selfhosted

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

chaospatterns, in Help with NGINX? so close...

I don’t fully understand what you’re saying, but let’s break this down.

Since you say you get an NGINX page, what does your NGINX config look like? What exactly does the NGINX “login page” say? Is it an error or is it a directory listing or something else?

helenslunch,
@helenslunch@feddit.nl avatar

what does your NGINX config look like?

Can you elaborate? I don’t know how to explain beyond what’s in the OP:

I created a proxy host in NGINX to forward requests from [subdomain] to [LAN Server] on [LAN] port 8097 (Jellyfin container).

What exactly does the NGINX “login page” say?

It says NGINX and has texts fields for email and password

virtueisdead, in Nextcloud Performance Improvements

ive tried to get nextcloud working several times and it just seems to never work for some reason… maybe i should set it up on a pi ive got laying around instead of my main server lol

cybersandwich,

My advice: use the nextcloud snap package. It’s seamless.

virtueisdead,

that is… surprising. not that i don’t believe you, snap just doesn’t have a good track record, lol. ill have to research if it’s feasible to run a snap package on a debian server, though.

4am,

It is, in fact, the only Snap I’ve ever used which worked without issues

That being said, it’s kinda slow in some cases, but perfectly useable nonetheless

cybersandwich,

I know snap isn’t popular among Linux nerds, but I was really having issues with the AIO docker setup and at the time I didn’t have the time to troubleshoot/fight it. I needed to give my family a file drop link to share photos for a memorial service.

I figured, the snap package was recommended on their site, maybe it won’t be horrible. To my surprise it was incredibly easy, has been rock solid, never had performance issues, and it’s always up-to-date.

Snap may suck for some use-cases but this one seems to be right in it’s wheel house.

It also has an export/backup capability built in.

ikidd,
@ikidd@lemmy.world avatar

Have you tried the AIO method that’s now the primary supported docker install?

It’s really good, and I’ve set up and used NC in a variety of ways since about version 7.

virtueisdead,

im not sure / cannot recall. it’s been a few months since i last tried to install it and it kept erroring out. im definitely strongly considering looking back into it though, it’s just that reverse proxying to the container was a nightmare… it still haunts my config, lol

ikidd, (edited )
@ikidd@lemmy.world avatar

I use NPM and all I think I had to add to it was


<span style="color:#323232;">client_body_buffer_size 512k;
</span><span style="color:#323232;">proxy_read_timeout 86400s;
</span><span style="color:#323232;">client_max_body_size 0;
</span>

in the Advanced config. I’d love to move to Traefik but I could not figure out how to make that work.

There were some other gotchas. If you run into something, ping me, I might remember if I encountered it and what I did.

filister, in Nextcloud Performance Improvements

Thanks for sharing it, really helpful post

SecurityPro, in Nextcloud Performance Improvements
@SecurityPro@lemmy.ml avatar

I had been running Nextcloud on an old laptop using Ubuntu, but that machine died. I have a Windows PC originally built for gaming that I am considering using for Nextcloud. Anyone have any experience with NC and Windows? Thought on the DB switch on Windows?

tofubl,

I don’t think you’ll do yourself any favours setting it up on Windows directly. How about docker+wsl2?

SecurityPro, (edited )
@SecurityPro@lemmy.ml avatar

I have docker on the machine now and thought I’d try that type of install first. Sorry, I’m not familiar with the abbreviation “wsl2”

blasterx, (edited )

it stands for Windows Subsystem for Linux. Here is a link on how to install it.

ikidd,
@ikidd@lemmy.world avatar

100% agree with tofubi, Docker on Windows is a form of self-abuse, like cutting yourself. It’s a train wreck for anything other than a little bit of testing for development work. You will come away with a bad taste in your mouth about Docker, I avoided containers for years because I started with them on Windows docker.

I’ve run a lot of different scenarios with docker, what I’ve come down to as the cleanest and easiest to maintain is Debian 12 with the Docker convenience script. It’s fast, hassle free, and doesn’t have a bunch of layers of weirdness like using Ubuntu Server with a docker snap that makes troubleshooting a nightmare.

dan,
@dan@upvote.au avatar

for anything other than a little bit of testing for development work.

It’s really awesome for development work, though. Visual Studio has built-in Docker support, so I can run my app and its unit tests on both Windows and Linux (via Docker) at the same time on the same system during development.

tofubl,

This sounds interesting.

I use docker in vscode for latex. It saves me the trouble of having to install texlive on my system. I have a task defined that mounts my sources in and runs the compilation in the container.

