Self Hosted - Self-hosting your services.

12198 readers

14 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules

No harassment
crossposts from c/Open Source & c/docker & related may be allowed, depending on context
Video Promoting is allowed if is within the topic.
No spamming.
Stay friendly.
Follow the lemmy.ml instance rules.
Tag your post. (Read under)

Important

Beginning of January 1st 2024 this rule WILL be enforced. Posts that are not tagged will be warned and if not fixed within 24h then removed!

Lemmy doesn't have tags yet, so mark it with [Question], [Help], [Project], [Other], [Promoting] or other you may think is appropriate.

Cross-posting

!everything_git@lemmy.ml is allowed!
!docker@lemmy.ml is allowed!
!portainer@lemmy.ml is allowed!
!fediverse@lemmy.ml is allowed if topic has to do with selfhosting.
!selfhosted@lemmy.ml is allowed!

If you see a rule-breaker please DM the mods!

founded 3 years ago

MODERATORS

Zoe8338@lemmy.ml

dogmuffins@lemmy.ml

testman@lemmy.ml

[Question] What do you do to keep your server secure (lemmy.ca)

submitted 2 years ago by soullioness@lemmy.ca to c/selfhost@lemmy.ml

15 comments fedilink hide all child comments

For example, I prefer to use a VPN instead of port forwarding. And I use SSH for anything I used to use an FTP for.

you are viewing a single comment's thread
view the rest of the comments

[–] poVoq@slrpnk.net 2 points 2 years ago (1 children)

TOTP MFA highly recommended on SSH and webconsole. The so called "google-authenticator" makes it easy and despite the name does not use any external Google services.

[–] ReversalHatchery@beehaw.org 5 points 2 years ago (1 children)

Yes, but if using an android phone, the Aegis app may be a better choice. Guaranteed to not have tracking, and secrets are encrypted

[–] poVoq@slrpnk.net 1 points 2 years ago* (last edited 2 years ago) (1 children)

That is indeed what I am using as well. The "google-authenticator" is just an (badly named) open source software that runs on the server and is available in most Linux distro repositories.

[–] ReversalHatchery@beehaw.org 1 points 2 years ago (1 children)

Oh, you mean the PAM module?

[–] poVoq@slrpnk.net 1 points 2 years ago

It can function as that as well AFAIK.