Live data from Hacker News

Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

github.com

61–70 of 86 posts

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#61

Heads up you should probably never host your own email on the same server as your web/worker servers if you’re worried about IP leakage. Your IP is exposed on outbound mail. Using SMTP services like SendGrid won’t help, either.

Your IP is exposed on outbound mail. That reminds me of the good old days of the Interwebs: Your computer is currently broadcasting an IP address! http://www.codehappy.net/ipaddress.htm

Excellent concepts!

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#62
post #54

Earlier quoted context omitted.

*weak security One can scan the whole IPv4 address space in probably an hour, so you'll find any service you want to find. You might say, "I have a CDN in front of it", but that is just basic firewalling (or reverse proxying) and not really worth of being called "IP obfuscation".

Firewall only lets in traffic from the CDN, so you wouldn’t find anything. It’s almost like making sure this can’t happen is my job.

Yes, that's what I wrote.

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#63
post #54

Earlier quoted context omitted.

Obfuscating your IP is a foundational part of strong security for websites in certain industries. For example: the video game industry has a lot of wannabe hackers and script kiddies, DDoSes are cheaper and larger than ever, which makes running services in that industry extremely expensive without proper IP security. I know the purists think the internet should be open and transparent, but some of us also build servi…

*weak security One can scan the whole IPv4 address space in probably an hour, so you'll find any service you want to find. You might say, "I have a CDN in front of it", but that is just basic firewalling (or reverse proxying) and not really worth of being called "IP obfuscation".

Presumably the CDN would be whitelisted and scanners would therefore be unable to determine which of the many unresponsive IPs host the service in question.

It may be weak security to keep a bit of cash in my cars glovebox rather than in plain sight, but let me tell you how effective it is at keeping my windows from getting smashed...

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#64

Earlier quoted context omitted.

Similarly Cloudron.io and Sandstorm.io are very impressive and easy to use projects.

Sandstorm is great but apps really don't get updated anymore sadly. The founders also now have day jobs with CF, so probably don't get oodles of time to work on it. Cloudron I've heard is excellent, completely dockerizes and automates everything with a slick webui, has lots of apps, however I just am unwilling to pay $15 a month for it. Will likely roll my own apps/services with Rancher/haproxy/LE (or traefik as the…

The situation with that first thing you talk about, pretty sure it’s a direct result of the situation with that second thing you mention.

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#65
post #37

Self hosted email, chat, messaging, calls is the future. Individuals will own host and run their own services for these on public clouds. There is no reason for giant corporations to own these services.

I hosted our e-mail server a few years ago and it was a massive pain, because I could never be certain if e-mails were being delivered. 99% of the time it was fine, but then we'd occasionally run into some odd spam vendor who had blacklisted our IP address (presumably from someone who had used it to spam a decade prior). Maintaining our own spam filters was a bit of a pain. For our business, I'm pretty happy shelling…

You're 100% sure that you're getting your complete email set from your provider? No misguided spam filter dead heading your emails here and there?

Cmon.

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#66
post #50

Could there or is there also be a self-hosted version of a facebook clone? For exemple, you'd configure others server and they would all talk to each other, giving access to someones shared album, wall and profile.

Rummage in here: https://github.com/Kickball/awesome-selfhosted#social-networ...

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#67
Awesome Self-Hosted vs Dank Self-Hosted

Ha. I'm not sure of the intent, but I like this as a naming pattern for different kinds of projects.

Maybe awesome is friendly and optimistic.

Whereas dank is a little more "Really not suited for the general public, no automated password reset, no web GUIs..."

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#68

Self hosted email, chat, messaging, calls is the future. Individuals will own host and run their own services for these on public clouds. There is no reason for giant corporations to own these services.

I am a sysadmin and the last thing I want is to have to manage my own services in my free time.

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#69
post #39

Earlier quoted context omitted.

For webmail you could use rainloop or squirrel which can use the web server and the email server for example!

Please do not recommend squirrelmail. It is not really being maintained. https://www.openwall.com/lists/oss-security/2018/07/26/2 https://www.openwall.com/lists/oss-security/2018/03/17/2 https://squirrelmail.org/index.php https://blog.cpanel.com/the-death-of-squirrelmail/

Yep, Roundcube seems to work this days, I've been using it for a while (lightly, only once a week)

Re: Dank-selfhosted: automated deployment of email, web, DNS, XMPP, ZNC on OpenBSD

#70
post #64

Earlier quoted context omitted.

Sandstorm is great but apps really don't get updated anymore sadly. The founders also now have day jobs with CF, so probably don't get oodles of time to work on it. Cloudron I've heard is excellent, completely dockerizes and automates everything with a slick webui, has lots of apps, however I just am unwilling to pay $15 a month for it. Will likely roll my own apps/services with Rancher/haproxy/LE (or traefik as the…

The situation with that first thing you talk about, pretty sure it’s a direct result of the situation with that second thing you mention.

Yep funny to see such a A/B test situation play out and people want neither
Post reply on HN