **YOU CAN LEARN TO DO IT ON YOUR OWN**.

***

### 8.2 Setting Up NZBDavex <a href="#setting-up-nzbdavex" id="setting-up-nzbdavex"></a>

You will see this on your first visit.

<img src="/files/555a05186057d605f4d4af8a362a762afb6c19de" alt="" width="375">

#### 8.2.1 Usenet Providers

If you don’t have any providers or indexers, you need to purchase them. The usenet providers and indexers are a whole separate rabbit hole on its own. The general recommendation is to get one with **Omicron** backbone - <https://usenet.rexum.space/deals?backbones=Omicron>. Find the cheapest deal you find and purchase it.&#x20;

> **Black Friday** is usually the best time to purchase providers and indexers, prices are typically at all-time lows. If you have **Torbox Pro,** starting July 1st 2026, it offers NNTP provider details which you can use for instant Usenet streaming without needing to purchase a provider (you still need indexers).

In my humble opinion, it is not worth spending over 30$ a year on a provider, considering there are great deals out there (When purchasing outside of BF deals, there may be no other choice to purchase at a higher rate).

#### 8.2.2 Usenet Indexers

You can get away with free ones like for very light usage:

* **Althub** — <https://althub.co.za/> — 100 API hits and 25 grabs per day
* **Usenet Crawler** — [https://www.usenet-crawler.com](https://www.usenet-crawler.com/) — 100 API hits and 10 grabs per day

But it is highly recommended to purchase at least one paid tier even if you are using it as a backup to Debrid. Common indexer suggestions are **Althub**, **NinjaCentral**, **Drunkenslug**, **NZBgeek**, **Usenet Crawler** etc. A lot of these indexers offer lifetime options, which are heavily discounted during BF deals (and are considered bad deals when purchased outside of this window).\
If you don’t see any deals, purchase the smallest plan outside of deal window, and wait for Black Friday to purchase for a cheaper price.

⚠️ **Important:** Some Indexers are against using them for direct Usenet streaming like we are doing now and also block oracle VPS entirely. Please do your research and spend money on indexers that are okay with your use case. You can join the AIOstreams discord server to ask others about which indexers are problematic so you can avoid them. IMO you should not be spending your hard earned money on indexers that don't want you.

#### 8.2.3 Adding a Provider

`NZBDavex → Settings → Usenet → Add Provider`

You can find the Host URL, max connections, username/password, port and other information in your provider dashboard after you have purchased a plan. Always choose SSL ports, most providers offer it at port **563** and **443**. For Type use “Pool connections” if you purchased an unlimited plan, Use “backup” if you purchased a block that lasts only for 1 TB (you can also enter this in the data cap below).&#x20;

<img src="/files/c6558bc48200ce88c834130dcc61ee016780d816" alt="" width="375">

Once all details are entered, click **Test Connection** and it should say connection successful if you entered your credentials properly. Go ahead and click save provider. You may need to click save once again at the bottom. You can continue to add more providers or just stop here.

![](/files/f7d1e0d5663328872e8db88a49427cc3e41d69b0)

#### 8.2.4 Adding Indexers

For indexers, you have two options:

* Add to **NZBDavex** (enables features like Watchdog, Watchtower)
* Add to **AIOstreams** (easier to switch between services like altmount/nzbdav/stremthru)

For the purpose of this guide, I am going to keep it simple and add the indexer to NZBdavex directly. Go to indexer section under settings and configure indexer. Go to Indexer section (adjacent to providers) and lets start adding our first indexer.&#x20;

<img src="/files/e0e7d6a97e80cdbe9adb0674360ad17f238b4011" alt="" width="375">

I used max requests limit just to not accidentally ping the indexer too much, but it is entirely optional. I also set a timeout of 15s to stop searching if it exceeds this amount. Once done, click test connection at the bottom left to ensure it works.

<img src="/files/c8df143111b8039aca61a84f5ddbd04043e58ccf" alt="" width="375">

Click **Save Indexer**. You may need to click save once again at the bottom. Next go to search profiles, name the profiles “AIOstreams” . Feel free to experiment with different options, but for now I am going with the following settings:

<img src="https://i.postimg.cc/fbf16JSv/Screenshot-2026-06-17-202222.png" alt="" width="375">

Remember this profile section, we need to come back here later to get our Addon `manifest.json`. Next, Go to `Advanced section-> webdav` and set a `webdav` password here and click **Save**.

<img src="/files/765c246e06ba9cd3efe3a05aa56e2c1e0d21cdf1" alt="" width="375">

Then go to SABnzbd section and add the URL `http://nzbdavex:3000` to base URL section. Click **Save**.

<img src="/files/7985c4415024b3fd8d621b2276930f821b7550f7" alt="" width="375">

That should be it for the basics. We can now add it to AIOstreams.

***

### 8.3 Connecting NZBDavex to AIOstreams <a href="#connecting-nzbdavex-to-aiostreams" id="connecting-nzbdavex-to-aiostreams"></a>

Currently Nzbdavex is not present in AIOstreams market place, as such, we will add it as `Usenet streamer` addon for the time being.

`AIOstreams → Addons → Marketplace → search "Usenet Streamer" → Configure`

📝 If NZBDavex gets native marketplace support in the future, choose that directly instead.

Rename the addon and paste the **Addon URL** from the Profile section of NZBDavex (Just scroll up and we had a bunch of URLs in the profile section of Nzbdavex settings)

<img src="/files/911bce8458efb9ddb06a4f8ab8077204a22238d9" alt="" width="375">

Before clicking install, modify the URL. The default URL will look something like:

```
https://nzbdavex.yourdomain.xyz/adapters/addon/56a6fdda7d75f8446e61c8c2/manifest.json
```

Replace `https://nzbdavex.yourdomain.xyz` with `http://nzbdavex:3000`, so it becomes:

```
http://nzbdavex:3000/adapters/addon/56a6fdda7d75f8446e61c8c2/manifest.json
```

We are doing this so that AIOstreams can bypass Pangolin Auth and if you remember, we connected NZBdavex and AIOstreams with the `aiostreams` docker network (the one we saw in networks diagram).

Once installed. Lets also make sure this is proxied. Go to the proxy section of AIOstreams (you can see it on the left side)

![](/files/24d68996d893ad9f1bd8323932d0953f8f0bfde7)

Enable Built in proxy and enter your credentials here. For the auth details, enter the `user:pass` you set in the AIOstreams env. If you forgot, go to:

`Dockhand → Stacks → aiostreams → check AIOSTREAMS_AUTH on the right side`

![URL modification](/files/24d68996d893ad9f1bd8323932d0953f8f0bfde7)

⚠️ You **must** enable Builtin proxy with correct credentials, otherwise NZBDavex won't work.

Click **Save** and install AIOstreams to Stremio if you haven't already. When you search for a title on Stremio, you should start seeing results for it from NZBdavex.

<img src="/files/23b1e01c0dcb176c6a6d5941875904431b7280f4" alt="" width="375">

When you click a link, it should also appear in the NZBdavex queue dashboard, and the video will play.

![](/files/20287c96200d7a03d1de9fd669f71fbcb4ebcca2)

> 🔴 **If it doesn't work.** You have missed a step somewhere, please go back up, go over the steps and ensure you have done all steps correctly. If you still have questions, feel free to pop into the Aiostreams [discord](https://discord.gg/jdJUYnM2) server and ask for help. There is also NZBdavex [discord](https://discord.gg/6UeXw7QN) server if you want help specific to that.&#x20;

***

## 9 - FAQ

#### 1. Why make another guide when Viren's guide exists? What is the difference?

As the mentioned in the title, this guide is specifically focused on a GUI way of deploying and maintaining your stack. While Viren does have services like 'Arcane' in his compose templates, A lot of the guide focuses on working via the terminal. When I first started selfhosting, I found working via the terminal right off the bat, very difficult. I looked up guides and found a more approachable way to selfhosting and I wanted to share this knowledge to others who have put away selfhosting because they found it difficult. If you are in the IT industry or looking to learn more the topic and develop your knowledge in this field, I highly recommend sticking with and using [Viren's guides](https://guides.viren070.me/selfhosting).&#x20;

#### 2. Why isn't your guide starting from setting up Oracle VPS?&#x20;

Primarily because Oracle changes their UI and offerings a lot. I have seen Viren struggle to update them constantly and I have learned my lesson, It is simply too much effort to keep on top of Oracle's changes. Besides there already exists many guides on acquiring a free VPS from Oracle, I don't want to make a guide on things that others have already made.