Would love to hear about your work flow.

redcalcium, in Nextcloud Performance Improvements

I’m going to try this next week. My nextcloud instance is getting a bit sluggish lately.

Static_Rocket, in Nextcloud Performance Improvements
@Static_Rocket@lemmy.world avatar

Heads up, you can also get postgress to use a socket and mount that through for another speedup if you haven’t already

tofubl,

Yeah, I saw that but wanted to take it step by step as not to break everything all at once. 😉

dan,
@dan@upvote.au avatar

You can use UNIX sockets with MySQL or MariaDB too.

MonkderZweite, (edited ) in Self-hosted VPN that can be accessed via browser extension

Portable Apps or Scoop or if Linux, Appimage?

vluz, in Linode Alternative Suggestions for Small Projects
@vluz@kbin.social avatar

I got cancelled too and chose Hetzner instead. Will not do business with a company that can't get their filters working decently.

speq,

I tried them, but got basically the same treatment as OP with Linode. They just closed my account.

promitheas,
@promitheas@iusearchlinux.fyi avatar

Hetzner or linode closed your account?

speq,

Sorry, could have formulated it better. Hetzner did. I’m a happy customer of Linode. It seems they all have filters failing in different ways.

promitheas,
@promitheas@iusearchlinux.fyi avatar

Yea i wonder why that is. It seems to be a standard

fruitycoder, in How safe is self-hosting a public website behind Cloudflare?

I’m definitely a fan of Gitlab pages for simple webpages I just want on the Internet. It’s nice to have the code hosted anyways (gives me that off site back up safety so my stuff at home can go down if needed).

Moonrise2473, (edited ) in Started to move off Google (not strictly self-hosted)

I moved off to zoho

Much cheaper than proton and offers much more.

They’re not doing like proton and close basic stuff like IMAP and SMTP as a way to force you on the official apps

I especially love the feature where you can bounce emails based on domains, keywords or TLDs. My spam folder is finally empty. IMHO bounce back spam is much better, as the spammers get a response that the address is invalid and hopefully stop wasting their limited computing resources on that address.

Zoho is not open source, but proton is a “fake” open source that is mostly used for marketing: they opened only the UI, which communicates with a proprietary protocol to a proprietary server - useless. They also reject or ignore any pull request on GitHub.

AcornCarnage,
@AcornCarnage@lemmy.world avatar

What Zoho plan are you using? I can’t quite tell what the difference between the free and lite tiers is except for IMAP/POP support.

I moved over to Proton earlier this year and have had a good experience so far, but I’m not married to it or anything.

Moonrise2473,

i started with the mail basic (10 euro yearly for 10gb) but then because i switched from “secondary email that forwards to gmail” to “primary email that imports from gmail”, i had to move to the more expensive plan

lemmyvore,

Proton has been gradually closing down access to proprietary apps only. After they’re done you won’t be able to take your email anywhere else.

If you have your own domain you’ll be able to host it elsewhere but you would leave behind email, calendar, aliases etc. and restarting from scratch.

At that point “encrypted” starts smelling more like “hostage”. It’s generally a bad idea to be tied down to a specific email provider.

You could wake up tomorrow to find out Proton has been acquired and the new owners can charge anything yet want for continued service.

AcornCarnage,
@AcornCarnage@lemmy.world avatar

I mean, that’s going to be a risk you take with any hosted service. I currently self-host my contacts and calendar, but I have no interest in hosting my own email again.

lemmyvore,

I don’t self host my email either. I got my registrar, DNS and email separate from each other so if any of them goes bad I can switch with minimum fuss.

But that makes it all the more important to be able to download all your mail from your provider.

Proton currently has two proprietary things you can use to download, a “bridge” PC app that pretends to speak IMAP, and a download tool. The bridge will be discontinued after they launch their propeietary PC mail app so that leaves just the proprietary download tool, which only does .eml. format.

AcornCarnage,
@AcornCarnage@lemmy.world avatar

Okay, I’m following. So who would you recommend as an email provider?

lemmyvore,

That’s a very broad question that depends a lot on your usage. My needs may be different from yours.

I’m currently using Migadu because:

  • Unlimited domains, mailboxes, accounts and aliases for a flat fee. I’m managing accounts for myself as well as family and extended family members and it comes out much cheaper this way than services that ask $5-10/account.
  • Very nice management interface with all the bells and whistles but with reasonable defaults and easy to use.
  • The company is based in Switzerland and the mail hosted in EU (France).
  • Standard email service with everything you’d expect (the regular protocols, spam protection, webmail, full compatibility with clients etc.)
Atemu,
@Atemu@lemmy.ml avatar

They’re not doing like proton and close basic stuff like IMAP and SMTP as a way to force you on the official apps

The reason Proton cannot do IMAP/SMTP is that they cannot read your emails which is required for both. That’s a feature, not a bug.

