Selfhosted

62958 readers

425 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

Be civil.
No spam.
Posts are to be related to self-hosting.
Don't duplicate the full text of your blog or readme if you're providing a link.
Submission headline should match the article title.
No trolling.
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago

MODERATORS

curbstickle@anarchist.nexus

curbstickle_lw@lemmy.world

145

How do I avoid becoming one with the botnet? (programming.dev)

submitted 8 months ago by bitcrafter@programming.dev to c/selfhosted@lemmy.world

69 comments fedilink hide all child comments

I find the idea of self-hosting to be really appealing, but at the same time I find it to be incredibly scary. This is not because I lack the technical expertise, but because I have gotten the impression that everyone on the Internet would immediately try to hack into it to make it join their bot net. As a result, I would have to be constantly vigilant against this, yet one of the numerous assailants would only have to succeed once. Dealing with this constant threat seems like it would be frightening enough as a full-time job, but this would only be a hobby project for me.

How do the self-hosters on Lemmy avoid becoming one with the botnet?

(page 2) 20 comments

sorted by: hot top controversial new old

[–] BigTurkeyLove@lemmy.world 2 points 8 months ago (1 children)

Damn dawg, reading this made me not wanna self host my own instance. I was considering it.

load more comments (1 replies)

[–] dil@lemmy.zip 1 points 8 months ago

Tailscale on everything

[–] GreenKnight23@lemmy.world 1 points 8 months ago

routine patching
siem log aggregation
proper alerting metrics and notifications
routine virus scanning
proper network segregation between your NATd network and your personal network
firewall firewall firewall
expose your applications to the internet through a WAF, never directly

if you can do all these things properly, then there shouldn't be too much danger in selfhosting your apps publicly.

[–] melroy@kbin.melroy.org 1 points 8 months ago (1 children)

It's all about server hardening. See https://blog.melroy.org/2023/server-hardening/

[–] Atemu@lemmy.ml 0 points 8 months ago (3 children)

Wow is that ever a load of snake oil.

I see this kind of guide as actively harmful because it creates a false sense of security.

load more comments (3 replies)

load more comments