GET https://kbin.spritesserver.nl/m/selfhosted@lemmy.world/t/33831/The-safest-way-of-self-hosting/top

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
0.17 ms (none)
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
0.00 ms (none)
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
0.04 ms (none)
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5
"App\Security\Voter\EntryCommentVoter"
6
"App\Security\Voter\EntryVoter"
7
"App\Security\Voter\MagazineVoter"
8
"App\Security\Voter\MessageThreadVoter"
9
"App\Security\Voter\MessageVoter"
10
"App\Security\Voter\NotificationVoter"
11
"App\Security\Voter\OAuth2UserConsentVoter"
12
"App\Security\Voter\PostCommentVoter"
13
"App\Security\Voter\PostVoter"
14
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
2 DENIED moderate
App\Entity\Entry {#2388
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 220
    +entryCommentCount: 3886
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729496512 {#276
      date: 2024-10-21 07:41:52.046563 UTC (+00:00)
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703477426 {#270
      date: 2023-12-25 05:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#272
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
  +slug: "The-safest-way-of-self-hosting"
  +title: "The "safest" way of self hosting"
  +url: null
  +body: """
    Hello peoples,\n
    \n
    I am looking for tips on how to make my self-hosted setup as safe as possible.\n
    \n
    Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
    \n
    I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
    \n
    Anyways, thank you for reading.\n
    \n
    N
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 20
  +favouriteCount: 26
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1729466951 {#2410
    date: 2024-10-21 01:29:11.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1866 …}
  +votes: Doctrine\ORM\PersistentCollection {#1978 …}
  +reports: Doctrine\ORM\PersistentCollection {#1946 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
  +badges: Doctrine\ORM\PersistentCollection {#2426 …}
  +children: []
  -id: 33831
  -titleTs: "'host':6 'safest':2 'self':5 'way':3"
  -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1706625633
  +visibility: "visible             "
  +apId: "https://feddit.uk/post/7247106"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706539233 {#1850
    date: 2024-01-29 15:40:33.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
3 DENIED edit
App\Entity\Entry {#2388
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 220
    +entryCommentCount: 3886
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729496512 {#276
      date: 2024-10-21 07:41:52.046563 UTC (+00:00)
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703477426 {#270
      date: 2023-12-25 05:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#272
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
  +slug: "The-safest-way-of-self-hosting"
  +title: "The "safest" way of self hosting"
  +url: null
  +body: """
    Hello peoples,\n
    \n
    I am looking for tips on how to make my self-hosted setup as safe as possible.\n
    \n
    Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
    \n
    I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
    \n
    Anyways, thank you for reading.\n
    \n
    N
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 20
  +favouriteCount: 26
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1729466951 {#2410
    date: 2024-10-21 01:29:11.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1866 …}
  +votes: Doctrine\ORM\PersistentCollection {#1978 …}
  +reports: Doctrine\ORM\PersistentCollection {#1946 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
  +badges: Doctrine\ORM\PersistentCollection {#2426 …}
  +children: []
  -id: 33831
  -titleTs: "'host':6 'safest':2 'self':5 'way':3"
  -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1706625633
  +visibility: "visible             "
  +apId: "https://feddit.uk/post/7247106"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706539233 {#1850
    date: 2024-01-29 15:40:33.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
4 DENIED moderate
App\Entity\Entry {#2388
  +user: Proxies\__CG__\App\Entity\User {#1943 …}
  +magazine: App\Entity\Magazine {#266
    +icon: Proxies\__CG__\App\Entity\Image {#247 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 220
    +entryCommentCount: 3886
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729496512 {#276
      date: 2024-10-21 07:41:52.046563 UTC (+00:00)
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#238 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
    +entries: Doctrine\ORM\PersistentCollection {#181 …}
    +posts: Doctrine\ORM\PersistentCollection {#139 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
    +bans: Doctrine\ORM\PersistentCollection {#118 …}
    +reports: Doctrine\ORM\PersistentCollection {#104 …}
    +badges: Doctrine\ORM\PersistentCollection {#82 …}
    +logs: Doctrine\ORM\PersistentCollection {#72 …}
    +awards: Doctrine\ORM\PersistentCollection {#61 …}
    +categories: Doctrine\ORM\PersistentCollection {#1820 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703477426 {#270
      date: 2023-12-25 05:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#272
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
  +slug: "The-safest-way-of-self-hosting"
  +title: "The "safest" way of self hosting"
  +url: null
  +body: """
    Hello peoples,\n
    \n
    I am looking for tips on how to make my self-hosted setup as safe as possible.\n
    \n
    Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
    \n
    I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
    \n
    Anyways, thank you for reading.\n
    \n
    N
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 20
  +favouriteCount: 26
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1729466951 {#2410
    date: 2024-10-21 01:29:11.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1866 …}
  +votes: Doctrine\ORM\PersistentCollection {#1978 …}
  +reports: Doctrine\ORM\PersistentCollection {#1946 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
  +badges: Doctrine\ORM\PersistentCollection {#2426 …}
  +children: []
  -id: 33831
  -titleTs: "'host':6 'safest':2 'self':5 'way':3"
  -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1706625633
  +visibility: "visible             "
  +apId: "https://feddit.uk/post/7247106"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706539233 {#1850
    date: 2024-01-29 15:40:33.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
6 DENIED moderate
App\Entity\EntryComment {#4018
  +user: App\Entity\User {#3967 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    You’re going to get a lot of bad or basic advice with no reasoning (use a firewall) in here… And as you surmised this is a very big topic and you haven’t provided a lot of context about what you intend to do. I don’t have any specific links, but I do have some advice for you:\n
    \n
    First - keep in mind that security is a process not a thing. 90% of your security will come from being diligent about applying patches, keeping software up-to-date, and paying attention to security news. If you’re not willing to apply regular patches then don’t expose anything to the internet. There are automated systems that simply scan for known vulnerabilities on the internet. Self-hosting is NOT “set it and forget it”. Figuring out ways to automate this help make it easy to do and thus more likely to be done. Checkout things like Ansible for that.\n
    \n
    Second is good authentication hygiene. Choose good passwords. Better yet long passphrases. Or enable MFA and other additional protections. And BE SURE TO CHANGE ANY DEFAULT PASSWORDS for software you setup. Often there is some default ‘admin’ user.\n
    \n
    Beyond that your approach is"security in depth" - you take a layered approach to security understanding what your exposure is and what will happen should one of your services / systems be hacked.\n
    \n
    Examples of security in depth:\n
    \n
    - Proper firewalling will ensure that you don’t accidentally expose services you don’t intend to expose (adds a layer of protection). Sometimes there are services running that you didn’t expect.\n
    - Use things like “fail2ban” that will add IP addresses to temporary blocklists if they start trying user/passwords that don’t work. This could catch a bot from finding that “admin/password” user on your Nextcloud server that you haven’t changed yet…\n
    \n
    Minimize your attack surface area. If it doesn’t need to be exposed to the internet then don’t expose it. VPNs can help with the “I want to connect to my home server while I’m away” problem and are easy to setup (tailscale and wireguard being two popular options). If your service needs to be “public” to the internet understand that this is a bigger step and that everything here should be taken more seriously.\n
    \n
    Minimize your exposure. Think though the question of “if a malicious person got this password what would happen and how would I handle it?” Would they have access to files from other services running on the same server (having separation between services can help with this)? Would they have access to unencrypted files with sensitive data? It’s all theoretical, until it isn’t…\n
    \n
    If you do expose services to the internet monitor your logs to see if there is anything “unusual” happening. Be prepared to see lots of bots attempting to hack services. It may be scary at first, but relatively harmless if you’ve followed the above recommendations. “Failed logins” by the thousands are fine. fail2ban can help cut that down a bit though.\n
    \n
    Overall I’d say start small and start “internal” (nothing exposed to the internet). Get through a few update/upgrade cycles to see how things go. And ask questions! Especially about any specific services and how to deploy them securely. Some are more risky than others.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1729448586 {#4028
    date: 2024-10-20 20:23:06.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4016 …}
  +nested: Doctrine\ORM\PersistentCollection {#4014 …}
  +votes: Doctrine\ORM\PersistentCollection {#4012 …}
  +reports: Doctrine\ORM\PersistentCollection {#4010 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3978 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3982 …}
  -id: 350111
  -bodyTs: "'90':73 'access':414,436 'accident':245 'add':254,275 'addit':179 'address':277 'admin':198 'admin/password':298 'advic':12,58 'ansibl':159 'anyth':110,467 'appli':83,103 'approach':203,212 'area':314 'ask':539 'attack':312 'attempt':477 'attent':93 'authent':165 'autom':116,141 'away':347 'bad':9 'basic':11 'better':170 'beyond':200 'big':29 'bigger':376 'bit':511 'blocklist':280 'bot':294,476 'catch':292 'chang':185,308 'checkout':156 'choos':167 'come':78 'connect':339 'context':39 'could':291 'cut':507 'cycl':532 'd':515 'data':442 'date':90 'default':187,197 'deploy':549 'depth':207,236 'didn':266 'dilig':81 'doesn':317 'done':155 'easi':146,351 'enabl':175 'ensur':240 'especi':541 'everyth':380 'exampl':232 'expect':268 'expos':109,246,253,322,329,454,523 'exposur':218,389 'fail':497 'fail2ban':272,504 'figur':137 'file':416,439 'find':296 'fine':503 'firewal':18,238 'first':61,486 'follow':493 'forget':135 'get':5,527 'go':3,537 'good':164,168 'got':399 'hack':231,479 'handl':409 'happen':223,404,469 'harmless':489 'haven':33,306 'help':143,333,430,506 'home':342 'host':129 'hygien':166 'intend':43,251 'intern':521 'internet':113,126,325,370,458,526 'ip':276 'isn':449 'keep':62,85 'known':122 'layer':211,256 'like':152,158,271 'link':52 'log':461 'login':498 'long':172 'lot':7,37,474 'm':346 'make':144 'malici':397 'may':482 'mfa':176 'mind':64 'minim':310,387 'monitor':459 'need':319,364 'news':96 'nextcloud':302 'noth':522 'often':193 'one':225 'option':360 'other':557 'overal':513 'passphras':173 'password':169,188,401 'patch':84,105 'pay':92 'person':398 'popular':359 'prepar':471 'problem':348 'process':69 'proper':237 'protect':180,258 'provid':35 'public':367 'question':393,540 're':2,99 'reason':15 'recommend':496 'regular':104 'relat':488 'riski':555 'run':263,420 'say':516 'scan':120 'scari':484 'second':162 'secur':66,76,95,205,214,234,551 'see':463,473,534 'self':128 'self-host':127 'sensit':441 'separ':426 'serious':386 'server':303,343,424 'servic':228,247,262,363,419,428,455,480,545 'set':132 'setup':192,353 'simpli':119 'small':518 'softwar':86,190 'sometim':259 'specif':51,544 'start':283,517,520 'step':377 'sure':183 'surfac':313 'surmis':24 'system':117,229 'tailscal':354 'take':209 'taken':384 'temporari':279 'theoret':446 'thing':72,157,270,536 'think':390 'though':391,512 'thousand':501 'thus':150 'topic':30 'tri':284 'two':358 'understand':215,371 'unencrypt':438 'unusu':468 'up-to-d':87 'update/upgrade':531 'use':16,269 'user':199,299 'user/passwords':285 've':492 'vpns':331 'vulner':123 'want':337 'way':139 'will':101 'wireguard':356 'work':289 'would':403,407,411,433 'yet':171,309"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/8239406"
