I’ve got it running for a few weeks now. Seems very nice

Nice list of suggestions, but implementing all of them feels a little over-the-top.

I don’t really get the love for fail2ban. Sure, it helps keep your logs clean, but with a solid SSH setup (root disabled, SSH keys enforced), I’m not bothered by the login attempts.

I’m currently comparing Authentik and Authelia. For me, Authentik was extremely easy to get into. Authelia with its text-based configuration is clearly not as easy for beginners.

I’ve started to setup Authentik this weekend. My goal is to learn more about SSO and have one account for most of my selfhosted services.

This community is for posting topics about the fediverse. If you want to share that article, try to find a community where this article is ontopic or you can create one.

I don’t think this is a very strong reason. Anyone can create a new lemmy server and use “your” username. But the post/comment history would be an easy proof who is the “real” user.

I’m missing the rpi1 in that list. Please fix ASAP.

It is probably wise to have the server admins speak the language of your community.

(And feddit.org works fine for me, it’s one of the instances with the highest uptime).

I’e seen that some want it to host their own LLM. It’s far cheaper to buy DDR5 memory than somehow getting 100+ GB of VRAM. Whether or not this is a good idea is another question

I haven’t seen one. Would be a nice addon

found a bug ;)

Edit: where is the link?

Yes of course, as almost any other website.

The DNS record must point to cloudflare, not the instance IP

I’m glad that development is getting more stable, the regular updates with breaking changes were not so great.

I’m not saying that it isn’t a good fit (after all, the fediverse encourages selfhosting) - but OP might get better help there.

Seems like a good question for a selfhosting community

That’s true, but might not really be a problem for most. Just set the jail time to something short (few minutes, maybe an hour).

It might be my personal preference, but i find conversations on mastodon hard to follow once there are more than a handful replies.

Lemmy (or reddit) keeps the flow of comments well ordered and perfectly readable.

There is no way to be 100% sure, but:

• bitwarden and ente have open source clients that ecrypt all data locally in a way that the provider can’t restore data
• nextcloud isn’t optimal, while you can encypt data at rest, the provider might be able to spy on you
• With mail providers it is difficult, but mailbox.org has my (personal) trust by building their business model on data protection and open source