PM works with any app as long as the app implements their custom protocol for which there are at least two FOSS implementations as a reference.

proton is a “fake” open source that is mostly used for marketing: they opened only the UI, which communicates with a proprietary protocol to a proprietary server - useless

While I’d also prefer their back-end to be OSS, it’s not nearly as critical as the clients.
As a user, it doesn’t make a difference. I’m paying for an opaque service either way.

All the interesting stuff (E2EE, zero access storage) happen in the clients anyways. The BE is fairly uninteresting; it’s a mail server + zero-access encryption + Proton account handling. If you really wanted to build a mail service similar to Proton, you could build that yourself and probably would have to anyways.

Moonrise2473, (edited )

i think instead the opposite. The backend is the real interesting part, and the only way that we can be sure that “they cannot read the emails” (they arrive in clear, saved with reversible encryption and they have a key for it - if you use their services to commit crimes they will collaborate with the law enforcement agencies like everyone else)

imap/smtp can be toggled with a warning, if that’s really their concern. As of now i have the feeling that’s instead blocked to keep users inside (no IMAP = no easy migration to somewhere else) or to limit usage (no SMTP = no sending mass email)

Atemu,
@Atemu@lemmy.ml avatar

The backend is the real interesting part, and the only way that we can be sure that “they cannot read the emails”

While I’d still prefer it, OSS can’t really help with that because what’s really required here is remote attestation.
That is an unsolved problem to my knowledge; there is no way to know which software they’re actually running. Even if they published the source code, they could trivially apply a patch in their deployment that stores all incoming email somewhere and you’d be none the wiser.

Even if they published source code and could somehow prove to you that they’re running a version derived from it, you would still not be safe from surveillance as one could simply MITM all connections. See i.e. notes.valdikss.org.ru/jabber.ru-mitm/.

That’s likely one of the reasons they do everything they can to make PGP accessible to every user.

imap/smtp can be toggled with a warning, if that’s really their concern

It’s plain and simply not how their service works. They’d have to build most of their service a second time but unencrypted.

It’s like asking Signal to build in support for IRC; it does not make sense for them to do that in any way without malicious intent needed.

no IMAP = no easy migration to somewhere else

You have IMAP access via the bridge. That’s what it’s for.

ikidd,
@ikidd@lemmy.world avatar

Zoho and PM have two entirely different reasons for existence. If you don’t want E2EE (assuming the other sender is on PM) then by all means, use Zoho. And IMAP isn’t E2EE compatible in the slightest, what they’re charging for is the decryption bridge that makes it work with an IMAP client. They had to come up with that, it’s not just a switch you flip at PMs end that makes IMAP work.

danhab99, in Linode Alternative Suggestions for Small Projects
@danhab99@programming.dev avatar

Vultr has some pretty cheap prices… I like them

EncryptKeeper,

Second Vultr. The usability is pretty close to Linode, with more convenient DC locations.

I have noticed some issues with network throughput, though I don’t use mine for high bandwidth applications and I am on the cheapest tier.

betsha1830, in Linode Alternative Suggestions for Small Projects

I have personally been using OVH for $1.05/month. This offer is only available for their new customers and also is only offered in certain regions as well. I’ve been using it for my personal small projects to host my frontend projects and also as VPN server as well. It is now more than a month since I’ve been using it and haven’t had any issues so far.

Another platform I might suggest is Oracle cloud. They have a free VPS offer FOREVER. If you’re register for the first time and their system gives you an error it’s their “fair usage policy” of some sort where their system might think you’re someone that’s trying to abuse their free offerings(best not to waste time if it doesn’t work the first time). If you do register tho, you might need to do a few research when you’re starting out initially. The platform has lots of options and tools and it might get overwhelming if this is your first time. Nonetheless, I believe it is manageable tho. It just takes a little bit of time to get used to their interface.

www.ovhcloud.com/en-ie/vps/cloud.oracle.com

qjkxbmwvz,

+1 for the Oracle solution. I use one for my public IP, and port forward over WireGuard to my home. They claim something like 480Mbps, but it’s nowhere near that, at least for external traffic. But in any event I’ve been using it for a few months with no real complaints.