  +editedAt: DateTimeImmutable @1729415747 {#3960
    date: 2024-10-20 11:15:47.0 +02:00
  }
  +createdAt: DateTimeImmutable @1706544693 {#4027
    date: 2024-01-29 17:11:33.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
7 DENIED edit
App\Entity\EntryComment {#4018
  +user: App\Entity\User {#3967 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    You’re going to get a lot of bad or basic advice with no reasoning (use a firewall) in here… And as you surmised this is a very big topic and you haven’t provided a lot of context about what you intend to do. I don’t have any specific links, but I do have some advice for you:\n
    \n
    First - keep in mind that security is a process not a thing. 90% of your security will come from being diligent about applying patches, keeping software up-to-date, and paying attention to security news. If you’re not willing to apply regular patches then don’t expose anything to the internet. There are automated systems that simply scan for known vulnerabilities on the internet. Self-hosting is NOT “set it and forget it”. Figuring out ways to automate this help make it easy to do and thus more likely to be done. Checkout things like Ansible for that.\n
    \n
    Second is good authentication hygiene. Choose good passwords. Better yet long passphrases. Or enable MFA and other additional protections. And BE SURE TO CHANGE ANY DEFAULT PASSWORDS for software you setup. Often there is some default ‘admin’ user.\n
    \n
    Beyond that your approach is"security in depth" - you take a layered approach to security understanding what your exposure is and what will happen should one of your services / systems be hacked.\n
    \n
    Examples of security in depth:\n
    \n
    - Proper firewalling will ensure that you don’t accidentally expose services you don’t intend to expose (adds a layer of protection). Sometimes there are services running that you didn’t expect.\n
    - Use things like “fail2ban” that will add IP addresses to temporary blocklists if they start trying user/passwords that don’t work. This could catch a bot from finding that “admin/password” user on your Nextcloud server that you haven’t changed yet…\n
    \n
    Minimize your attack surface area. If it doesn’t need to be exposed to the internet then don’t expose it. VPNs can help with the “I want to connect to my home server while I’m away” problem and are easy to setup (tailscale and wireguard being two popular options). If your service needs to be “public” to the internet understand that this is a bigger step and that everything here should be taken more seriously.\n
    \n
    Minimize your exposure. Think though the question of “if a malicious person got this password what would happen and how would I handle it?” Would they have access to files from other services running on the same server (having separation between services can help with this)? Would they have access to unencrypted files with sensitive data? It’s all theoretical, until it isn’t…\n
    \n
    If you do expose services to the internet monitor your logs to see if there is anything “unusual” happening. Be prepared to see lots of bots attempting to hack services. It may be scary at first, but relatively harmless if you’ve followed the above recommendations. “Failed logins” by the thousands are fine. fail2ban can help cut that down a bit though.\n
    \n
    Overall I’d say start small and start “internal” (nothing exposed to the internet). Get through a few update/upgrade cycles to see how things go. And ask questions! Especially about any specific services and how to deploy them securely. Some are more risky than others.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1729448586 {#4028
    date: 2024-10-20 20:23:06.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4016 …}
  +nested: Doctrine\ORM\PersistentCollection {#4014 …}
  +votes: Doctrine\ORM\PersistentCollection {#4012 …}
  +reports: Doctrine\ORM\PersistentCollection {#4010 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3978 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3982 …}
  -id: 350111
  -bodyTs: "'90':73 'access':414,436 'accident':245 'add':254,275 'addit':179 'address':277 'admin':198 'admin/password':298 'advic':12,58 'ansibl':159 'anyth':110,467 'appli':83,103 'approach':203,212 'area':314 'ask':539 'attack':312 'attempt':477 'attent':93 'authent':165 'autom':116,141 'away':347 'bad':9 'basic':11 'better':170 'beyond':200 'big':29 'bigger':376 'bit':511 'blocklist':280 'bot':294,476 'catch':292 'chang':185,308 'checkout':156 'choos':167 'come':78 'connect':339 'context':39 'could':291 'cut':507 'cycl':532 'd':515 'data':442 'date':90 'default':187,197 'deploy':549 'depth':207,236 'didn':266 'dilig':81 'doesn':317 'done':155 'easi':146,351 'enabl':175 'ensur':240 'especi':541 'everyth':380 'exampl':232 'expect':268 'expos':109,246,253,322,329,454,523 'exposur':218,389 'fail':497 'fail2ban':272,504 'figur':137 'file':416,439 'find':296 'fine':503 'firewal':18,238 'first':61,486 'follow':493 'forget':135 'get':5,527 'go':3,537 'good':164,168 'got':399 'hack':231,479 'handl':409 'happen':223,404,469 'harmless':489 'haven':33,306 'help':143,333,430,506 'home':342 'host':129 'hygien':166 'intend':43,251 'intern':521 'internet':113,126,325,370,458,526 'ip':276 'isn':449 'keep':62,85 'known':122 'layer':211,256 'like':152,158,271 'link':52 'log':461 'login':498 'long':172 'lot':7,37,474 'm':346 'make':144 'malici':397 'may':482 'mfa':176 'mind':64 'minim':310,387 'monitor':459 'need':319,364 'news':96 'nextcloud':302 'noth':522 'often':193 'one':225 'option':360 'other':557 'overal':513 'passphras':173 'password':169,188,401 'patch':84,105 'pay':92 'person':398 'popular':359 'prepar':471 'problem':348 'process':69 'proper':237 'protect':180,258 'provid':35 'public':367 'question':393,540 're':2,99 'reason':15 'recommend':496 'regular':104 'relat':488 'riski':555 'run':263,420 'say':516 'scan':120 'scari':484 'second':162 'secur':66,76,95,205,214,234,551 'see':463,473,534 'self':128 'self-host':127 'sensit':441 'separ':426 'serious':386 'server':303,343,424 'servic':228,247,262,363,419,428,455,480,545 'set':132 'setup':192,353 'simpli':119 'small':518 'softwar':86,190 'sometim':259 'specif':51,544 'start':283,517,520 'step':377 'sure':183 'surfac':313 'surmis':24 'system':117,229 'tailscal':354 'take':209 'taken':384 'temporari':279 'theoret':446 'thing':72,157,270,536 'think':390 'though':391,512 'thousand':501 'thus':150 'topic':30 'tri':284 'two':358 'understand':215,371 'unencrypt':438 'unusu':468 'up-to-d':87 'update/upgrade':531 'use':16,269 'user':199,299 'user/passwords':285 've':492 'vpns':331 'vulner':123 'want':337 'way':139 'will':101 'wireguard':356 'work':289 'would':403,407,411,433 'yet':171,309"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/8239406"
  +editedAt: DateTimeImmutable @1729415747 {#3960
    date: 2024-10-20 11:15:47.0 +02:00
  }
  +createdAt: DateTimeImmutable @1706544693 {#4027
    date: 2024-01-29 17:11:33.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
8 DENIED moderate
App\Entity\EntryComment {#4018
  +user: App\Entity\User {#3967 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    You’re going to get a lot of bad or basic advice with no reasoning (use a firewall) in here… And as you surmised this is a very big topic and you haven’t provided a lot of context about what you intend to do. I don’t have any specific links, but I do have some advice for you:\n
    \n
    First - keep in mind that security is a process not a thing. 90% of your security will come from being diligent about applying patches, keeping software up-to-date, and paying attention to security news. If you’re not willing to apply regular patches then don’t expose anything to the internet. There are automated systems that simply scan for known vulnerabilities on the internet. Self-hosting is NOT “set it and forget it”. Figuring out ways to automate this help make it easy to do and thus more likely to be done. Checkout things like Ansible for that.\n
    \n
    Second is good authentication hygiene. Choose good passwords. Better yet long passphrases. Or enable MFA and other additional protections. And BE SURE TO CHANGE ANY DEFAULT PASSWORDS for software you setup. Often there is some default ‘admin’ user.\n
    \n
    Beyond that your approach is"security in depth" - you take a layered approach to security understanding what your exposure is and what will happen should one of your services / systems be hacked.\n
    \n
    Examples of security in depth:\n
    \n
    - Proper firewalling will ensure that you don’t accidentally expose services you don’t intend to expose (adds a layer of protection). Sometimes there are services running that you didn’t expect.\n
    - Use things like “fail2ban” that will add IP addresses to temporary blocklists if they start trying user/passwords that don’t work. This could catch a bot from finding that “admin/password” user on your Nextcloud server that you haven’t changed yet…\n
    \n
    Minimize your attack surface area. If it doesn’t need to be exposed to the internet then don’t expose it. VPNs can help with the “I want to connect to my home server while I’m away” problem and are easy to setup (tailscale and wireguard being two popular options). If your service needs to be “public” to the internet understand that this is a bigger step and that everything here should be taken more seriously.\n
    \n
    Minimize your exposure. Think though the question of “if a malicious person got this password what would happen and how would I handle it?” Would they have access to files from other services running on the same server (having separation between services can help with this)? Would they have access to unencrypted files with sensitive data? It’s all theoretical, until it isn’t…\n
    \n
    If you do expose services to the internet monitor your logs to see if there is anything “unusual” happening. Be prepared to see lots of bots attempting to hack services. It may be scary at first, but relatively harmless if you’ve followed the above recommendations. “Failed logins” by the thousands are fine. fail2ban can help cut that down a bit though.\n
    \n
    Overall I’d say start small and start “internal” (nothing exposed to the internet). Get through a few update/upgrade cycles to see how things go. And ask questions! Especially about any specific services and how to deploy them securely. Some are more risky than others.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1729448586 {#4028
    date: 2024-10-20 20:23:06.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4016 …}
  +nested: Doctrine\ORM\PersistentCollection {#4014 …}
  +votes: Doctrine\ORM\PersistentCollection {#4012 …}
  +reports: Doctrine\ORM\PersistentCollection {#4010 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3978 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3982 …}
  -id: 350111
