I would not put all of this on the same machine. Edit: To clarify - if one line of code is fd in any of the daemons you’re running you’ll lose everything. Practice defense in depth. Minimize the damage possible.
what is `fd` in this context?
Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD
51–60 of 86 posts
Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD
#52Could there or is there also be a self-hosted version of a facebook clone? For exemple, you'd configure others server and they would all talk to each other, giving access to someones shared album, wall and profile.
Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD
#53Heads up you should probably never host your own email on the same server as your web/worker servers if you’re worried about IP leakage. Your IP is exposed on outbound mail. Using SMTP services like SendGrid won’t help, either.
Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD
#54Earlier quoted context omitted.
If your security is only achieved by hiding your IP I have bad news for you.
Obfuscating your IP is a foundational part of strong security for websites in certain industries. For example: the video game industry has a lot of wannabe hackers and script kiddies, DDoSes are cheaper and larger than ever, which makes running services in that industry extremely expensive without proper IP security. I know the purists think the internet should be open and transparent, but some of us also build servi…
One can scan the whole IPv4 address space in probably an hour, so you'll find any service you want to find. You might say, "I have a CDN in front of it", but that is just basic firewalling (or reverse proxying) and not really worth of being called "IP obfuscation".
Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD
#55Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD
#56Email delivery issues usually come up in discussions around self-hosting. If there was a credible collective email delivery relay, I would pay to be a part of it. Is there anything like that today?
Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD
#57Email delivery issues usually come up in discussions around self-hosting. If there was a credible collective email delivery relay, I would pay to be a part of it. Is there anything like that today?
^^^ self-hosted email that can still legally circumvent ISP restrictions and enjoy gmail like deliverability/whiltelisting, by freedom minded sysadmins that self-police abuse in their network.
I suppose hosted SMTP from a hosted service like SES or Mandrill could work, as long as inbound email was handled directly by my own server. There is also the matter of spam, but it appears there are many battletested solutions for that. The last thing I need is wondering if my emails hit the spam folder or not. I worked for a company with email delivery issues associated with the corporate domain once... it was difficult to do business.
Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD
#58Earlier quoted context omitted.
Obfuscating your IP is a foundational part of strong security for websites in certain industries. For example: the video game industry has a lot of wannabe hackers and script kiddies, DDoSes are cheaper and larger than ever, which makes running services in that industry extremely expensive without proper IP security. I know the purists think the internet should be open and transparent, but some of us also build servi…
*weak security One can scan the whole IPv4 address space in probably an hour, so you'll find any service you want to find. You might say, "I have a CDN in front of it", but that is just basic firewalling (or reverse proxying) and not really worth of being called "IP obfuscation".
Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD
#59Self hosted email, chat, messaging, calls is the future. Individuals will own host and run their own services for these on public clouds. There is no reason for giant corporations to own these services.
I hosted our e-mail server a few years ago and it was a massive pain, because I could never be certain if e-mails were being delivered. 99% of the time it was fine, but then we'd occasionally run into some odd spam vendor who had blacklisted our IP address (presumably from someone who had used it to spam a decade prior). Maintaining our own spam filters was a bit of a pain. For our business, I'm pretty happy shelling…
My server sends and receives properly. Not my problem if others have misconfigured email servers
Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD
#60Self hosted email, chat, messaging, calls is the future. Individuals will own host and run their own services for these on public clouds. There is no reason for giant corporations to own these services.
Future? Self hosting was common place in the 90’s.