• 0 Posts
  • 18 Comments
Joined 1 year ago
cake
Cake day: August 7th, 2023

help-circle



  • Wow, I had no idea that there was a quote out there that aligns so well with my beliefs. I grew up in a semi religious household but was never forced to go to church. My parents encouraged me to go, not only to theirs but even go with friends that were different religions.

    After going to various churches through some really vulnerable times I still don’t subscribe to any religion, but I also can’t bring myself to go full atheist.

    Too bad that quote is way too long for a tattoo 🤣





  • The growth is happening mostly in the pictrs and db containers. I know pictrs is optional if you’re not uploading pics yourself, but I didn’t want to limit myself on that. I haven’t dived into where the db growth is happening yet either. Right now my hurdle is there doesn’t seem to be any baked in maintenance tools, so it’s all going to be me editing the database directly. I’m okay with doing it but need to figure out how to not purge content I have saved via Lemmy.

    As far as NSFW stuff, there’s a check box for the instance settings for enabling NSFW instance wide. I have it unchecked and haven’t seen a single NSFW post browsing through my instance. It does require things to be marked as such though. I’ll probably go the extra step and defederate the porn instances just to add another layer.

    Please let me know if you find anything useful for maintaining the instance.


  • I have this one on a Hetzner server that runs me like $6/mo. I’m not comfortable with the federated nature of things potentially putting CSAM or other illegal content on disk in my home.

    I use tailscale so I can still hit my internal (at home) git repos and all that. The rest of my stuff is all hosted on an old gaming PC I turned into a Proxmox host that sits in my spare bedroom. Of those services, I only expose like 3 things to the outside world. Nextcloud being the main one. I don’t route it through my VPS, just proxy it through cloudflare.


  • Yeah I haven’t found anything for cleanup maintenance. Right now with just me my disk usage is increasing ~300MB per day. I’m debating purging stuff older than 30 days or something. The only stuff where my server is the source of truth is my profile and communities on my instance.

    We’ll see though, this is just a fun little side thing I’m not taking too seriously.


  • 2fa was in at the time. IIRC the jwt was granted after 2fa so it didn’t matter.

    You’ve got a point though, small instances aren’t gonna be nearly as useful as a giant one to threat actors. Assuming you don’t give them a reason to go after you specifically they wouldn’t have a reason to target such a tiny server.

    Still though, I don’t need that shiny A next to my name so I’m good with how I have it set up.


  • Exactly. I went one step further and decided not to use my admin account as my main. I don’t run around as root on servers so I try not to do that with apps. It’s easier with Lemmy because once it’s set up all the admin tasks hit my email.

    I also wanted to avoid that vulnerability that hit Lemmy World a few weeks ago that was only possible because the server admin got their jwt stolen, which wouldn’t have been so impactful if they weren’t on the admin account.



  • skadden@ctrlaltelite.xyztoFediverse@lemmy.worldPaid Servers?
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    1 year ago

    Yep. My instance just has me on it and posting elsewhere works without issue. Anything I upload goes to my instance and federates out. It’s really quite great not having to worry about the instance drama when big ones defederate from each other. I also turned off NSFW so I don’t have to worry about any of that content (legal or otherwise) even hitting my server.

    Here’s an image of me making this comment via Sync for Lemmy

    Edit: I have community creation locked down to admins, which everything disables them on my instance.


  • They have a similar integration with Bitwarden that I’ve used a bit. I ended up stopping though because I rely on a catch-all and just give out companyname@ or something generic like work@ or family@. Sure it’s easy to guess but I haven’t had any spam issues in the ~15 years I’ve been operating this way.

    Nobody actually gets my Fastmail login address though. I picked a random string on one of their domains that’s literally only used to sign in. A fun little added obscurity feature.


  • Yeah I suppose I could be missing email and not know (because it never got delivered) but I get everything I expect to receive and I haven’t had anyone reach out asking why I haven’t responded to an email I never received. It’s good enough for me for now though.

    LDAP support isn’t something that’s ever crossed my mind for mail, definitely a legit reason to stick with the Googs.


  • Yep. It was a fun ooh look what I can do that I have exactly zero people to communicate with using those features.

    In the same vein, not using Google is similarly silly. Most of my personal contacts use Gmail or o365 so they still get a copy of my email anyway. But at least this way my money isn’t going to them and nobody’s scanning my inbox to advertise to me (☞゚ヮ゚)☞


  • I moved to Fastmail last year and it’s been entirely unremarkable which is exactly what I want. Mail in and out works, it’s reliable, I have my custom domains.

    It really depends on the level of privacy you’re going for and what features you want. For me I needed custom domain support with catchalls. The only other requirement I had was to not be Google. I debated between Fastmail and Proton for a while (Fastmail for features/price, Proton for the “better” privacy.) Ultimately I ended up on Fastmail because I would have had to pay for a higher than necessary account at Proton for what I wanted.