  -bodyTs: "'90':73 'access':414,436 'accident':245 'add':254,275 'addit':179 'address':277 'admin':198 'admin/password':298 'advic':12,58 'ansibl':159 'anyth':110,467 'appli':83,103 'approach':203,212 'area':314 'ask':539 'attack':312 'attempt':477 'attent':93 'authent':165 'autom':116,141 'away':347 'bad':9 'basic':11 'better':170 'beyond':200 'big':29 'bigger':376 'bit':511 'blocklist':280 'bot':294,476 'catch':292 'chang':185,308 'checkout':156 'choos':167 'come':78 'connect':339 'context':39 'could':291 'cut':507 'cycl':532 'd':515 'data':442 'date':90 'default':187,197 'deploy':549 'depth':207,236 'didn':266 'dilig':81 'doesn':317 'done':155 'easi':146,351 'enabl':175 'ensur':240 'especi':541 'everyth':380 'exampl':232 'expect':268 'expos':109,246,253,322,329,454,523 'exposur':218,389 'fail':497 'fail2ban':272,504 'figur':137 'file':416,439 'find':296 'fine':503 'firewal':18,238 'first':61,486 'follow':493 'forget':135 'get':5,527 'go':3,537 'good':164,168 'got':399 'hack':231,479 'handl':409 'happen':223,404,469 'harmless':489 'haven':33,306 'help':143,333,430,506 'home':342 'host':129 'hygien':166 'intend':43,251 'intern':521 'internet':113,126,325,370,458,526 'ip':276 'isn':449 'keep':62,85 'known':122 'layer':211,256 'like':152,158,271 'link':52 'log':461 'login':498 'long':172 'lot':7,37,474 'm':346 'make':144 'malici':397 'may':482 'mfa':176 'mind':64 'minim':310,387 'monitor':459 'need':319,364 'news':96 'nextcloud':302 'noth':522 'often':193 'one':225 'option':360 'other':557 'overal':513 'passphras':173 'password':169,188,401 'patch':84,105 'pay':92 'person':398 'popular':359 'prepar':471 'problem':348 'process':69 'proper':237 'protect':180,258 'provid':35 'public':367 'question':393,540 're':2,99 'reason':15 'recommend':496 'regular':104 'relat':488 'riski':555 'run':263,420 'say':516 'scan':120 'scari':484 'second':162 'secur':66,76,95,205,214,234,551 'see':463,473,534 'self':128 'self-host':127 'sensit':441 'separ':426 'serious':386 'server':303,343,424 'servic':228,247,262,363,419,428,455,480,545 'set':132 'setup':192,353 'simpli':119 'small':518 'softwar':86,190 'sometim':259 'specif':51,544 'start':283,517,520 'step':377 'sure':183 'surfac':313 'surmis':24 'system':117,229 'tailscal':354 'take':209 'taken':384 'temporari':279 'theoret':446 'thing':72,157,270,536 'think':390 'though':391,512 'thousand':501 'thus':150 'topic':30 'tri':284 'two':358 'understand':215,371 'unencrypt':438 'unusu':468 'up-to-d':87 'update/upgrade':531 'use':16,269 'user':199,299 'user/passwords':285 've':492 'vpns':331 'vulner':123 'want':337 'way':139 'will':101 'wireguard':356 'work':289 'would':403,407,411,433 'yet':171,309"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sh.itjust.works/comment/8239406"
  +editedAt: DateTimeImmutable @1729415747 {#3960
    date: 2024-10-20 11:15:47.0 +02:00
  }
  +createdAt: DateTimeImmutable @1706544693 {#4027
    date: 2024-01-29 17:11:33.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
10 DENIED moderate
App\Entity\EntryComment {#4057
  +user: App\Entity\User {#4047 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    I’m not expert but for the sake of getting some discussion going:\n
    \n
    Don’t open ports on your router to expose services to the open internet.\n
    \n
    Use a vpn when torrenting and make sure your torrent client is set to only use the vpn’s network adapter. This way, if your vpn drops out the torrent client can’t reach the internet.\n
    \n
    I keep everything local and use Tailscale to access things while I’m away from home.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1729412521 {#4069
    date: 2024-10-20 10:22:01.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4062 …}
  +nested: Doctrine\ORM\PersistentCollection {#4061 …}
  +votes: Doctrine\ORM\PersistentCollection {#4051 …}
  +reports: Doctrine\ORM\PersistentCollection {#4054 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4052 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4050 …}
  -id: 349901
  -bodyTs: "'access':72 'adapt':48 'away':77 'client':38,58 'discuss':12 'drop':54 'everyth':66 'expert':4 'expos':22 'get':10 'go':13 'home':79 'internet':27,63 'keep':65 'local':67 'm':2,76 'make':34 'network':47 'open':16,26 'port':17 'reach':61 'router':20 'sake':8 'servic':23 'set':40 'sure':35 'tailscal':70 'thing':73 'torrent':32,37,57 'use':28,43,69 'vpn':30,45,53 'way':50"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7126710"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706540036 {#4070
    date: 2024-01-29 15:53:56.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
11 DENIED edit
App\Entity\EntryComment {#4057
  +user: App\Entity\User {#4047 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    I’m not expert but for the sake of getting some discussion going:\n
    \n
    Don’t open ports on your router to expose services to the open internet.\n
    \n
    Use a vpn when torrenting and make sure your torrent client is set to only use the vpn’s network adapter. This way, if your vpn drops out the torrent client can’t reach the internet.\n
    \n
    I keep everything local and use Tailscale to access things while I’m away from home.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1729412521 {#4069
    date: 2024-10-20 10:22:01.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4062 …}
  +nested: Doctrine\ORM\PersistentCollection {#4061 …}
  +votes: Doctrine\ORM\PersistentCollection {#4051 …}
  +reports: Doctrine\ORM\PersistentCollection {#4054 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4052 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4050 …}
  -id: 349901
  -bodyTs: "'access':72 'adapt':48 'away':77 'client':38,58 'discuss':12 'drop':54 'everyth':66 'expert':4 'expos':22 'get':10 'go':13 'home':79 'internet':27,63 'keep':65 'local':67 'm':2,76 'make':34 'network':47 'open':16,26 'port':17 'reach':61 'router':20 'sake':8 'servic':23 'set':40 'sure':35 'tailscal':70 'thing':73 'torrent':32,37,57 'use':28,43,69 'vpn':30,45,53 'way':50"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7126710"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706540036 {#4070
    date: 2024-01-29 15:53:56.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
12 DENIED moderate
App\Entity\EntryComment {#4057
  +user: App\Entity\User {#4047 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    I’m not expert but for the sake of getting some discussion going:\n
    \n
    Don’t open ports on your router to expose services to the open internet.\n
    \n
    Use a vpn when torrenting and make sure your torrent client is set to only use the vpn’s network adapter. This way, if your vpn drops out the torrent client can’t reach the internet.\n
    \n
    I keep everything local and use Tailscale to access things while I’m away from home.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1729412521 {#4069
    date: 2024-10-20 10:22:01.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4062 …}
  +nested: Doctrine\ORM\PersistentCollection {#4061 …}
  +votes: Doctrine\ORM\PersistentCollection {#4051 …}
  +reports: Doctrine\ORM\PersistentCollection {#4054 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4052 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4050 …}
  -id: 349901
  -bodyTs: "'access':72 'adapt':48 'away':77 'client':38,58 'discuss':12 'drop':54 'everyth':66 'expert':4 'expos':22 'get':10 'go':13 'home':79 'internet':27,63 'keep':65 'local':67 'm':2,76 'make':34 'network':47 'open':16,26 'port':17 'reach':61 'router':20 'sake':8 'servic':23 'set':40 'sure':35 'tailscal':70 'thing':73 'torrent':32,37,57 'use':28,43,69 'vpn':30,45,53 'way':50"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7126710"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706540036 {#4070
    date: 2024-01-29 15:53:56.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
13 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
14 DENIED moderate
App\Entity\EntryComment {#4133
  +user: App\Entity\User {#4146 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    Are you taking about security for your homelab? It essentially comes down to good key hygiene, network security and keeping everything updated.\n
    \n
    Don’t open ports, use a good firewall at the border of the network, use a seedbox for torrenting. Use ACLs alongside VLANs in your network. Understand DNS in terms of how your requests are forwarded and how they are processed.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1706550073 {#4128
    date: 2024-01-29 18:41:13.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4134 …}
  +nested: Doctrine\ORM\PersistentCollection {#4136 …}
  +votes: Doctrine\ORM\PersistentCollection {#4138 …}
  +reports: Doctrine\ORM\PersistentCollection {#4140 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4142 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4144 …}
  -id: 350404
  -bodyTs: "'acl':43 'alongsid':44 'border':33 'come':11 'dns':50 'essenti':10 'everyth':21 'firewal':30 'forward':58 'good':14,29 'homelab':8 'hygien':16 'keep':20 'key':15 'network':17,36,48 'open':25 'port':26 'process':63 'request':56 'secur':5,18 'seedbox':39 'take':3 'term':52 'torrent':41 'understand':49 'updat':22 'use':27,37,42 'vlan':45"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7129951"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706550073 {#4129
    date: 2024-01-29 18:41:13.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
15 DENIED edit
App\Entity\EntryComment {#4133
  +user: App\Entity\User {#4146 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    Are you taking about security for your homelab? It essentially comes down to good key hygiene, network security and keeping everything updated.\n
    \n
    Don’t open ports, use a good firewall at the border of the network, use a seedbox for torrenting. Use ACLs alongside VLANs in your network. Understand DNS in terms of how your requests are forwarded and how they are processed.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1706550073 {#4128
    date: 2024-01-29 18:41:13.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4134 …}
  +nested: Doctrine\ORM\PersistentCollection {#4136 …}
  +votes: Doctrine\ORM\PersistentCollection {#4138 …}
  +reports: Doctrine\ORM\PersistentCollection {#4140 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4142 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4144 …}
  -id: 350404
  -bodyTs: "'acl':43 'alongsid':44 'border':33 'come':11 'dns':50 'essenti':10 'everyth':21 'firewal':30 'forward':58 'good':14,29 'homelab':8 'hygien':16 'keep':20 'key':15 'network':17,36,48 'open':25 'port':26 'process':63 'request':56 'secur':5,18 'seedbox':39 'take':3 'term':52 'torrent':41 'understand':49 'updat':22 'use':27,37,42 'vlan':45"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7129951"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706550073 {#4129
    date: 2024-01-29 18:41:13.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
16 DENIED moderate
App\Entity\EntryComment {#4133
  +user: App\Entity\User {#4146 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    Are you taking about security for your homelab? It essentially comes down to good key hygiene, network security and keeping everything updated.\n
    \n
    Don’t open ports, use a good firewall at the border of the network, use a seedbox for torrenting. Use ACLs alongside VLANs in your network. Understand DNS in terms of how your requests are forwarded and how they are processed.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1706550073 {#4128
    date: 2024-01-29 18:41:13.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4134 …}
  +nested: Doctrine\ORM\PersistentCollection {#4136 …}
  +votes: Doctrine\ORM\PersistentCollection {#4138 …}
  +reports: Doctrine\ORM\PersistentCollection {#4140 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4142 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4144 …}
  -id: 350404
  -bodyTs: "'acl':43 'alongsid':44 'border':33 'come':11 'dns':50 'essenti':10 'everyth':21 'firewal':30 'forward':58 'good':14,29 'homelab':8 'hygien':16 'keep':20 'key':15 'network':17,36,48 'open':25 'port':26 'process':63 'request':56 'secur':5,18 'seedbox':39 'take':3 'term':52 'torrent':41 'understand':49 'updat':22 'use':27,37,42 'vlan':45"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7129951"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706550073 {#4129
    date: 2024-01-29 18:41:13.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
17 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
18 DENIED moderate
App\Entity\EntryComment {#4207
  +user: App\Entity\User {#4220 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    **Your basic requirements are:**\n
    \n
    - Some kind of domain / subdomain payed or free;\n
    - Preferably Home ISP that has provides public IP addresses - no CGNAT BS;\n
