Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
306.57 ms (none)
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
0.00 ms (none)
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
0.07 ms (none)
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
0.01 ms (none)
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5
"App\Security\Voter\EntryCommentVoter"
6
"App\Security\Voter\EntryVoter"
7
"App\Security\Voter\MagazineVoter"
8
"App\Security\Voter\MessageThreadVoter"
9
"App\Security\Voter\MessageVoter"
10
"App\Security\Voter\NotificationVoter"
11
"App\Security\Voter\OAuth2UserConsentVoter"
12
"App\Security\Voter\PostCommentVoter"
13
"App\Security\Voter\PostVoter"
14
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
2 DENIED moderate
App\Entity\Entry {#1810
  +user: Proxies\__CG__\App\Entity\User {#1911 …}
  +magazine: App\Entity\Magazine {#315
    +icon: Proxies\__CG__\App\Entity\Image {#296 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#323
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#287 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#283 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#272 …}
    +entries: Doctrine\ORM\PersistentCollection {#230 …}
    +posts: Doctrine\ORM\PersistentCollection {#188 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#250 …}
    +bans: Doctrine\ORM\PersistentCollection {#167 …}
    +reports: Doctrine\ORM\PersistentCollection {#153 …}
    +badges: Doctrine\ORM\PersistentCollection {#131 …}
    +logs: Doctrine\ORM\PersistentCollection {#121 …}
    +awards: Doctrine\ORM\PersistentCollection {#110 …}
    +categories: Doctrine\ORM\PersistentCollection {#97 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#324
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#318
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2441 …}
  +slug: "How-safe-is-self-hosting-a-public-website-behind-Cloudflare"
  +title: "How safe is self-hosting a public website behind Cloudflare?"
  +url: null
  +body: """
    I work in tech and am constantly finding solutions to problems, often on other people’s tech blogs, that I think “I should write that down somewhere” and, well, I want to actually start doing that, but I don’t want to pay someone else to host it.\n
    \n
    I have a Synology NAS, a sweet domain name, and familiarity with both Docker and Cloudflare tunnels. Would I be opening myself up to a world of hurt if I hosted a publicly available website on my NAS using [insert simple blogging platform], in a Docker container and behind some sort of Cloudflare protection?\n
    \n
    In theory that’s enough levels of protection and isolation but I don’t know enough about it to not be paranoid about everything getting popped and providing access to the wider NAS as a whole.\n
    \n
    Update: Thanks for the replies, everyone, they’ve been really helpful and somewhat reassuring. I think I’m going to have a look at Github and Cloudflare’s pages as my first port of call for my needs.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 37
  +favouriteCount: 113
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1710850621 {#2435
    date: 2024-03-19 13:17:01.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2419 …}
  +votes: Doctrine\ORM\PersistentCollection {#1882 …}
  +reports: Doctrine\ORM\PersistentCollection {#1853 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1958 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1935 …}
  +badges: Doctrine\ORM\PersistentCollection {#1392 …}
  +children: []
  -id: 25623
  -titleTs: "'behind':10 'cloudflar':11 'host':6 'public':8 'safe':2 'self':5 'self-host':4 'websit':9"
  -bodyTs: "'access':131 'actual':33 'avail':82 'behind':97 'blog':18,90 'call':173 'cloudflar':64,101,165 'constant':7 'contain':95 'docker':62,94 'domain':56 'els':45 'enough':107,118 'everyon':144 'everyth':126 'familiar':59 'find':8 'first':170 'get':127 'github':163 'go':157 'help':149 'host':47,79 'hurt':76 'insert':88 'isol':112 'know':117 'level':108 'look':161 'm':156 'name':57 'nas':53,86,135 'need':176 'often':12 'open':69 'page':167 'paranoid':124 'pay':43 'peopl':15 'platform':91 'pop':128 'port':171 'problem':11 'protect':102,110 'provid':130 'public':81 'realli':148 'reassur':152 'repli':143 'simpl':89 'solut':9 'someon':44 'somewhat':151 'somewher':27 'sort':99 'start':34 'sweet':55 'synolog':52 'tech':4,17 'thank':140 'theori':104 'think':21,154 'tunnel':65 'updat':139 'use':87 've':146 'want':31,41 'websit':83 'well':29 'whole':138 'wider':134 'work':2 'world':74 'would':66 'write':24"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1703943518
  +visibility: "visible             "
  +apId: "https://feddit.uk/post/6114725"
  +editedAt: DateTimeImmutable @1709383228 {#101
    date: 2024-03-02 13:40:28.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703857118 {#2404
    date: 2023-12-29 14:38:38.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
3 DENIED edit
App\Entity\Entry {#1810
  +user: Proxies\__CG__\App\Entity\User {#1911 …}
  +magazine: App\Entity\Magazine {#315
    +icon: Proxies\__CG__\App\Entity\Image {#296 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#323
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#287 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#283 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#272 …}
    +entries: Doctrine\ORM\PersistentCollection {#230 …}
    +posts: Doctrine\ORM\PersistentCollection {#188 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#250 …}
    +bans: Doctrine\ORM\PersistentCollection {#167 …}
    +reports: Doctrine\ORM\PersistentCollection {#153 …}
    +badges: Doctrine\ORM\PersistentCollection {#131 …}
    +logs: Doctrine\ORM\PersistentCollection {#121 …}
    +awards: Doctrine\ORM\PersistentCollection {#110 …}
    +categories: Doctrine\ORM\PersistentCollection {#97 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#324
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#318
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2441 …}
  +slug: "How-safe-is-self-hosting-a-public-website-behind-Cloudflare"
  +title: "How safe is self-hosting a public website behind Cloudflare?"
