q0uaur

you see, in that case google has to pay, but flipping it like this makes the customers.. oh wait the product pay.

definitely don't expose any management interfaces to the open internet.

personally, i manage my homelab through ssh via the commandline, and key-based ssh auth is secure enough for my threat model (i am considering switching the entrypoint machine to a BSD though, to avoid the kind of bugs distros sometimes introduce).

but a webserver and a few containerized services seem pretty low risk to me, so i do have a few of them exposed via reverse proxy. The more sensitive one behind Authelia via the forward-auth pattern, which i feel like is a really good fit for homelabs.

i'm pretty sure Mox (email server with included webui written in Go) does that - at least the Umlauts in mails i get from Hetzner seem to always stand out.

it also defaults to not loading HTML in emails, which i love. really opened my eyes to how dumb it really is to just accept all kinds of dynamic content in unknown messages. (kinda same as how the modern web relies on remote code execution to work)

the syntax highlighting giving up while i'm scrolling down was my favorite part of the whole thing

this was my plan, but then i got really into using LSPs and i'm not about to install every LSP on every server i ssh into.

Currently i just use sshfs to mount whatever directory i want to work on locally, nice to have all lsps available and also see my changes reflected on the server instantly.

gave it a shot, i like the concept, even though i suspect it'll cost like $2 a query to really get somewhere.

anyway, my test was to search for FOSS software, explicitly asking for "not big tech" and no ads. the contents of the results were fine, if repetitive - but i was a bit sad to see a lot of youtube and reddit in the results. does the " algorithm" not look at the actual domains?

sorry, i mixed it up with rocket.chat, another "foss" discord replacement.

sorry, i mixed it up with rocket.chat, another "foss" discord replacement.

sorry, i mixed it up with rocket.chat, another "foss" discord replacement.

sorry, i mixed it up with rocket.chat, another "foss" discord replacement.

edit- shit, it was rocket.chat, i'm so sorry.

Ignore the below, it is for a different "FOSS" discord replacement.

i did self-host it for a week to test it out - and honestly i was put off immediately.

What happens when you set it up according to the docs, is that it automatically "registers" for a license - the free license being limited to 5 users, even if you self host. Ridiculous, and just right out the gate shows me that whoever makes this does not have the user's best interest in mind.

the UI is also full of stuff that requires an expensive license, and i did not see an easy way to remove that stuff when self hosting.

set this up today, the documentation is useful and the quickstart very helpful, the dns stuff pretty much works exactly as it's supposed to and is just a bunch of copypasting (in my registrar's ui).

specifically for mox there was some things i would have liked to see: explain how the webmail isn't accessible on the public ip by default - i don't know how many of you want to be in a specific vpn for checking your email, but i sure was surprised i couldn't reach it, but had to activate it in config (and first figure out how to even do that). mox also doesn't redirect to https by default - imo it should, since it already includes the convenient automated certificate setup (which worked great).

maybe it is intended for a different environment, but since it recommends not running another webserver on the same host, i really don't want to access the webmail from the local server or by http. i like most of my services being available behind a reverse proxy, there it would make more sense. maybe i'll look into that variant later, but the documentation isn't quite as complete as i'd like.

since a lot of people are sharing anecdotes..

i spent some time today buying a new domain and setting up mox on a hetzner vm. the IP was on 3 blacklists on first check, after fixing the reverse dns it's on 2, one of which is apparently fake? dkim and dmark seem to be working, sending a mail to protonmail succeeds the checks, and yet it lands in spam - however, i'm confident once the domain is older than "just now" and i've set up DNSSEC (takes 1-3 days for this to start working in my country apparently) things will improve.

worst case i'll have to request a blocklist to unblock me, but i'll see.