    - Ideally a static IP at home, but you can do just fine with a dynamic DNS service such as [freedns.afraid.org](https://freedns.afraid.org/).\n
    \n
    **Quick setup guide and checklist**:\n
    \n
    1. Create your subdomain for the dynamic DNS service [freedns.afraid.org](https://freedns.afraid.org/) and install the daemon on the server - will update your domain with your dynamic IP when it changes;\n
    2. List what ports you need remote access to;\n
    3. Isolate the server from your main network as much as possible. If possible have then on a different public IP either using a VLAN or better yet with an entire physical network just for that - avoids VLAN hopping attacks and DDoS attacks to the server that will also take your internet down;\n
    4. If you’re using VLANs then configure your switch properly. Decent switches allows you to restrict the WebUI to a certain VLAN / physical port - this will make sure if your server is hacked they won’t be able to access the Switch’s UI and reconfigure their own port to access the entire network. Note that cheap TP-Link switches usually don’t have a way to specify this;\n
    5. Configure your ISP router to assign a static local IP to the server and port forward what’s supposed to be exposed to the internet to the server;\n
    6. Only expose required services (nginx, game server, program x) to the Internet us. Everything else such as SSH, configuration interfaces and whatnot can be moved to another private network and/or a WireGuard VPN you can connect to when you want to manage the server;\n
    7. Use custom ports with 5 digits for everything - something like 23901 (up to 65535) to make your service(s) harder to find;\n
    8. Disable IPv6? Might be easier than dealing with a dual stack firewall and/or other complexities;\n
    9. Use nftables / iptables / another firewall and set it to drop everything but those ports you need for services and management VPN access to work - [10 minute guide](https://wiki.nftables.org/wiki-nftables/index.php/Quick_reference-nftables_in_10_minutes);\n
    10. Configure nftables to only allow traffic coming from public IP addresses (IPs outside your home network IP / VPN range) to the Wireguard or required services port - this will protect your server if by some mistake the router starts forwarding more traffic from the internet to the server than it should;\n
    11. Configure nftables to restrict what countries are allowed to access your server. Most likely you only need to allow incoming connections [from your country](https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching) and more [details here](https://lemmy.world/post/11162264).\n
    \n
    Realistically speaking if you’re doing this just for a few friends why not require them to access the server through WireGuard VPN? This will reduce the risk a LOT and won’t probably impact the performance. [Here a decent setup guide](https://www.digitalocean.com/community/tutorials/how-to-set-up-wireguard-on-debian-11) and you [might use this GUI](https://github.com/ngoduykhanh/wireguard-ui) to add/remove clients easily.\n
    \n
    Don’t be afraid to expose the Wireguard port because if someone tried to connect and they don’t authenticate with the right key the server will silently drop the packets.\n
    \n
    Now if your ISP doesn’t provide you with a public IP / port forwarding abilities you may want to [read this](https://blog.aiquiral.me/bypass-cgnat#introduction) in order to find why you should avoid Cloudflare tunnels and how to setup and alternative / more private solution.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1706541016 {#4201
    date: 2024-01-29 16:10:16.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4208 …}
  +nested: Doctrine\ORM\PersistentCollection {#4210 …}
  +votes: Doctrine\ORM\PersistentCollection {#4212 …}
  +reports: Doctrine\ORM\PersistentCollection {#4214 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4216 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4218 …}
  -id: 349945
  -bodyTs: "'/)':65 '/).':47 '/bypass-cgnat#introduction)':559 '/community/tutorials/how-to-set-up-wireguard-on-debian-11)':491 '/ngoduykhanh/wireguard-ui)':500 '/post/11162264).':446 '/wiki-nftables/index.php/geoip_matching)':439 '/wiki-nftables/index.php/quick_reference-nftables_in_10_minutes);':360 '1':53 '10':355,361 '11':412 '2':84 '23901':302 '3':93 '4':146 '5':217,296 '6':246 '65535':305 '7':291 '8':314 '9':330 'abil':550 'abl':184 'access':91,186,197,352,422,464 'add/remove':502 'address':21,372 'afraid':508 'allow':159,366,420,431 'also':141 'altern':575 'and/or':276,327 'anoth':273,334 'assign':223 'attack':132,135 'authent':524 'avoid':129,567 'basic':2 'better':119 'blog.aiquiral.me':558 'blog.aiquiral.me/bypass-cgnat#introduction)':557 'bs':24 'certain':167 'cgnat':23 'chang':83 'cheap':203 'checklist':52 'client':503 'cloudflar':568 'come':368 'complex':329 'configur':153,218,265,362,413 'connect':282,433,519 'countri':418,436 'creat':54 'custom':293 'daemon':69 'ddos':134 'deal':321 'decent':157,486 'detail':442 'differ':111 'digit':297 'disabl':315 'dns':40,60 'doesn':540 'domain':8,76 'drop':340,533 'dual':324 'dynam':39,59,79 'easier':319 'easili':504 'either':114 'els':261 'entir':123,199 'everyth':260,299,341 'expos':239,248,510 'find':313,563 'fine':36 'firewal':326,335 'forward':233,400,549 'free':12 'freedns.afraid.org':44,46,62,64 'freedns.afraid.org/)':63 'freedns.afraid.org/).':45 'friend':458 'game':252 'github.com':499 'github.com/ngoduykhanh/wireguard-ui)':498 'gui':497 'guid':50,357,488 'hack':179 'harder':311 'home':14,30,376 'hop':131 'ideal':25 'impact':481 'incom':432 'instal':67 'interfac':266 'internet':144,242,258,405 'ip':20,28,80,113,227,371,373,378,547 'iptabl':333 'ipv6':316 'isol':94 'isp':15,220,539 'key':528 'kind':6 'lemmy.world':445 'lemmy.world/post/11162264).':444 'like':301,426 'link':206 'list':85 'local':226 'lot':476 'main':99 'make':173,307 'manag':288,350 'may':552 'might':317,494 'minut':356 'mistak':396 'move':271 'much':102 'need':89,346,429 'network':100,125,200,275,377 'nftabl':332,363,414 'nginx':251 'note':201 'order':561 'outsid':374 'packet':535 'pay':10 'perform':483 'physic':124,169 'port':87,170,195,232,294,344,387,513,548 'possibl':104,106 'prefer':13 'privat':274,577 'probabl':480 'program':254 'proper':156 'protect':390 'provid':18,542 'public':19,112,370,546 'quick':48 'rang':380 're':149,451 'read':555 'realist':447 'reconfigur':192 'reduc':472 'remot':90 'requir':3,249,385,461 'restrict':162,416 'right':527 'risk':474 'router':221,398 'server':72,96,138,177,230,245,253,290,392,408,424,466,530 'servic':41,61,250,309,348,386 'set':337 'setup':49,487,573 'silent':532 'solut':578 'someon':516 'someth':300 'speak':448 'specifi':215 'ssh':264 'stack':325 'start':399 'static':27,225 'subdomain':9,56 'suppos':236 'sure':174 'switch':155,158,188,207 'take':142 'tp':205 'tp-link':204 'traffic':367,402 'tri':517 'tunnel':569 'ui':190 'updat':74 'us':259 'use':115,150,292,331,495 'usual':208 'vlan':117,130,151,168 'vpn':279,351,379,469 'want':286,553 'way':213 'webui':164 'whatnot':268 'wiki.nftables.org':359,438 'wiki.nftables.org/wiki-nftables/index.php/geoip_matching)':437 'wiki.nftables.org/wiki-nftables/index.php/quick_reference-nftables_in_10_minutes);':358 'wireguard':278,383,468,512 'won':181,478 'work':354 'www.digitalocean.com':490 'www.digitalocean.com/community/tutorials/how-to-set-up-wireguard-on-debian-11)':489 'x':255 'yet':120"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7126969"
  +editedAt: DateTimeImmutable @1729412383 {#4202
    date: 2024-10-20 10:19:43.0 +02:00
  }
  +createdAt: DateTimeImmutable @1706541016 {#4203
    date: 2024-01-29 16:10:16.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
19 DENIED edit
App\Entity\EntryComment {#4207
  +user: App\Entity\User {#4220 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    **Your basic requirements are:**\n
    \n
    - Some kind of domain / subdomain payed or free;\n
    - Preferably Home ISP that has provides public IP addresses - no CGNAT BS;\n
    - Ideally a static IP at home, but you can do just fine with a dynamic DNS service such as [freedns.afraid.org](https://freedns.afraid.org/).\n
    \n
    **Quick setup guide and checklist**:\n
    \n
    1. Create your subdomain for the dynamic DNS service [freedns.afraid.org](https://freedns.afraid.org/) and install the daemon on the server - will update your domain with your dynamic IP when it changes;\n
    2. List what ports you need remote access to;\n
    3. Isolate the server from your main network as much as possible. If possible have then on a different public IP either using a VLAN or better yet with an entire physical network just for that - avoids VLAN hopping attacks and DDoS attacks to the server that will also take your internet down;\n
    4. If you’re using VLANs then configure your switch properly. Decent switches allows you to restrict the WebUI to a certain VLAN / physical port - this will make sure if your server is hacked they won’t be able to access the Switch’s UI and reconfigure their own port to access the entire network. Note that cheap TP-Link switches usually don’t have a way to specify this;\n
    5. Configure your ISP router to assign a static local IP to the server and port forward what’s supposed to be exposed to the internet to the server;\n
    6. Only expose required services (nginx, game server, program x) to the Internet us. Everything else such as SSH, configuration interfaces and whatnot can be moved to another private network and/or a WireGuard VPN you can connect to when you want to manage the server;\n
    7. Use custom ports with 5 digits for everything - something like 23901 (up to 65535) to make your service(s) harder to find;\n
    8. Disable IPv6? Might be easier than dealing with a dual stack firewall and/or other complexities;\n
    9. Use nftables / iptables / another firewall and set it to drop everything but those ports you need for services and management VPN access to work - [10 minute guide](https://wiki.nftables.org/wiki-nftables/index.php/Quick_reference-nftables_in_10_minutes);\n
    10. Configure nftables to only allow traffic coming from public IP addresses (IPs outside your home network IP / VPN range) to the Wireguard or required services port - this will protect your server if by some mistake the router starts forwarding more traffic from the internet to the server than it should;\n
    11. Configure nftables to restrict what countries are allowed to access your server. Most likely you only need to allow incoming connections [from your country](https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching) and more [details here](https://lemmy.world/post/11162264).\n
    \n
    Realistically speaking if you’re doing this just for a few friends why not require them to access the server through WireGuard VPN? This will reduce the risk a LOT and won’t probably impact the performance. [Here a decent setup guide](https://www.digitalocean.com/community/tutorials/how-to-set-up-wireguard-on-debian-11) and you [might use this GUI](https://github.com/ngoduykhanh/wireguard-ui) to add/remove clients easily.\n
    \n
    Don’t be afraid to expose the Wireguard port because if someone tried to connect and they don’t authenticate with the right key the server will silently drop the packets.\n
    \n
    Now if your ISP doesn’t provide you with a public IP / port forwarding abilities you may want to [read this](https://blog.aiquiral.me/bypass-cgnat#introduction) in order to find why you should avoid Cloudflare tunnels and how to setup and alternative / more private solution.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1706541016 {#4201
    date: 2024-01-29 16:10:16.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4208 …}
  +nested: Doctrine\ORM\PersistentCollection {#4210 …}
  +votes: Doctrine\ORM\PersistentCollection {#4212 …}
  +reports: Doctrine\ORM\PersistentCollection {#4214 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4216 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4218 …}
  -id: 349945
