this post was submitted on 11 Aug 2025
128 points (99.2% liked)

Selfhosted

50550 readers
385 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

This one is a little self-hosting specific, and more casual Linux best practices, but I've got a new blog post down for general security! Harden your systemd units (especially custom ones) for better peace of mind on the internet!

top 6 comments
sorted by: hot top controversial new old
[–] chaospatterns@lemmy.world 4 points 3 days ago (1 children)

How hard would it be to contribute these improvements back to the project in the form of either distro package updates or documentation changes? Did you consider that?

[–] starkzarn 1 points 2 days ago

That's a super valid question, as it seems sometimes that some of these things are configured in a way that begs the question "why?" As far as contributing to documentation, that's a moot point. This is already in the man pages, and that's exactly what I referenced in writing this post, in addition to some empirical testing of course. As far as implementation goes, I think that probably lies at a per distribution level, where not one size fits all. Although I don't know of it off the top of my head, I'm sure there's a security centric distro out there that implements more of these sandboxing options by default.

[–] Limeade3425@lemmy.zip 17 points 4 days ago (1 children)
[–] starkzarn 15 points 4 days ago

Hey, much appreciated!

[–] littlebigendian@lemmy.zip 3 points 3 days ago (1 children)
[–] starkzarn 3 points 3 days ago

Excellent! There's certainly a lot to unpack, but being able to twist all these little knobs is part of the beauty of Linux.