Live data from Hacker News

Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

github.com

51–60 of 86 posts

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#51

I would not put all of this on the same machine. Edit: To clarify - if one line of code is fd in any of the daemons you’re running you’ll lose everything. Practice defense in depth. Minimize the damage possible.

what is `fd` in this context?

foobar'd

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#52
post #50

Could there or is there also be a self-hosted version of a facebook clone? For exemple, you'd configure others server and they would all talk to each other, giving access to someones shared album, wall and profile.

Diaspora is what you're thinking of. Mastodon is a federated twitter clone.

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#53

Heads up you should probably never host your own email on the same server as your web/worker servers if you’re worried about IP leakage. Your IP is exposed on outbound mail. Using SMTP services like SendGrid won’t help, either.

^ cloudflare warns you if you leak your public IP

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#54
post #48

Earlier quoted context omitted.

If your security is only achieved by hiding your IP I have bad news for you.

Obfuscating your IP is a foundational part of strong security for websites in certain industries. For example: the video game industry has a lot of wannabe hackers and script kiddies, DDoSes are cheaper and larger than ever, which makes running services in that industry extremely expensive without proper IP security. I know the purists think the internet should be open and transparent, but some of us also build servi…

*weak security

One can scan the whole IPv4 address space in probably an hour, so you'll find any service you want to find. You might say, "I have a CDN in front of it", but that is just basic firewalling (or reverse proxying) and not really worth of being called "IP obfuscation".

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#56

Email delivery issues usually come up in discussions around self-hosting. If there was a credible collective email delivery relay, I would pay to be a part of it. Is there anything like that today?

^^^ self-hosted email that can still legally circumvent ISP restrictions and enjoy gmail like deliverability/whiltelisting, by freedom minded sysadmins that self-police abuse in their network.

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#57

Email delivery issues usually come up in discussions around self-hosting. If there was a credible collective email delivery relay, I would pay to be a part of it. Is there anything like that today?

^^^ self-hosted email that can still legally circumvent ISP restrictions and enjoy gmail like deliverability/whiltelisting, by freedom minded sysadmins that self-police abuse in their network.

Here I am talking with myself...

I suppose hosted SMTP from a hosted service like SES or Mandrill could work, as long as inbound email was handled directly by my own server. There is also the matter of spam, but it appears there are many battletested solutions for that. The last thing I need is wondering if my emails hit the spam folder or not. I worked for a company with email delivery issues associated with the corporate domain once... it was difficult to do business.

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#58
post #54

Earlier quoted context omitted.

Obfuscating your IP is a foundational part of strong security for websites in certain industries. For example: the video game industry has a lot of wannabe hackers and script kiddies, DDoSes are cheaper and larger than ever, which makes running services in that industry extremely expensive without proper IP security. I know the purists think the internet should be open and transparent, but some of us also build servi…

*weak security One can scan the whole IPv4 address space in probably an hour, so you'll find any service you want to find. You might say, "I have a CDN in front of it", but that is just basic firewalling (or reverse proxying) and not really worth of being called "IP obfuscation".

Firewall only lets in traffic from the CDN, so you wouldn’t find anything. It’s almost like making sure this can’t happen is my job.

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#59
post #37

Self hosted email, chat, messaging, calls is the future. Individuals will own host and run their own services for these on public clouds. There is no reason for giant corporations to own these services.

I hosted our e-mail server a few years ago and it was a massive pain, because I could never be certain if e-mails were being delivered. 99% of the time it was fine, but then we'd occasionally run into some odd spam vendor who had blacklisted our IP address (presumably from someone who had used it to spam a decade prior). Maintaining our own spam filters was a bit of a pain. For our business, I'm pretty happy shelling…

I have been having the same issues. 99% of my emails go through but every now and then gmail marks one of mine as spam. I generally don't care as usually its other people emailing me because they want something and its their loss if they don't get the email.

My server sends and receives properly. Not my problem if others have misconfigured email servers

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#60

Self hosted email, chat, messaging, calls is the future. Individuals will own host and run their own services for these on public clouds. There is no reason for giant corporations to own these services.

Future? Self hosting was common place in the 90’s.

Common? For organizations yes (much more so than today), but most users only had dialup at home even in the late 90s
Post reply on HN