  -bodyTs: "'/)':65 '/).':47 '/bypass-cgnat#introduction)':559 '/community/tutorials/how-to-set-up-wireguard-on-debian-11)':491 '/ngoduykhanh/wireguard-ui)':500 '/post/11162264).':446 '/wiki-nftables/index.php/geoip_matching)':439 '/wiki-nftables/index.php/quick_reference-nftables_in_10_minutes);':360 '1':53 '10':355,361 '11':412 '2':84 '23901':302 '3':93 '4':146 '5':217,296 '6':246 '65535':305 '7':291 '8':314 '9':330 'abil':550 'abl':184 'access':91,186,197,352,422,464 'add/remove':502 'address':21,372 'afraid':508 'allow':159,366,420,431 'also':141 'altern':575 'and/or':276,327 'anoth':273,334 'assign':223 'attack':132,135 'authent':524 'avoid':129,567 'basic':2 'better':119 'blog.aiquiral.me':558 'blog.aiquiral.me/bypass-cgnat#introduction)':557 'bs':24 'certain':167 'cgnat':23 'chang':83 'cheap':203 'checklist':52 'client':503 'cloudflar':568 'come':368 'complex':329 'configur':153,218,265,362,413 'connect':282,433,519 'countri':418,436 'creat':54 'custom':293 'daemon':69 'ddos':134 'deal':321 'decent':157,486 'detail':442 'differ':111 'digit':297 'disabl':315 'dns':40,60 'doesn':540 'domain':8,76 'drop':340,533 'dual':324 'dynam':39,59,79 'easier':319 'easili':504 'either':114 'els':261 'entir':123,199 'everyth':260,299,341 'expos':239,248,510 'find':313,563 'fine':36 'firewal':326,335 'forward':233,400,549 'free':12 'freedns.afraid.org':44,46,62,64 'freedns.afraid.org/)':63 'freedns.afraid.org/).':45 'friend':458 'game':252 'github.com':499 'github.com/ngoduykhanh/wireguard-ui)':498 'gui':497 'guid':50,357,488 'hack':179 'harder':311 'home':14,30,376 'hop':131 'ideal':25 'impact':481 'incom':432 'instal':67 'interfac':266 'internet':144,242,258,405 'ip':20,28,80,113,227,371,373,378,547 'iptabl':333 'ipv6':316 'isol':94 'isp':15,220,539 'key':528 'kind':6 'lemmy.world':445 'lemmy.world/post/11162264).':444 'like':301,426 'link':206 'list':85 'local':226 'lot':476 'main':99 'make':173,307 'manag':288,350 'may':552 'might':317,494 'minut':356 'mistak':396 'move':271 'much':102 'need':89,346,429 'network':100,125,200,275,377 'nftabl':332,363,414 'nginx':251 'note':201 'order':561 'outsid':374 'packet':535 'pay':10 'perform':483 'physic':124,169 'port':87,170,195,232,294,344,387,513,548 'possibl':104,106 'prefer':13 'privat':274,577 'probabl':480 'program':254 'proper':156 'protect':390 'provid':18,542 'public':19,112,370,546 'quick':48 'rang':380 're':149,451 'read':555 'realist':447 'reconfigur':192 'reduc':472 'remot':90 'requir':3,249,385,461 'restrict':162,416 'right':527 'risk':474 'router':221,398 'server':72,96,138,177,230,245,253,290,392,408,424,466,530 'servic':41,61,250,309,348,386 'set':337 'setup':49,487,573 'silent':532 'solut':578 'someon':516 'someth':300 'speak':448 'specifi':215 'ssh':264 'stack':325 'start':399 'static':27,225 'subdomain':9,56 'suppos':236 'sure':174 'switch':155,158,188,207 'take':142 'tp':205 'tp-link':204 'traffic':367,402 'tri':517 'tunnel':569 'ui':190 'updat':74 'us':259 'use':115,150,292,331,495 'usual':208 'vlan':117,130,151,168 'vpn':279,351,379,469 'want':286,553 'way':213 'webui':164 'whatnot':268 'wiki.nftables.org':359,438 'wiki.nftables.org/wiki-nftables/index.php/geoip_matching)':437 'wiki.nftables.org/wiki-nftables/index.php/quick_reference-nftables_in_10_minutes);':358 'wireguard':278,383,468,512 'won':181,478 'work':354 'www.digitalocean.com':490 'www.digitalocean.com/community/tutorials/how-to-set-up-wireguard-on-debian-11)':489 'x':255 'yet':120"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7126969"
  +editedAt: DateTimeImmutable @1729412383 {#4202
    date: 2024-10-20 10:19:43.0 +02:00
  }
  +createdAt: DateTimeImmutable @1706541016 {#4203
    date: 2024-01-29 16:10:16.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
20 DENIED moderate
App\Entity\EntryComment {#4207
  +user: App\Entity\User {#4220 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    **Your basic requirements are:**\n
    \n
    - Some kind of domain / subdomain payed or free;\n
    - Preferably Home ISP that has provides public IP addresses - no CGNAT BS;\n
    - Ideally a static IP at home, but you can do just fine with a dynamic DNS service such as [freedns.afraid.org](https://freedns.afraid.org/).\n
    \n
    **Quick setup guide and checklist**:\n
    \n
    1. Create your subdomain for the dynamic DNS service [freedns.afraid.org](https://freedns.afraid.org/) and install the daemon on the server - will update your domain with your dynamic IP when it changes;\n
    2. List what ports you need remote access to;\n
    3. Isolate the server from your main network as much as possible. If possible have then on a different public IP either using a VLAN or better yet with an entire physical network just for that - avoids VLAN hopping attacks and DDoS attacks to the server that will also take your internet down;\n
    4. If you’re using VLANs then configure your switch properly. Decent switches allows you to restrict the WebUI to a certain VLAN / physical port - this will make sure if your server is hacked they won’t be able to access the Switch’s UI and reconfigure their own port to access the entire network. Note that cheap TP-Link switches usually don’t have a way to specify this;\n
    5. Configure your ISP router to assign a static local IP to the server and port forward what’s supposed to be exposed to the internet to the server;\n
    6. Only expose required services (nginx, game server, program x) to the Internet us. Everything else such as SSH, configuration interfaces and whatnot can be moved to another private network and/or a WireGuard VPN you can connect to when you want to manage the server;\n
    7. Use custom ports with 5 digits for everything - something like 23901 (up to 65535) to make your service(s) harder to find;\n
    8. Disable IPv6? Might be easier than dealing with a dual stack firewall and/or other complexities;\n
    9. Use nftables / iptables / another firewall and set it to drop everything but those ports you need for services and management VPN access to work - [10 minute guide](https://wiki.nftables.org/wiki-nftables/index.php/Quick_reference-nftables_in_10_minutes);\n
    10. Configure nftables to only allow traffic coming from public IP addresses (IPs outside your home network IP / VPN range) to the Wireguard or required services port - this will protect your server if by some mistake the router starts forwarding more traffic from the internet to the server than it should;\n
    11. Configure nftables to restrict what countries are allowed to access your server. Most likely you only need to allow incoming connections [from your country](https://wiki.nftables.org/wiki-nftables/index.php/GeoIP_matching) and more [details here](https://lemmy.world/post/11162264).\n
    \n
    Realistically speaking if you’re doing this just for a few friends why not require them to access the server through WireGuard VPN? This will reduce the risk a LOT and won’t probably impact the performance. [Here a decent setup guide](https://www.digitalocean.com/community/tutorials/how-to-set-up-wireguard-on-debian-11) and you [might use this GUI](https://github.com/ngoduykhanh/wireguard-ui) to add/remove clients easily.\n
    \n
    Don’t be afraid to expose the Wireguard port because if someone tried to connect and they don’t authenticate with the right key the server will silently drop the packets.\n
    \n
    Now if your ISP doesn’t provide you with a public IP / port forwarding abilities you may want to [read this](https://blog.aiquiral.me/bypass-cgnat#introduction) in order to find why you should avoid Cloudflare tunnels and how to setup and alternative / more private solution.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1706541016 {#4201
    date: 2024-01-29 16:10:16.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4208 …}
  +nested: Doctrine\ORM\PersistentCollection {#4210 …}
  +votes: Doctrine\ORM\PersistentCollection {#4212 …}
  +reports: Doctrine\ORM\PersistentCollection {#4214 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4216 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4218 …}
  -id: 349945
  -bodyTs: "'/)':65 '/).':47 '/bypass-cgnat#introduction)':559 '/community/tutorials/how-to-set-up-wireguard-on-debian-11)':491 '/ngoduykhanh/wireguard-ui)':500 '/post/11162264).':446 '/wiki-nftables/index.php/geoip_matching)':439 '/wiki-nftables/index.php/quick_reference-nftables_in_10_minutes);':360 '1':53 '10':355,361 '11':412 '2':84 '23901':302 '3':93 '4':146 '5':217,296 '6':246 '65535':305 '7':291 '8':314 '9':330 'abil':550 'abl':184 'access':91,186,197,352,422,464 'add/remove':502 'address':21,372 'afraid':508 'allow':159,366,420,431 'also':141 'altern':575 'and/or':276,327 'anoth':273,334 'assign':223 'attack':132,135 'authent':524 'avoid':129,567 'basic':2 'better':119 'blog.aiquiral.me':558 'blog.aiquiral.me/bypass-cgnat#introduction)':557 'bs':24 'certain':167 'cgnat':23 'chang':83 'cheap':203 'checklist':52 'client':503 'cloudflar':568 'come':368 'complex':329 'configur':153,218,265,362,413 'connect':282,433,519 'countri':418,436 'creat':54 'custom':293 'daemon':69 'ddos':134 'deal':321 'decent':157,486 'detail':442 'differ':111 'digit':297 'disabl':315 'dns':40,60 'doesn':540 'domain':8,76 'drop':340,533 'dual':324 'dynam':39,59,79 'easier':319 'easili':504 'either':114 'els':261 'entir':123,199 'everyth':260,299,341 'expos':239,248,510 'find':313,563 'fine':36 'firewal':326,335 'forward':233,400,549 'free':12 'freedns.afraid.org':44,46,62,64 'freedns.afraid.org/)':63 'freedns.afraid.org/).':45 'friend':458 'game':252 'github.com':499 'github.com/ngoduykhanh/wireguard-ui)':498 'gui':497 'guid':50,357,488 'hack':179 'harder':311 'home':14,30,376 'hop':131 'ideal':25 'impact':481 'incom':432 'instal':67 'interfac':266 'internet':144,242,258,405 'ip':20,28,80,113,227,371,373,378,547 'iptabl':333 'ipv6':316 'isol':94 'isp':15,220,539 'key':528 'kind':6 'lemmy.world':445 'lemmy.world/post/11162264).':444 'like':301,426 'link':206 'list':85 'local':226 'lot':476 'main':99 'make':173,307 'manag':288,350 'may':552 'might':317,494 'minut':356 'mistak':396 'move':271 'much':102 'need':89,346,429 'network':100,125,200,275,377 'nftabl':332,363,414 'nginx':251 'note':201 'order':561 'outsid':374 'packet':535 'pay':10 'perform':483 'physic':124,169 'port':87,170,195,232,294,344,387,513,548 'possibl':104,106 'prefer':13 'privat':274,577 'probabl':480 'program':254 'proper':156 'protect':390 'provid':18,542 'public':19,112,370,546 'quick':48 'rang':380 're':149,451 'read':555 'realist':447 'reconfigur':192 'reduc':472 'remot':90 'requir':3,249,385,461 'restrict':162,416 'right':527 'risk':474 'router':221,398 'server':72,96,138,177,230,245,253,290,392,408,424,466,530 'servic':41,61,250,309,348,386 'set':337 'setup':49,487,573 'silent':532 'solut':578 'someon':516 'someth':300 'speak':448 'specifi':215 'ssh':264 'stack':325 'start':399 'static':27,225 'subdomain':9,56 'suppos':236 'sure':174 'switch':155,158,188,207 'take':142 'tp':205 'tp-link':204 'traffic':367,402 'tri':517 'tunnel':569 'ui':190 'updat':74 'us':259 'use':115,150,292,331,495 'usual':208 'vlan':117,130,151,168 'vpn':279,351,379,469 'want':286,553 'way':213 'webui':164 'whatnot':268 'wiki.nftables.org':359,438 'wiki.nftables.org/wiki-nftables/index.php/geoip_matching)':437 'wiki.nftables.org/wiki-nftables/index.php/quick_reference-nftables_in_10_minutes);':358 'wireguard':278,383,468,512 'won':181,478 'work':354 'www.digitalocean.com':490 'www.digitalocean.com/community/tutorials/how-to-set-up-wireguard-on-debian-11)':489 'x':255 'yet':120"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7126969"
  +editedAt: DateTimeImmutable @1729412383 {#4202
    date: 2024-10-20 10:19:43.0 +02:00
  }
  +createdAt: DateTimeImmutable @1706541016 {#4203
    date: 2024-01-29 16:10:16.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
21 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
22 DENIED moderate
App\Entity\EntryComment {#4282
  +user: App\Entity\User {#4295 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "I’ve setup wireguard, because it’s only me and an employee using the services. But with that, externally I don’t even seem to have a port open. But wireguard is so fast to be online, that I’m just always connected as soon as I’m online - using a domain and an IP update script"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1729437704 {#4277
    date: 2024-10-20 17:21:44.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4283 …}
  +nested: Doctrine\ORM\PersistentCollection {#4285 …}
