• 2 Posts
  • 57 Comments
Joined 4 years ago
cake
Cake day: May 30th, 2021

help-circle



  • I’ve tried different approaches with fail2ban, crowdsec, VPNs, etc. What I settled on is to divide the data of my services in two categories: confidential and “I can live with it leaking”.

    The ones that host confidential data is behind a VPN and has some basic monitoring on them.

    The ones that are out in the public are behind a WAF from cloudflare with pretty restrictive rules.

    Yes, cloudflare suck etc., but the value of stopping potential attacks before they reach your services is hard to match.

    Just keep in mind: you need layers of different security measures to protect your services (such as backups, control of network traffic, monitoring and detection, and so on).


  • I like this thread :-)

    I have just checked off a long standing item in my backlog: implementing OIDC on at least two apps. I’ve used a remote keycloak instance for authention for my household and so far so good. Now I’ll try to understand the configurations a little better before take on other items on my backlog.















  • krash@lemmy.mltoSelfhosted@lemmy.worldAnytype Selfhosted
    link
    fedilink
    English
    arrow-up
    1
    ·
    9 months ago

    I settled on obsidian with the built in sync. The data is as clean as it gets - its very agnostic to the editor as long as it adheres to the markdown standard (plus flavors). I’m aware that I’m creating a dependency on obsidians workflow and plugins, but the cost of switching is very low considering how I use my knowledge base (I could in work case scenario work with my files with standard Unix tools).

    You are free to choose whatever tool that works for you, personally I don’t want my notes to be held hostage by a single vendor.

    The closest to Anytype is logseq, but silver bullet.md is also awesome. And if you choose another markdown editor, you could use rsync/git/syncthing to synchronize your files.

    When it comes to note applications, there is no shortage of them. Just make a informed decision that will serve you well in the long term.


  • krash@lemmy.mltoSelfhosted@lemmy.worldAnytype Selfhosted
    link
    fedilink
    English
    arrow-up
    4
    ·
    9 months ago

    I tried anytype during the alpha, but I understood early on that the data is crippled during export, and the self host node is very cumbersome to set up. Also, I had a gut feeling that it could turn into a enshittified product.

    For my usecase, I could achieve my note taking needs by other more established, libre and less complex means.