  +url: null
  +body: """
    I work in tech and am constantly finding solutions to problems, often on other people’s tech blogs, that I think “I should write that down somewhere” and, well, I want to actually start doing that, but I don’t want to pay someone else to host it.\n
    \n
    I have a Synology NAS, a sweet domain name, and familiarity with both Docker and Cloudflare tunnels. Would I be opening myself up to a world of hurt if I hosted a publicly available website on my NAS using [insert simple blogging platform], in a Docker container and behind some sort of Cloudflare protection?\n
    \n
    In theory that’s enough levels of protection and isolation but I don’t know enough about it to not be paranoid about everything getting popped and providing access to the wider NAS as a whole.\n
    \n
    Update: Thanks for the replies, everyone, they’ve been really helpful and somewhat reassuring. I think I’m going to have a look at Github and Cloudflare’s pages as my first port of call for my needs.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 37
  +favouriteCount: 113
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1710850621 {#2435
    date: 2024-03-19 13:17:01.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2419 …}
  +votes: Doctrine\ORM\PersistentCollection {#1882 …}
  +reports: Doctrine\ORM\PersistentCollection {#1853 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1958 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1935 …}
  +badges: Doctrine\ORM\PersistentCollection {#1392 …}
  +children: []
  -id: 25623
  -titleTs: "'behind':10 'cloudflar':11 'host':6 'public':8 'safe':2 'self':5 'self-host':4 'websit':9"
  -bodyTs: "'access':131 'actual':33 'avail':82 'behind':97 'blog':18,90 'call':173 'cloudflar':64,101,165 'constant':7 'contain':95 'docker':62,94 'domain':56 'els':45 'enough':107,118 'everyon':144 'everyth':126 'familiar':59 'find':8 'first':170 'get':127 'github':163 'go':157 'help':149 'host':47,79 'hurt':76 'insert':88 'isol':112 'know':117 'level':108 'look':161 'm':156 'name':57 'nas':53,86,135 'need':176 'often':12 'open':69 'page':167 'paranoid':124 'pay':43 'peopl':15 'platform':91 'pop':128 'port':171 'problem':11 'protect':102,110 'provid':130 'public':81 'realli':148 'reassur':152 'repli':143 'simpl':89 'solut':9 'someon':44 'somewhat':151 'somewher':27 'sort':99 'start':34 'sweet':55 'synolog':52 'tech':4,17 'thank':140 'theori':104 'think':21,154 'tunnel':65 'updat':139 'use':87 've':146 'want':31,41 'websit':83 'well':29 'whole':138 'wider':134 'work':2 'world':74 'would':66 'write':24"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1703943518
  +visibility: "visible             "
  +apId: "https://feddit.uk/post/6114725"
  +editedAt: DateTimeImmutable @1709383228 {#101
    date: 2024-03-02 13:40:28.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703857118 {#2404
    date: 2023-12-29 14:38:38.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
4 DENIED moderate
App\Entity\Entry {#1810
  +user: Proxies\__CG__\App\Entity\User {#1911 …}
  +magazine: App\Entity\Magazine {#315
    +icon: Proxies\__CG__\App\Entity\Image {#296 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#323
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#287 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#283 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#272 …}
    +entries: Doctrine\ORM\PersistentCollection {#230 …}
    +posts: Doctrine\ORM\PersistentCollection {#188 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#250 …}
    +bans: Doctrine\ORM\PersistentCollection {#167 …}
    +reports: Doctrine\ORM\PersistentCollection {#153 …}
    +badges: Doctrine\ORM\PersistentCollection {#131 …}
    +logs: Doctrine\ORM\PersistentCollection {#121 …}
    +awards: Doctrine\ORM\PersistentCollection {#110 …}
    +categories: Doctrine\ORM\PersistentCollection {#97 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#324
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#318
      date: 2023-12-25 04:10:26.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#2441 …}
  +slug: "How-safe-is-self-hosting-a-public-website-behind-Cloudflare"
  +title: "How safe is self-hosting a public website behind Cloudflare?"