  +votes: Doctrine\ORM\PersistentCollection {#4287 …}
  +reports: Doctrine\ORM\PersistentCollection {#4289 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4291 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4293 …}
  -id: 350233
  -bodyTs: "'alway':42 'connect':43 'domain':52 'employe':12 'even':23 'extern':19 'fast':34 'ip':55 'm':40,48 'onlin':37,49 'open':29 'port':28 'script':57 'seem':24 'servic':15 'setup':3 'soon':45 'updat':56 'use':13,50 've':2 'wireguard':4,31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/6586109"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706546921 {#4278
    date: 2024-01-29 17:48:41.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
23 DENIED edit
App\Entity\EntryComment {#4282
  +user: App\Entity\User {#4295 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "I’ve setup wireguard, because it’s only me and an employee using the services. But with that, externally I don’t even seem to have a port open. But wireguard is so fast to be online, that I’m just always connected as soon as I’m online - using a domain and an IP update script"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1729437704 {#4277
    date: 2024-10-20 17:21:44.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4283 …}
  +nested: Doctrine\ORM\PersistentCollection {#4285 …}
  +votes: Doctrine\ORM\PersistentCollection {#4287 …}
  +reports: Doctrine\ORM\PersistentCollection {#4289 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4291 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4293 …}
  -id: 350233
  -bodyTs: "'alway':42 'connect':43 'domain':52 'employe':12 'even':23 'extern':19 'fast':34 'ip':55 'm':40,48 'onlin':37,49 'open':29 'port':28 'script':57 'seem':24 'servic':15 'setup':3 'soon':45 'updat':56 'use':13,50 've':2 'wireguard':4,31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/6586109"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706546921 {#4278
    date: 2024-01-29 17:48:41.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
24 DENIED moderate
App\Entity\EntryComment {#4282
  +user: App\Entity\User {#4295 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "I’ve setup wireguard, because it’s only me and an employee using the services. But with that, externally I don’t even seem to have a port open. But wireguard is so fast to be online, that I’m just always connected as soon as I’m online - using a domain and an IP update script"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1729437704 {#4277
    date: 2024-10-20 17:21:44.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4283 …}
  +nested: Doctrine\ORM\PersistentCollection {#4285 …}
  +votes: Doctrine\ORM\PersistentCollection {#4287 …}
  +reports: Doctrine\ORM\PersistentCollection {#4289 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4291 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4293 …}
  -id: 350233
  -bodyTs: "'alway':42 'connect':43 'domain':52 'employe':12 'even':23 'extern':19 'fast':34 'ip':55 'm':40,48 'onlin':37,49 'open':29 'port':28 'script':57 'seem':24 'servic':15 'setup':3 'soon':45 'updat':56 'use':13,50 've':2 'wireguard':4,31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/6586109"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706546921 {#4278
    date: 2024-01-29 17:48:41.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
25 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
26 DENIED moderate
App\Entity\EntryComment {#4356
  +user: App\Entity\User {#4369 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "Don’t let it out onto the net…"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1706539690 {#4351
    date: 2024-01-29 15:48:10.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4357 …}
  +nested: Doctrine\ORM\PersistentCollection {#4359 …}
  +votes: Doctrine\ORM\PersistentCollection {#4361 …}
  +reports: Doctrine\ORM\PersistentCollection {#4363 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4365 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4367 …}
  -id: 349873
  -bodyTs: "'let':3 'net':8 'onto':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8789022"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706539690 {#4352
    date: 2024-01-29 15:48:10.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
27 DENIED edit
App\Entity\EntryComment {#4356
  +user: App\Entity\User {#4369 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "Don’t let it out onto the net…"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1706539690 {#4351
    date: 2024-01-29 15:48:10.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4357 …}
  +nested: Doctrine\ORM\PersistentCollection {#4359 …}
  +votes: Doctrine\ORM\PersistentCollection {#4361 …}
  +reports: Doctrine\ORM\PersistentCollection {#4363 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4365 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4367 …}
  -id: 349873
  -bodyTs: "'let':3 'net':8 'onto':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8789022"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706539690 {#4352
    date: 2024-01-29 15:48:10.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
28 DENIED moderate
App\Entity\EntryComment {#4356
  +user: App\Entity\User {#4369 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "Don’t let it out onto the net…"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 2
  +score: 0
  +lastActive: DateTime @1706539690 {#4351
    date: 2024-01-29 15:48:10.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4357 …}
  +nested: Doctrine\ORM\PersistentCollection {#4359 …}
  +votes: Doctrine\ORM\PersistentCollection {#4361 …}
  +reports: Doctrine\ORM\PersistentCollection {#4363 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4365 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4367 …}
  -id: 349873
  -bodyTs: "'let':3 'net':8 'onto':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemm.ee/comment/8789022"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706539690 {#4352
    date: 2024-01-29 15:48:10.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
29 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
30 DENIED moderate
App\Entity\EntryComment {#4429
  +user: App\Entity\User {#4442 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "Check out the “Open Source Security Podcast” with Kurt Siegfried and Josh Bressers. It’s not about specifics so much as how to build a mindset around security for IOT and hosting, generally dealing with opensource offerings."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1706561872 {#4424
    date: 2024-01-29 21:57:52.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4430 …}
  +nested: Doctrine\ORM\PersistentCollection {#4432 …}
  +votes: Doctrine\ORM\PersistentCollection {#4434 …}
  +reports: Doctrine\ORM\PersistentCollection {#4436 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4438 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4440 …}
  -id: 350855
  -bodyTs: "'around':27 'bresser':13 'build':24 'check':1 'deal':34 'general':33 'host':32 'iot':30 'josh':12 'kurt':9 'mindset':26 'much':20 'offer':37 'open':4 'opensourc':36 'podcast':7 'secur':6,28 'siegfri':10 'sourc':5 'specif':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7133591"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706561872 {#4425
    date: 2024-01-29 21:57:52.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
31 DENIED edit
App\Entity\EntryComment {#4429
  +user: App\Entity\User {#4442 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "Check out the “Open Source Security Podcast” with Kurt Siegfried and Josh Bressers. It’s not about specifics so much as how to build a mindset around security for IOT and hosting, generally dealing with opensource offerings."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1706561872 {#4424
    date: 2024-01-29 21:57:52.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4430 …}
  +nested: Doctrine\ORM\PersistentCollection {#4432 …}
  +votes: Doctrine\ORM\PersistentCollection {#4434 …}
  +reports: Doctrine\ORM\PersistentCollection {#4436 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4438 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4440 …}
  -id: 350855
  -bodyTs: "'around':27 'bresser':13 'build':24 'check':1 'deal':34 'general':33 'host':32 'iot':30 'josh':12 'kurt':9 'mindset':26 'much':20 'offer':37 'open':4 'opensourc':36 'podcast':7 'secur':6,28 'siegfri':10 'sourc':5 'specif':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7133591"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706561872 {#4425
    date: 2024-01-29 21:57:52.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
32 DENIED moderate
App\Entity\EntryComment {#4429
  +user: App\Entity\User {#4442 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: "Check out the “Open Source Security Podcast” with Kurt Siegfried and Josh Bressers. It’s not about specifics so much as how to build a mindset around security for IOT and hosting, generally dealing with opensource offerings."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1706561872 {#4424
    date: 2024-01-29 21:57:52.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4430 …}
  +nested: Doctrine\ORM\PersistentCollection {#4432 …}
  +votes: Doctrine\ORM\PersistentCollection {#4434 …}
  +reports: Doctrine\ORM\PersistentCollection {#4436 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4438 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4440 …}
  -id: 350855
  -bodyTs: "'around':27 'bresser':13 'build':24 'check':1 'deal':34 'general':33 'host':32 'iot':30 'josh':12 'kurt':9 'mindset':26 'much':20 'offer':37 'open':4 'opensourc':36 'podcast':7 'secur':6,28 'siegfri':10 'sourc':5 'specif':18"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7133591"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706561872 {#4425
    date: 2024-01-29 21:57:52.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
33 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
34 DENIED moderate
App\Entity\EntryComment {#4503
  +user: App\Entity\User {#4516 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    I’ll assume you mean what I mean when I say I want to be safe with my self hosting – that is, “safe” but also easily accessible enough that my friends/family don’t balk the first time they try to log in or reset their password. There are all kinds of strategies you can use to protect your data, but I’ll cover the few that I find to be reasonable.\n
    \n
    1. Port Forwarding – as someone mentioned already, port forwarding raw internet traffic to a server is probably a bad idea based on the information given. Especially since it isn’t strictly necessary.\n
    2. Consumer Grade Tunnel Services – I’m sure there are others, but [cloudflare tunnels](https://www.cloudflare.com/products/tunnel/) can be a safer option of exposing a service to the public internet.\n
    3. Personal VPN (my pick) – if your number of users is small, it may be easiest to set up a private VPN. This has the added benefit of making things like PiHole available to all of your devices wherever you go. Popular options include Tailscale (easiest, but relies on trusting Tailscale) or Wireguard/OpenVPN (bare bones with excellent documentation). I think there are similar options to tailscale through NordVPN (and probably others), where it “magically” handles connecting your devices but then you face a ~5 device limit.\n
    \n
    With Wireguard or OpenVPN you may ask: “How do I do that without opening a port? You just said that was a bad idea!” Well, the best way that I have come up with is to use a VPS (providers include Digital Ocean, Linode to name a few) where you typically get a public IP address for free (as in free beer). You still have a public port open in your virtual private network, but it’s an acceptable risk (in my mind, for my threat model) given it’s on a machine that you don’t own or care about. You can wipe that VPS machine any time you want, the cost is time.\n
    \n
    It’s all a trade-off. You can go to much further lengths than I’ve described here to be “safer” but this is the threshold that I’ve found to be easy and Good Enough for Me™.\n
    \n
    If I were starting over I would start with Tailscale and work up from there. There are many many good options and only you can decide which one is best for your situation!