And yes, I fully appreciate the irony of trying to self-host services to get away from big corporations, but relying on Oracle to do so.

promitheas,
@promitheas@iusearchlinux.fyi avatar

I just signed up to oracles free cloud service after watching a video where it was said it was always free, but the wording on oracle’s site made it seem like its a trial. Are there two free options?

betsha1830, (edited )

I assume you’re referring to the two free instance you get with the x86 VMs. And that is correct. As far as I remember, they offer you two VMs with x86 1VCPU and 40GB of block storage minimum or you can create 5 VMs with ARM with CPUs with lots of cores and memory each having 40 GBs of storage(don’t remember the exact use-case). If you want to know what you are getting, please read the doc I have attached for you for always free resources. They offer you free 200GB in total and the bandwidth they offer is 20TB/month with 1Gbps speeds for each VMs (I might be wrong tho. It’s been a while since I’ve used their service). Also, in case you’re wondering why I’m not using a free service like this is, I used one of their servers to pirate copyrighted material. They’ll ban you without warning so read their terms of services and try not to be a fool like I am. docs.oracle.com/…/freetier_topic-Always_Free_Reso…

promitheas,
@promitheas@iusearchlinux.fyi avatar

Basically when I was registering it had some wording like “start your free trial now” but once I got into the dashboard there was a message that cleared things up. So I have a free trial of what I assume is a higher tier of their service, which upon running out will revert me back to the Always Free tier.

SpaceMan9000,

Should be noted that a lot of people had their Oracle accounts revoked for no reason.

People I know had their accounts terminated within 48 hours for ‘inactivity’.

They also require you to constantly use the resources, the percentage gets changed whenever they want.

revv, in Linode Alternative Suggestions for Small Projects

Racknerd has VPSs starting at around $10/yr. Been using them to host my email/nextcloud/jellyfin proxies for a while now with no issues or unexpected downtime. They don’t have any of Linode’s advanced features, but they’re pretty hard to beat price-wise.

Link to their coupon page

Dehydrated, in Started to move off Google (not strictly self-hosted)

I recommend transferring the Domain from your current registrar to Njalla, they allow you to buy domains anonymously

misophist,

Domain naming authorities require identification for the registration of domains. You cannot purchase domains anonymously. You can pay Njalla and they own the domain, and they’ll tell you that you can control it, but you have no rights to it in any kind of dispute.

rho50, (edited )

It’s a risk that I’m willing to take, personally.

But tbf I do make sure that I own my primary mail domain.

Website hosting and such thing? Njal.la all the way. Never had an issue with them.

Edit: oof, clearly some irrational hate for njal.la here. I state my personal preference and get downvoted… is this reddit now?!

BlueEther,
@BlueEther@no.lastname.nz avatar

All my <TLD> are redacted and I still full own. in the .nz space there has to be a real contact person, and I’m ok with that as I’m a big boy that has been online for over 1/4 of a century now.

SirMaple_, in Started to move off Google (not strictly self-hosted)
@SirMaple_@lemmy.sirmaple.ca avatar

If you have Proton Premium point your domain to SimpleLogin and use it. Its included with Proton Premium. Its helped me root out 2 places so far that have sold my email address or were compromised and failed to disclosure.

AlecSadler,

Serious question, why SimpleLogin vs Proton aliases?

originalucifer,
@originalucifer@moist.catsweat.com avatar

if youre running a full domain, you dont even need to manually create alias' unless you need to reply/send as.

i've found i rarely need to do that, so you can literally just use an email address literally off the top of your head, have it all forwarded to a catch all and youre done. none of this extra service stuff. again, unless you require 'send as/aliasing'.

AlecSadler,

Yeah, my bad, that’s what I do - so I just wasn’t sure what the benefit of SimpleLogin was…fully open to admit maybe I’m missing something though.

I basically create an email alias for every service I use and when leaks happen I know exactly who the offender is - which is nice…I guess.

kontox,

You cannot turn off the proton aliases, one of my aliases (those with +) got compromised and I’m still getting phishing emails on that one. You can create a rule for that mail but you cannot completely disable it. There is also Proton Pass which does the same as SimpleLogin and also stores Passwords. You should check it out as well.

AlecSadler,

Ahh, okay, that makes some sense. Thanks!

helenslunch,
@helenslunch@feddit.nl avatar

You cannot turn off the proton aliases

What do you mean? Of course you can.

helenslunch,
@helenslunch@feddit.nl avatar

I’ve caught a couple but they weren’t subtle about it at all. I got an email from Norton antivirus that referenced the seller directly. No shame.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • selfhosted@lemmy.world
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #