21–30 of 86 posts
Looks good for moving away from the widely used centralization services (CF/aws for DNS, google for email, etc), my only question is how this is #1 on HN with 12 points.
Lots of points in a short time with few or no comments will push an item to the top.
Looks like this is similar to other self hosting projects like FreedomBone and NextCloud. It's great to see more tools to take back control over our data.
I would not put all of this on the same machine. Edit: To clarify - if one line of code is fd in any of the daemons you’re running you’ll lose everything. Practice defense in depth. Minimize the damage possible.
OpenBSD's standard practice is for all daemons to run as unprivileged users in chroots (after using pledge and - nowadays - unveil to restrict themselves further). If one line of code is fd in any of the daemons, it will by default be constrained to that daemon.
That being said, for example, let’s say pledge or unveil have one line of code that is fd.
Looks like this is similar to other self hosting projects like FreedomBone and NextCloud. It's great to see more tools to take back control over our data.
Looks like this is similar to other self hosting projects like FreedomBone and NextCloud. It's great to see more tools to take back control over our data.
Similarly Cloudron.io and Sandstorm.io are very impressive and easy to use projects.
Cloudron I've heard is excellent, completely dockerizes and automates everything with a slick webui, has lots of apps, however I just am unwilling to pay $15 a month for it.
Will likely roll my own apps/services with Rancher/haproxy/LE (or traefik as the reverse proxy/SSL term) on my sufficiently beefy Netcup rootserver KVM instance (at 8G should handle everything I want to do, but will likely use up most of it's resources which is fine).
I would not put all of this on the same machine. Edit: To clarify - if one line of code is fd in any of the daemons you’re running you’ll lose everything. Practice defense in depth. Minimize the damage possible.
Earlier quoted context omitted.
OpenBSD's standard practice is for all daemons to run as unprivileged users in chroots (after using pledge and - nowadays - unveil to restrict themselves further). If one line of code is fd in any of the daemons, it will by default be constrained to that daemon.
Absolutely, and pledge is amazing. That being said, for example, let’s say pledge or unveil have one line of code that is fd.
Heads up you should probably never host your own email on the same server as your web/worker servers if you’re worried about IP leakage. Your IP is exposed on outbound mail. Using SMTP services like SendGrid won’t help, either.
What's the problem with leaking your IP address? If you host a website or any kind of API there, your IP is public anyway?