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1729457610 {#4498
    date: 2024-10-20 22:53:30.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4504 …}
  +nested: Doctrine\ORM\PersistentCollection {#4506 …}
  +votes: Doctrine\ORM\PersistentCollection {#4508 …}
  +reports: Doctrine\ORM\PersistentCollection {#4510 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4512 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4514 …}
  -id: 350094
  -bodyTs: "'/products/tunnel/)':120 '1':72 '2':104 '3':134 '5':217 'accept':298 'access':27 'ad':159 'address':275 'alreadi':78 'also':25 'ask':226 'assum':3 'avail':166 'bad':90,242 'balk':34 'bare':187 'base':92 'beer':281 'benefit':160 'best':246,403 'bone':188 'care':319 'cloudflar':116 'come':251 'connect':209 'consum':105 'cost':332 'cover':63 'data':59 'decid':399 'describ':352 'devic':171,211,218 'digit':261 'document':191 'easi':368 'easiest':149,179 'easili':26 'enough':28,371 'especi':97 'excel':190 'expos':127 'face':215 'find':68 'first':36 'forward':74,80 'found':365 'free':277,280 'friends/family':31 'get':271 'given':96,307 'go':174,344 'good':370,393 'grade':106 'handl':208 'host':20 'idea':91,243 'includ':177,260 'inform':95 'internet':82,133 'ip':274 'isn':100 'kind':50 'length':348 'like':164 'limit':219 'linod':263 'll':2,62 'log':41 'm':110 'machin':312,326 'magic':207 'make':162 'mani':391,392 'may':147,225 'mean':5,8 'mention':77 'mind':302 'model':306 'much':346 'name':265 'necessari':103 'network':293 'nordvpn':201 'number':141 'ocean':262 'one':401 'open':233,288 'openvpn':223 'option':125,176,197,394 'other':114,204 'password':46 'person':135 'pick':138 'pihol':165 'popular':175 'port':73,79,235,287 'privat':154,292 'probabl':88,203 'protect':57 'provid':259 'public':132,273,286 'raw':81 'reason':71 'reli':181 'reset':44 'risk':299 'safe':16,23 'safer':124,356 'said':238 'say':11 'self':19 'server':86 'servic':108,129 'set':151 'similar':196 'sinc':98 'situat':406 'small':145 'someon':76 'start':377,381 'still':283 'strategi':52 'strict':102 'sure':111 'tailscal':178,184,199,383 'thing':163 'think':193 'threat':305 'threshold':361 'time':37,328,334 'trade':340 'trade-off':339 'traffic':83 'tri':39 'trust':183 'tunnel':107,117 'typic':270 'use':55,256 'user':143 've':351,364 'virtual':291 'vpn':136,155 'vps':258,325 'want':13,330 'way':247 'well':244 'wherev':172 'wipe':323 'wireguard':221 'wireguard/openvpn':186 'without':232 'work':385 'would':380 'www.cloudflare.com':119 'www.cloudflare.com/products/tunnel/)':118"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7128016"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706544153 {#4499
    date: 2024-01-29 17:02:33.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
35 DENIED edit
App\Entity\EntryComment {#4503
  +user: App\Entity\User {#4516 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    I’ll assume you mean what I mean when I say I want to be safe with my self hosting – that is, “safe” but also easily accessible enough that my friends/family don’t balk the first time they try to log in or reset their password. There are all kinds of strategies you can use to protect your data, but I’ll cover the few that I find to be reasonable.\n
    \n
    1. Port Forwarding – as someone mentioned already, port forwarding raw internet traffic to a server is probably a bad idea based on the information given. Especially since it isn’t strictly necessary.\n
    2. Consumer Grade Tunnel Services – I’m sure there are others, but [cloudflare tunnels](https://www.cloudflare.com/products/tunnel/) can be a safer option of exposing a service to the public internet.\n
    3. Personal VPN (my pick) – if your number of users is small, it may be easiest to set up a private VPN. This has the added benefit of making things like PiHole available to all of your devices wherever you go. Popular options include Tailscale (easiest, but relies on trusting Tailscale) or Wireguard/OpenVPN (bare bones with excellent documentation). I think there are similar options to tailscale through NordVPN (and probably others), where it “magically” handles connecting your devices but then you face a ~5 device limit.\n
    \n
    With Wireguard or OpenVPN you may ask: “How do I do that without opening a port? You just said that was a bad idea!” Well, the best way that I have come up with is to use a VPS (providers include Digital Ocean, Linode to name a few) where you typically get a public IP address for free (as in free beer). You still have a public port open in your virtual private network, but it’s an acceptable risk (in my mind, for my threat model) given it’s on a machine that you don’t own or care about. You can wipe that VPS machine any time you want, the cost is time.\n
    \n
    It’s all a trade-off. You can go to much further lengths than I’ve described here to be “safer” but this is the threshold that I’ve found to be easy and Good Enough for Me™.\n
    \n
    If I were starting over I would start with Tailscale and work up from there. There are many many good options and only you can decide which one is best for your situation!
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1729457610 {#4498
    date: 2024-10-20 22:53:30.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4504 …}
  +nested: Doctrine\ORM\PersistentCollection {#4506 …}
  +votes: Doctrine\ORM\PersistentCollection {#4508 …}
  +reports: Doctrine\ORM\PersistentCollection {#4510 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4512 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4514 …}
  -id: 350094
  -bodyTs: "'/products/tunnel/)':120 '1':72 '2':104 '3':134 '5':217 'accept':298 'access':27 'ad':159 'address':275 'alreadi':78 'also':25 'ask':226 'assum':3 'avail':166 'bad':90,242 'balk':34 'bare':187 'base':92 'beer':281 'benefit':160 'best':246,403 'bone':188 'care':319 'cloudflar':116 'come':251 'connect':209 'consum':105 'cost':332 'cover':63 'data':59 'decid':399 'describ':352 'devic':171,211,218 'digit':261 'document':191 'easi':368 'easiest':149,179 'easili':26 'enough':28,371 'especi':97 'excel':190 'expos':127 'face':215 'find':68 'first':36 'forward':74,80 'found':365 'free':277,280 'friends/family':31 'get':271 'given':96,307 'go':174,344 'good':370,393 'grade':106 'handl':208 'host':20 'idea':91,243 'includ':177,260 'inform':95 'internet':82,133 'ip':274 'isn':100 'kind':50 'length':348 'like':164 'limit':219 'linod':263 'll':2,62 'log':41 'm':110 'machin':312,326 'magic':207 'make':162 'mani':391,392 'may':147,225 'mean':5,8 'mention':77 'mind':302 'model':306 'much':346 'name':265 'necessari':103 'network':293 'nordvpn':201 'number':141 'ocean':262 'one':401 'open':233,288 'openvpn':223 'option':125,176,197,394 'other':114,204 'password':46 'person':135 'pick':138 'pihol':165 'popular':175 'port':73,79,235,287 'privat':154,292 'probabl':88,203 'protect':57 'provid':259 'public':132,273,286 'raw':81 'reason':71 'reli':181 'reset':44 'risk':299 'safe':16,23 'safer':124,356 'said':238 'say':11 'self':19 'server':86 'servic':108,129 'set':151 'similar':196 'sinc':98 'situat':406 'small':145 'someon':76 'start':377,381 'still':283 'strategi':52 'strict':102 'sure':111 'tailscal':178,184,199,383 'thing':163 'think':193 'threat':305 'threshold':361 'time':37,328,334 'trade':340 'trade-off':339 'traffic':83 'tri':39 'trust':183 'tunnel':107,117 'typic':270 'use':55,256 'user':143 've':351,364 'virtual':291 'vpn':136,155 'vps':258,325 'want':13,330 'way':247 'well':244 'wherev':172 'wipe':323 'wireguard':221 'wireguard/openvpn':186 'without':232 'work':385 'would':380 'www.cloudflare.com':119 'www.cloudflare.com/products/tunnel/)':118"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7128016"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706544153 {#4499
    date: 2024-01-29 17:02:33.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
36 DENIED moderate
App\Entity\EntryComment {#4503
  +user: App\Entity\User {#4516 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    I’ll assume you mean what I mean when I say I want to be safe with my self hosting – that is, “safe” but also easily accessible enough that my friends/family don’t balk the first time they try to log in or reset their password. There are all kinds of strategies you can use to protect your data, but I’ll cover the few that I find to be reasonable.\n
    \n
    1. Port Forwarding – as someone mentioned already, port forwarding raw internet traffic to a server is probably a bad idea based on the information given. Especially since it isn’t strictly necessary.\n
    2. Consumer Grade Tunnel Services – I’m sure there are others, but [cloudflare tunnels](https://www.cloudflare.com/products/tunnel/) can be a safer option of exposing a service to the public internet.\n
    3. Personal VPN (my pick) – if your number of users is small, it may be easiest to set up a private VPN. This has the added benefit of making things like PiHole available to all of your devices wherever you go. Popular options include Tailscale (easiest, but relies on trusting Tailscale) or Wireguard/OpenVPN (bare bones with excellent documentation). I think there are similar options to tailscale through NordVPN (and probably others), where it “magically” handles connecting your devices but then you face a ~5 device limit.\n
    \n
    With Wireguard or OpenVPN you may ask: “How do I do that without opening a port? You just said that was a bad idea!” Well, the best way that I have come up with is to use a VPS (providers include Digital Ocean, Linode to name a few) where you typically get a public IP address for free (as in free beer). You still have a public port open in your virtual private network, but it’s an acceptable risk (in my mind, for my threat model) given it’s on a machine that you don’t own or care about. You can wipe that VPS machine any time you want, the cost is time.\n
    \n
    It’s all a trade-off. You can go to much further lengths than I’ve described here to be “safer” but this is the threshold that I’ve found to be easy and Good Enough for Me™.\n
    \n
    If I were starting over I would start with Tailscale and work up from there. There are many many good options and only you can decide which one is best for your situation!
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1729457610 {#4498
    date: 2024-10-20 22:53:30.0 +02:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4504 …}
  +nested: Doctrine\ORM\PersistentCollection {#4506 …}
  +votes: Doctrine\ORM\PersistentCollection {#4508 …}
  +reports: Doctrine\ORM\PersistentCollection {#4510 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4512 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4514 …}
  -id: 350094
  -bodyTs: "'/products/tunnel/)':120 '1':72 '2':104 '3':134 '5':217 'accept':298 'access':27 'ad':159 'address':275 'alreadi':78 'also':25 'ask':226 'assum':3 'avail':166 'bad':90,242 'balk':34 'bare':187 'base':92 'beer':281 'benefit':160 'best':246,403 'bone':188 'care':319 'cloudflar':116 'come':251 'connect':209 'consum':105 'cost':332 'cover':63 'data':59 'decid':399 'describ':352 'devic':171,211,218 'digit':261 'document':191 'easi':368 'easiest':149,179 'easili':26 'enough':28,371 'especi':97 'excel':190 'expos':127 'face':215 'find':68 'first':36 'forward':74,80 'found':365 'free':277,280 'friends/family':31 'get':271 'given':96,307 'go':174,344 'good':370,393 'grade':106 'handl':208 'host':20 'idea':91,243 'includ':177,260 'inform':95 'internet':82,133 'ip':274 'isn':100 'kind':50 'length':348 'like':164 'limit':219 'linod':263 'll':2,62 'log':41 'm':110 'machin':312,326 'magic':207 'make':162 'mani':391,392 'may':147,225 'mean':5,8 'mention':77 'mind':302 'model':306 'much':346 'name':265 'necessari':103 'network':293 'nordvpn':201 'number':141 'ocean':262 'one':401 'open':233,288 'openvpn':223 'option':125,176,197,394 'other':114,204 'password':46 'person':135 'pick':138 'pihol':165 'popular':175 'port':73,79,235,287 'privat':154,292 'probabl':88,203 'protect':57 'provid':259 'public':132,273,286 'raw':81 'reason':71 'reli':181 'reset':44 'risk':299 'safe':16,23 'safer':124,356 'said':238 'say':11 'self':19 'server':86 'servic':108,129 'set':151 'similar':196 'sinc':98 'situat':406 'small':145 'someon':76 'start':377,381 'still':283 'strategi':52 'strict':102 'sure':111 'tailscal':178,184,199,383 'thing':163 'think':193 'threat':305 'threshold':361 'time':37,328,334 'trade':340 'trade-off':339 'traffic':83 'tri':39 'trust':183 'tunnel':107,117 'typic':270 'use':55,256 'user':143 've':351,364 'virtual':291 'vpn':136,155 'vps':258,325 'want':13,330 'way':247 'well':244 'wherev':172 'wipe':323 'wireguard':221 'wireguard/openvpn':186 'without':232 'work':385 'would':380 'www.cloudflare.com':119 'www.cloudflare.com/products/tunnel/)':118"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/7128016"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706544153 {#4499
    date: 2024-01-29 17:02:33.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
37 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
38 DENIED moderate
App\Entity\EntryComment {#4576
  +user: App\Entity\User {#4589 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    One “hammer” mitigation to most threats could conceivably face when self-hosting is to never expose your services to the internet using a firewall. “Securing” your services against a small circle of guests/friends/family members in your home network is a lot simpler than securing against the entire world.  \n