#### 2. Why NZBdavex and not the original NZBdav or other projects like Altmount?

I chose NZBdavex because it is the service I have been using as my main. There are many more projects that all achieve the same result. I encourage everyone to use the knowledge you have gained from this guide and try out other services and see what works best for you.

#### 3. Torrentio is not working? Why?

If you are hosting in oracle VPS, there's a good chance your instance IP has been blocked by Torrentio's Dev. Out of respect for the dev, I am not going to share ways to circumvent the block on a public guide.&#x20;

#### 4. \*\*\*\*\* Indexer is not returning any results? Why?

If you followed all the steps correctly and the Indexer still doesn't work, The indexer is probably blocking your requests. As mentioned in the main guide, some indexers don't like being used for streaming. Similar to the FAQ above, I am not going to share ways to circumvent the block on a public guide.&#x20;

#### 5. How do I get enterprise edition of Pangolin?

Simply follow this [documentation ](https://docs.pangolin.net/self-host/enterprise-edition#get-a-free-license-personal-use)on how to get a key. Once you have your key, Go to your Pangolin dashboard, on the left, click **Server Admin** -> **Licenses** -> Enter your key here and activate it. You may need to wait a while and refresh for the changes to apply. No need to restart Pangolin.&#x20;

#### 6. How do I host \*\*\*\* service? Will you make a guide on it?

It is simply not possible for me to make a guide on every single service out there. My hope is that the knowledge in this guide is enough for people to learn the basics of selfhosting and can extrapolate the knowledge to other services. All you need is a compose file, which can be found in official github page or by getting it from someone else. Then add the service to pangolin's network. This can be done directly via compose by using the network section as shown for aiostreams, AIOmetadata and nzbdavex or alternatively via GUI by going to `Dockhand -> networks -> Pangolin_frontend -> click the chain icon -> and choose the service from the dropdown`. Then proceed to do the usual pangolin dashboard routine and add public resource and the service should be available via `service.domain.xyz`. I sincerely hope people continue to learn and get better. If you still need help, As always pop into the AIOstreams discord server and ask for help.

#### 7. Will you post Optimization guides? Currently it only covers the basic settings.

I am refraining from making optimization guides for now because these addons and services constantly keep evolving and adding new features. The best settings today may not be the best settings tomorrow. If there is a lot of interest I would be happy to make one in the future, but I will be cautious about it. I do not want to be constantly updating the guides. I would encourage people to join the official discord to be notified about the latest features and how it came improve their setup.

***

## 10 - Who Asked?

#### 1. Do you have a link to Tip you?

If you want to tip, I highly recommend tipping the developers of these apps first. Without them, none of this would be possible.

* **Viren** (Developer of AIOstreams) - [Donation Link](https://ko-fi.com/viren070)
* **Cedya** and **Din** (Developers of AIOMetadata) - [Donation Link](https://buymeacoffee.com/cedya)
* **Exate** (Developer of NZBdavex) - [Donation Link](https://patreon.com/exat3)

If you are still swimming in money after donating to all these people, here is mine - [Tip Link](https://ko-fi.com/redhair7777).

#### 2. Do you have a Torbox referral code? (Literally who asked?)

Here you go - `798dd0d9-7cd2-4903-b90c-de5bfec8ba15`  or [link](https://torbox.app/subscription?referral=798dd0d9-7cd2-4903-b90c-de5bfec8ba15) if you prefer that.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://redhair.gitbook.io/redhair-guides/selfhosting-guide-gui-version.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.