• 19 Posts
  • 438 Comments
Joined 1 year ago
cake
Cake day: March 19th, 2024

help-circle



  • You get a domain name, and use an A record to point it towards your server’s public IP address.

    You tell nginx to forward requests to a given domain. For instance, you could tell nginx to forward requests to foo.bar.com to 127.0.0.1:1337. To do this:

    http {
        server {
            server_name foo.bar.com;
            listen 80;
            
            location / {
                proxy_pass http://127.0.0.1:1337$request_uri;
            }
        }
    }
    

    Note that this is a very basic setup that doesn’t have HTTPS or anything. If you want an SSL certificate, look into Let’s Encrypt and Certbot.

    Also, the service you’re hosting (which I’m not familiar with) may have an example reverse proxy config you should use as a starting point if it exists.






  • Been self hosting email for a good while now and it’s been largely painless. My emails are not getting marked spam either. Although my only outgoing mails are to FOSS mailing lists and occasionally to individuals, not for anything business related.

    I would say that if self hosting email sounds like something you’d be interested in, then it probably is worthwhile for you. I like being able to configure my mail server exactly the way I want it, and I have some server side scripts I wrote for server side mail processing, which is useful as I have several different mail clients so it makes sense to do processing on the server rather than trying to configure it on my many clients. It definitely falls into the “poweruser” category of activities but I’ve had fun and I enjoy my digital sovereignty.



  • communism@lemmy.mltoLinux@lemmy.mlLinux security
    link
    fedilink
    arrow-up
    20
    ·
    edit-2
    2 days ago

    To be honest, security in the desktop Linux space has traditionally been a bit shit.

    Since you’re new, it’s important for you to understand that Linux is a kernel. That’s the most low-down part of your operating system that handles your OS talking to your hardware and vice versa. Linux is not a full OS; it doesn’t provide any userspace tools that an OS provides. That’s why people don’t install Linux on its own, but they install Linux distributions, which are full OSes using the Linux kernel that come with more or less software to make Linux a complete OS, or at least bootable. That means that there is no one way to do things in Linux. There are some Linux distributions that are security-focused, such as Qubes OS and Alpine Linux. There’s also the new immutable distros, which provide security because the entire OS is defined declaratively, meaning you can easily rollback changes, and it’s harder to get infected with malware on those systems. There’s a lot of variability. Some systems are quite secure by default. A lot of other systems do not set up any security measures by default and expect the user to do that.

    If you’re interested in hardening your Linux install, I would recommend the Arch wiki’s security page which has a lot of good advice.

    Security is a really broad topic and the relevant security measures for you are going to vary based on your threat model. General good practices include using some form of MAC, setting up a firewall, don’t install random crap you don’t need (and if you are getting software from somewhere that isn’t vetted, e.g. the AUR, you should vet it yourself—e.g. if you use the AUR, learn to read PKGBUILDs), use full-disk encryption. Anti-virus software is largely not necessary on Linux, especially if you only install software from your package manager and follow other security good practice.


  • https://www.getmonero.org/

    Getting a wallet and setting it up is the easy part. Buying it can be more difficult depending on where you are—centralised exchanges are easiest but xmr-fiat centralised exchanges often have legal trouble and may not be available where you are. You can try a decentralised exchange like RetoSwap (fiat-xmr directly) or bisq (fiat-btc and btc-xmr). They can be a bit confusing for new users but I figured it out ok when I first bought Monero using bisq.









  • communism@lemmy.mlOPtoSelfhosted@lemmy.worldProxmox or Docker?
    link
    fedilink
    English
    arrow-up
    2
    ·
    7 days ago

    I think in general people start out in VMs and advance to containers. If you are already using containers stick with it, otherwise you are taking a step back.

    Interesting perspective—I had thought that running an entire VM would be more difficult, but I’ve never used virtualisation for server stuff, only ever used VMs with a GUI VM manager on my personal computer. Thanks for the input.