• 18 Posts
  • 463 Comments
Joined 1 year ago
cake
Cake day: March 19th, 2024

help-circle



  • You get a domain name, and use an A record to point it towards your server’s public IP address.

    You tell nginx to forward requests to a given domain. For instance, you could tell nginx to forward requests to foo.bar.com to 127.0.0.1:1337. To do this:

    http {
        server {
            server_name foo.bar.com;
            listen 80;
            
            location / {
                proxy_pass http://127.0.0.1:1337$request_uri;
            }
        }
    }
    

    Note that this is a very basic setup that doesn’t have HTTPS or anything. If you want an SSL certificate, look into Let’s Encrypt and Certbot.

    Also, the service you’re hosting (which I’m not familiar with) may have an example reverse proxy config you should use as a starting point if it exists.






  • Been self hosting email for a good while now and it’s been largely painless. My emails are not getting marked spam either. Although my only outgoing mails are to FOSS mailing lists and occasionally to individuals, not for anything business related.

    I would say that if self hosting email sounds like something you’d be interested in, then it probably is worthwhile for you. I like being able to configure my mail server exactly the way I want it, and I have some server side scripts I wrote for server side mail processing, which is useful as I have several different mail clients so it makes sense to do processing on the server rather than trying to configure it on my many clients. It definitely falls into the “poweruser” category of activities but I’ve had fun and I enjoy my digital sovereignty.



  • A flip phone/dumbphone would sort of be mutually exclusive with my use case. I use my smartphone nearly exclusively as a lightweight mobile computer for web browsing, SSHing into my server, and messaging over internet (not SMS). I rarely use the “phone” features of my phone, i.e. phone calls and SMS. So I’d be losing out over the features I do use, in favour of features I don’t use.

    If you’re being distracted by your phone and a dumbphone works for you, good on you. I think most people are like me and use their phones as a small mobile computer rather than a phone though, in which case distractions are best handled with one of the many apps/browser add-ons/etc that block websites or apps.




  • Contacts makes sense for email address autocompletion, but there’s no need for that to be bundled with the email service itself given that email address completion happens on the client not the mail server. And calendar I guess people can send emails with ics links, and most mail clients let you accept or decline invitations from within the client, but that connection is more tenuous. Maybe it’s just me but I rarely receive event invitations over email, and I never use the accept/decline feature; I just add it to my calendar manually.

    For contacts and calendar syncing I just use Nextcloud with CalDAV/CardDAV clients on all my devices.


  • Firstly—this project sounds cool! I host my own mail server already so have no need for your project, but it’s good that there are options out there for people.

    The servers are in my office in Temecula, CA, USA.

    In the long run I would really suggest you get servers in another jurisdiction—USA will be a no-no for a lot of potential customers.

    Good luck though :)


  • communism@lemmy.mltoLinux@lemmy.mlLinux security
    link
    fedilink
    arrow-up
    21
    arrow-down
    2
    ·
    edit-2
    2 days ago

    To be honest, security in the desktop Linux space has traditionally been a bit shit.

    Since you’re new, it’s important for you to understand that Linux is a kernel. That’s the most low-down part of your operating system that handles your OS talking to your hardware and vice versa. Linux is not a full OS; it doesn’t provide any userspace tools that an OS provides. That’s why people don’t install Linux on its own, but they install Linux distributions, which are full OSes using the Linux kernel that come with more or less software to make Linux a complete OS, or at least bootable. That means that there is no one way to do things in Linux. There are some Linux distributions that are security-focused, such as Qubes OS and Alpine Linux. There’s also the new immutable distros, which provide security because the entire OS is defined declaratively, meaning you can easily rollback changes, and it’s harder to get infected with malware on those systems. There’s a lot of variability. Some systems are quite secure by default. A lot of other systems do not set up any security measures by default and expect the user to do that.

    If you’re interested in hardening your Linux install, I would recommend the Arch wiki’s security page which has a lot of good advice.

    Security is a really broad topic and the relevant security measures for you are going to vary based on your threat model. General good practices include using some form of MAC, setting up a firewall, don’t install random crap you don’t need (and if you are getting software from somewhere that isn’t vetted, e.g. the AUR, you should vet it yourself—e.g. if you use the AUR, learn to read PKGBUILDs), use full-disk encryption. Anti-virus software is largely not necessary on Linux, especially if you only install software from your package manager and follow other security good practice.


  • https://www.getmonero.org/

    Getting a wallet and setting it up is the easy part. Buying it can be more difficult depending on where you are—centralised exchanges are easiest but xmr-fiat centralised exchanges often have legal trouble and may not be available where you are. You can try a decentralised exchange like RetoSwap (fiat-xmr directly) or bisq (fiat-btc and btc-xmr). They can be a bit confusing for new users but I figured it out ok when I first bought Monero using bisq.