  +url: null
  +body: """
    I work in tech and am constantly finding solutions to problems, often on other people’s tech blogs, that I think “I should write that down somewhere” and, well, I want to actually start doing that, but I don’t want to pay someone else to host it.\n
    \n
    I have a Synology NAS, a sweet domain name, and familiarity with both Docker and Cloudflare tunnels. Would I be opening myself up to a world of hurt if I hosted a publicly available website on my NAS using [insert simple blogging platform], in a Docker container and behind some sort of Cloudflare protection?\n
    \n
    In theory that’s enough levels of protection and isolation but I don’t know enough about it to not be paranoid about everything getting popped and providing access to the wider NAS as a whole.\n
    \n
    Update: Thanks for the replies, everyone, they’ve been really helpful and somewhat reassuring. I think I’m going to have a look at Github and Cloudflare’s pages as my first port of call for my needs.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 37
  +favouriteCount: 113
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1710850621 {#2435
    date: 2024-03-19 13:17:01.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2419 …}
  +votes: Doctrine\ORM\PersistentCollection {#1882 …}
  +reports: Doctrine\ORM\PersistentCollection {#1853 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1958 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1935 …}
  +badges: Doctrine\ORM\PersistentCollection {#1392 …}
  +children: []
  -id: 25623
  -titleTs: "'behind':10 'cloudflar':11 'host':6 'public':8 'safe':2 'self':5 'self-host':4 'websit':9"
  -bodyTs: "'access':131 'actual':33 'avail':82 'behind':97 'blog':18,90 'call':173 'cloudflar':64,101,165 'constant':7 'contain':95 'docker':62,94 'domain':56 'els':45 'enough':107,118 'everyon':144 'everyth':126 'familiar':59 'find':8 'first':170 'get':127 'github':163 'go':157 'help':149 'host':47,79 'hurt':76 'insert':88 'isol':112 'know':117 'level':108 'look':161 'm':156 'name':57 'nas':53,86,135 'need':176 'often':12 'open':69 'page':167 'paranoid':124 'pay':43 'peopl':15 'platform':91 'pop':128 'port':171 'problem':11 'protect':102,110 'provid':130 'public':81 'realli':148 'reassur':152 'repli':143 'simpl':89 'solut':9 'someon':44 'somewhat':151 'somewher':27 'sort':99 'start':34 'sweet':55 'synolog':52 'tech':4,17 'thank':140 'theori':104 'think':21,154 'tunnel':65 'updat':139 'use':87 've':146 'want':31,41 'websit':83 'well':29 'whole':138 'wider':134 'work':2 'world':74 'would':66 'write':24"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1703943518
  +visibility: "visible             "
  +apId: "https://feddit.uk/post/6114725"
  +editedAt: DateTimeImmutable @1709383228 {#101
    date: 2024-03-02 13:40:28.0 +01:00
  }
  +createdAt: DateTimeImmutable @1703857118 {#2404
    date: 2023-12-29 14:38:38.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
5 DENIED edit
App\Entity\Magazine {#315
  +icon: Proxies\__CG__\App\Entity\Image {#296 …}
  +name: "selfhosted@lemmy.world"
  +title: "selfhosted"
  +description: """
    A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
    \n
    Rules:\n
    \n
    - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
    - No spam posting.\n
    - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
    - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
    - No trolling.\n
    \n
    Resources:\n
    \n
    - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
    - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
    - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
    \n
    > Any issues on the community? Report it using the report flag.\n
    \n
    > Questions? DM the mods!
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 222
  +entryCommentCount: 3916
  +postCount: 0
  +postCommentCount: 0
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729582735 {#323
    date: 2024-10-22 09:38:55.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#287 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#283 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#272 …}
  +entries: Doctrine\ORM\PersistentCollection {#230 …}
  +posts: Doctrine\ORM\PersistentCollection {#188 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#250 …}
  +bans: Doctrine\ORM\PersistentCollection {#167 …}
  +reports: Doctrine\ORM\PersistentCollection {#153 …}
  +badges: Doctrine\ORM\PersistentCollection {#131 …}
  +logs: Doctrine\ORM\PersistentCollection {#121 …}
  +awards: Doctrine\ORM\PersistentCollection {#110 …}
  +categories: Doctrine\ORM\PersistentCollection {#97 …}
  -id: 120
  +apId: "selfhosted@lemmy.world"
  +apProfileId: "https://lemmy.world/c/selfhosted"
  +apPublicUrl: "https://lemmy.world/c/selfhosted"
  +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
  +apInboxUrl: "https://lemmy.world/inbox"
  +apDomain: "lemmy.world"
  +apPreferredUsername: "selfhosted"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1703473826 {#324
    date: 2023-12-25 04:10:26.0 +01:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1703473826 {#318
    date: 2023-12-25 04:10:26.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS DENIED
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details