    If you need to access your services remotely, there are ways to achieve that without permanently opening a single port to the internet such as Tailscale or ZeroTier.\n
    \n
    Otherwise, commonly used tools in self-hosting such as Docker or VMs usually offer quite decent separation even if a service is compromised.\n
    \n
    Nothing replaces good security hygiene though. Keep your stuff up-to-date. Use secure methods of authentication such as hard to guess passwords or better. Make frequent backups (3-2-1). The usual.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706540369 {#4571
    date: 2024-01-29 15:59:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4577 …}
  +nested: Doctrine\ORM\PersistentCollection {#4579 …}
  +votes: Doctrine\ORM\PersistentCollection {#4581 …}
  +reports: Doctrine\ORM\PersistentCollection {#4583 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4585 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4587 …}
  -id: 349918
  -bodyTs: "'-1':133 '-2':132 '3':131 'access':54 'achiev':62 'authent':119 'backup':130 'better':127 'circl':32 'common':79 'compromis':101 'conceiv':8 'could':7 'date':114 'decent':94 'docker':88 'entir':48 'even':96 'expos':17 'face':9 'firewal':25 'frequent':129 'good':104 'guess':124 'guests/friends/family':34 'hammer':2 'hard':122 'home':38 'host':13,85 'hygien':106 'internet':22,72 'keep':108 'lot':42 'make':128 'member':35 'method':117 'mitig':3 'need':52 'network':39 'never':16 'noth':102 'offer':92 'one':1 'open':66 'otherwis':78 'password':125 'perman':65 'port':69 'quit':93 'remot':57 'replac':103 'secur':26,45,105,116 'self':12,84 'self-host':11,83 'separ':95 'servic':19,28,56,99 'simpler':43 'singl':68 'small':31 'stuff':110 'tailscal':75 'though':107 'threat':6 'tool':81 'up-to-d':111 'use':23,80,115 'usual':91,135 'vms':90 'way':60 'without':64 'world':49 'zeroti':77"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7850439"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706540369 {#4572
    date: 2024-01-29 15:59:29.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
39 DENIED edit
App\Entity\EntryComment {#4576
  +user: App\Entity\User {#4589 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    One “hammer” mitigation to most threats could conceivably face when self-hosting is to never expose your services to the internet using a firewall. “Securing” your services against a small circle of guests/friends/family members in your home network is a lot simpler than securing against the entire world.  \n
    If you need to access your services remotely, there are ways to achieve that without permanently opening a single port to the internet such as Tailscale or ZeroTier.\n
    \n
    Otherwise, commonly used tools in self-hosting such as Docker or VMs usually offer quite decent separation even if a service is compromised.\n
    \n
    Nothing replaces good security hygiene though. Keep your stuff up-to-date. Use secure methods of authentication such as hard to guess passwords or better. Make frequent backups (3-2-1). The usual.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706540369 {#4571
    date: 2024-01-29 15:59:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4577 …}
  +nested: Doctrine\ORM\PersistentCollection {#4579 …}
  +votes: Doctrine\ORM\PersistentCollection {#4581 …}
  +reports: Doctrine\ORM\PersistentCollection {#4583 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4585 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4587 …}
  -id: 349918
  -bodyTs: "'-1':133 '-2':132 '3':131 'access':54 'achiev':62 'authent':119 'backup':130 'better':127 'circl':32 'common':79 'compromis':101 'conceiv':8 'could':7 'date':114 'decent':94 'docker':88 'entir':48 'even':96 'expos':17 'face':9 'firewal':25 'frequent':129 'good':104 'guess':124 'guests/friends/family':34 'hammer':2 'hard':122 'home':38 'host':13,85 'hygien':106 'internet':22,72 'keep':108 'lot':42 'make':128 'member':35 'method':117 'mitig':3 'need':52 'network':39 'never':16 'noth':102 'offer':92 'one':1 'open':66 'otherwis':78 'password':125 'perman':65 'port':69 'quit':93 'remot':57 'replac':103 'secur':26,45,105,116 'self':12,84 'self-host':11,83 'separ':95 'servic':19,28,56,99 'simpler':43 'singl':68 'small':31 'stuff':110 'tailscal':75 'though':107 'threat':6 'tool':81 'up-to-d':111 'use':23,80,115 'usual':91,135 'vms':90 'way':60 'without':64 'world':49 'zeroti':77"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7850439"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706540369 {#4572
    date: 2024-01-29 15:59:29.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
40 DENIED moderate
App\Entity\EntryComment {#4576
  +user: App\Entity\User {#4589 …}
  +entry: App\Entity\Entry {#2388
    +user: Proxies\__CG__\App\Entity\User {#1943 …}
    +magazine: App\Entity\Magazine {#266
      +icon: Proxies\__CG__\App\Entity\Image {#247 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 220
      +entryCommentCount: 3886
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729496512 {#276
        date: 2024-10-21 07:41:52.046563 UTC (+00:00)
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#238 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
      +entries: Doctrine\ORM\PersistentCollection {#181 …}
      +posts: Doctrine\ORM\PersistentCollection {#139 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
      +bans: Doctrine\ORM\PersistentCollection {#118 …}
      +reports: Doctrine\ORM\PersistentCollection {#104 …}
      +badges: Doctrine\ORM\PersistentCollection {#82 …}
      +logs: Doctrine\ORM\PersistentCollection {#72 …}
      +awards: Doctrine\ORM\PersistentCollection {#61 …}
      +categories: Doctrine\ORM\PersistentCollection {#1820 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703477426 {#270
        date: 2023-12-25 05:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#272
        date: 2023-12-25 04:10:26.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1912 …}
    +slug: "The-safest-way-of-self-hosting"
    +title: "The "safest" way of self hosting"
    +url: null
    +body: """
      Hello peoples,\n
      \n
      I am looking for tips on how to make my self-hosted setup as safe as possible.\n
      \n
      Some background: I started self-hosting some services about a year ago, using an old lenovo thin client. It’s plenty powerful for what I’m asking it to do, and it’s not too loud. Hardware wise I am not expecting to change things up any time soon.\n
      \n
      I am not expecting anyone to take the time to baby me through the process, I will be more than happy with some links to good articles and the like. My main problem is that there’s so much information out there, I just don’t know where to start or what to trust.\n
      \n
      Anyways, thank you for reading.\n
      \n
      N
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 20
    +favouriteCount: 26
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1729466951 {#2410
      date: 2024-10-21 01:29:11.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1866 …}
    +votes: Doctrine\ORM\PersistentCollection {#1978 …}
    +reports: Doctrine\ORM\PersistentCollection {#1946 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1971 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2443 …}
    +badges: Doctrine\ORM\PersistentCollection {#2426 …}
    +children: []
    -id: 33831
    -titleTs: "'host':6 'safest':2 'self':5 'way':3"
    -bodyTs: "'ago':33 'anyon':75 'anyway':125 'articl':97 'ask':48 'babi':81 'background':22 'chang':65 'client':39 'expect':63,74 'good':96 'happi':91 'hardwar':58 'hello':1 'host':15,27 'inform':110 'know':117 'lenovo':37 'like':100 'link':94 'look':5 'loud':57 'm':47 'main':102 'make':11 'much':109 'n':130 'old':36 'peopl':2 'plenti':42 'possibl':20 'power':43 'problem':103 'process':85 'read':129 'safe':18 'self':14,26 'self-host':13,25 'servic':29 'setup':16 'soon':70 'start':24,120 'take':77 'thank':126 'thin':38 'thing':66 'time':69,79 'tip':7 'trust':124 'use':34 'wise':59 'year':32"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706625633
    +visibility: "visible             "
    +apId: "https://feddit.uk/post/7247106"
    +editedAt: null
    +createdAt: DateTimeImmutable @1706539233 {#1850
      date: 2024-01-29 15:40:33.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#266}
  +image: null
  +parent: null
  +root: null
  +body: """
    One “hammer” mitigation to most threats could conceivably face when self-hosting is to never expose your services to the internet using a firewall. “Securing” your services against a small circle of guests/friends/family members in your home network is a lot simpler than securing against the entire world.  \n
    If you need to access your services remotely, there are ways to achieve that without permanently opening a single port to the internet such as Tailscale or ZeroTier.\n
    \n
    Otherwise, commonly used tools in self-hosting such as Docker or VMs usually offer quite decent separation even if a service is compromised.\n
    \n
    Nothing replaces good security hygiene though. Keep your stuff up-to-date. Use secure methods of authentication such as hard to guess passwords or better. Make frequent backups (3-2-1). The usual.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1706540369 {#4571
    date: 2024-01-29 15:59:29.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Nester@feddit.uk"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4577 …}
  +nested: Doctrine\ORM\PersistentCollection {#4579 …}
  +votes: Doctrine\ORM\PersistentCollection {#4581 …}
  +reports: Doctrine\ORM\PersistentCollection {#4583 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4585 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4587 …}
  -id: 349918
  -bodyTs: "'-1':133 '-2':132 '3':131 'access':54 'achiev':62 'authent':119 'backup':130 'better':127 'circl':32 'common':79 'compromis':101 'conceiv':8 'could':7 'date':114 'decent':94 'docker':88 'entir':48 'even':96 'expos':17 'face':9 'firewal':25 'frequent':129 'good':104 'guess':124 'guests/friends/family':34 'hammer':2 'hard':122 'home':38 'host':13,85 'hygien':106 'internet':22,72 'keep':108 'lot':42 'make':128 'member':35 'method':117 'mitig':3 'need':52 'network':39 'never':16 'noth':102 'offer':92 'one':1 'open':66 'otherwis':78 'password':125 'perman':65 'port':69 'quit':93 'remot':57 'replac':103 'secur':26,45,105,116 'self':12,84 'self-host':11,83 'separ':95 'servic':19,28,56,99 'simpler':43 'singl':68 'small':31 'stuff':110 'tailscal':75 'though':107 'threat':6 'tool':81 'up-to-d':111 'use':23,80,115 'usual':91,135 'vms':90 'way':60 'without':64 'world':49 'zeroti':77"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/7850439"
  +editedAt: null
  +createdAt: DateTimeImmutable @1706540369 {#4572
    date: 2024-01-29 15:59:29.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS DENIED
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
41 DENIED edit
App\Entity\Magazine {#266
  +icon: Proxies\__CG__\App\Entity\Image {#247 …}
  +name: "selfhosted@lemmy.world"
  +title: "selfhosted"
  +description: """
    A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
    \n
    Rules:\n
    \n
    - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
    - No spam posting.\n
    - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
    - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
    - No trolling.\n
    \n
    Resources:\n
    \n
    - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
    - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
    - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
    \n
    > Any issues on the community? Report it using the report flag.\n
    \n
    > Questions? DM the mods!
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 220
  +entryCommentCount: 3886
  +postCount: 0
  +postCommentCount: 0
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729496512 {#276
    date: 2024-10-21 07:41:52.046563 UTC (+00:00)
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#238 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#234 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#223 …}
  +entries: Doctrine\ORM\PersistentCollection {#181 …}
  +posts: Doctrine\ORM\PersistentCollection {#139 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#201 …}
  +bans: Doctrine\ORM\PersistentCollection {#118 …}
  +reports: Doctrine\ORM\PersistentCollection {#104 …}
  +badges: Doctrine\ORM\PersistentCollection {#82 …}
  +logs: Doctrine\ORM\PersistentCollection {#72 …}
  +awards: Doctrine\ORM\PersistentCollection {#61 …}
  +categories: Doctrine\ORM\PersistentCollection {#1820 …}
  -id: 120
  +apId: "selfhosted@lemmy.world"
  +apProfileId: "https://lemmy.world/c/selfhosted"
  +apPublicUrl: "https://lemmy.world/c/selfhosted"
  +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
  +apInboxUrl: "https://lemmy.world/inbox"
  +apDomain: "lemmy.world"
  +apPreferredUsername: "selfhosted"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1703477426 {#270
    date: 2023-12-25 05:10:26.0 +01:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1703473826 {#272
    date: 2023-12-25 04:10:26.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS DENIED
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details