Is there any benefit to host my own instance?

  • @JCreazy@midwest.social
    link
    fedilink
    English
    31 year ago

    I may go that route. I was wanting to host my own server but I feel like it would be easier to just use a cloud server

    • @UselesslyBrisk@infosec.pub
      link
      fedilink
      English
      11 year ago

      I have a lab at home and do host some stuff for myself from there in a small DMZ (ie: Miniflux RSS readers, Plex through Reverse proxy etc).

      But I used a linode for my lemmy/kbin stuff. Reason being is that the code is fairly new and there may be exploits bugs and

      1. I dont want to deal with my ISP made an instance is exploited and becomes some type of C2 box or spews out spam. Kbin specifically already has PRs to fix XSS and Sql injection stuff, the former of which is usually avoidable if you just follow some pretty basic principles. So its a concern.

      2. Linode has better bandwidth than my non-symmetrical ISP uplink and is on its own quota.

      • @JCreazy@midwest.social
        link
        fedilink
        English
        11 year ago

        It sounds like linode is the way to go then and their prices seem reasonable. The funny thing is I’ve heard of linode before because Computer Clan uses it as a sponsor, but ever since I started using sponsor block I haven’t really heard about it. I didn’t actually know what they did.

        • @UselesslyBrisk@infosec.pub
          link
          fedilink
          English
          11 year ago

          I’ve run linodes for years. My blog runs on them. I still host a variety of other services on them. They are good for everything from gaming servers to a blog etc.

          They did get bought out by akamai a while back. And have raised their prices but they are still solid.

          Nanodes are awesome deals frankly.

          • @JCreazy@midwest.social
            link
            fedilink
            English
            11 year ago

            Is the 2GB the one you use for your Lemmy server? I’m getting ready to purchase one to see if I can figure it out.

            • @UselesslyBrisk@infosec.pub
              link
              fedilink
              English
              2
              edit-2
              1 year ago

              Im currently on the 4GB dedicated. However heres an htop of it.

              https://imgur.com/a/NpEsw4t

              I am currently the only user. Im considering opening it up to limited users but not really having communities once i get a lot of the instances cached and indexable.

              Others like @leopardboy@netmonkey.tech are running on a 2GB shared just fine. I will likely move to that if i choose to keep it solo for sure, or under 100 users and no communities.

              I dont have the time to really moderate others or content on the instance. So i dont think I plan to host any communities at all. I do wish you could federate/sync specific communities to your instance to make searching/subscribing easier.

              • Matt
                link
                fedilink
                English
                11 year ago

                I do wish you could federate/sync specific communities to your instance to make searching/subscribing easier.

                You mean something that populates your server with a history of posts and comments to communities before your subscribe to them?

                • @UselesslyBrisk@infosec.pub
                  link
                  fedilink
                  English
                  1
                  edit-2
                  1 year ago

                  Correct. Connect to for example connect to lemmy.ml and pull their communities so it shows in your communities page locally. Dont have to sync the posts etc. Just the base stats (subs, post, comments. Basically exactly what this is doing. https://lemmyverse.net/communities

                  note: I hadnt seen that page until after my comment… But im getting a lot of 404’s on specific communities, so i have to put in their ! name in search…spam that, click to open the community and subscribe.

              • @JCreazy@midwest.social
                link
                fedilink
                English
                11 year ago

                That’s exactly what I’m wanting to do. Just have myself and maybe a few others with limited communities. Would you recommend using ansible to setup a Lemmy on Linode?

                • @UselesslyBrisk@infosec.pub
                  link
                  fedilink
                  English
                  1
                  edit-2
                  1 year ago

                  Yes the ansible config worked fine for me. I worked for days to get an kbin instance up. Ansible worked first go.

                  I have yet to get email working but otherwise its solid. Linode will block email btw if you account is new (and frankly may be blocking mine now). You just have to put in a case and justify and it should be fine. My account should be old enough to be exempt but I will likely do it anyhow. Their support is pretty good.

                  Getting federation crawled and communities added is a bit slow. Mostly because the other instances are a bit slow.

                  A few pointers if you havent done admin yet.

                  1. Put nothing in the federation allow list unless you want to go whitelist only. Over time as other instances hit yours and you search others, the linked list of instances will grow. Just use the blocklist if you want to block certain instances. I havent found a good way to block the growing number of instances in case they have some illegal content like CSAM. So…i may just go whitelist anyhow

                  2. Searching for instances seems to be CPU heavy on mine. Its not a problem though. You just cant simply plug in a URL of a community in another instance if you havent linked. You will get a 404 if you do. So you have to go to search, looking for that community by hitting search a few times until it shows up, then you can join and it will start crawling

                  3. I have no idea what “Private instance” does other than i believe it will keep your instance form starting in the future if you have it checked AND federation turned on. I saw some logs in dockers startup when i did it but nothing in the UI.,

                  • @JCreazy@midwest.social
                    link
                    fedilink
                    English
                    11 year ago

                    Thank you for the information. I’ve signed up for a 2GB shared linode and it’s running Debian 11. I assume I need to ssh into it, then run the ansible stuff. I have very basic knowledge of Linux and command line. I am not entirely sure how to fill out the config but I will cross that bridge when I come to it.

    • Matt
      link
      fedilink
      English
      11 year ago

      It’s personal preference, but I find it easier, for sure.

        • Matt
          link
          fedilink
          English
          11 year ago

          Yeah, you generally wouldn’t want to run a public Internet server on the same network as your personal systems.

            • @UselesslyBrisk@infosec.pub
              link
              fedilink
              English
              51 year ago

              mmm. thats debateable.

              If theres vulnerabilities in the software, like RCE’s or SQL Injections that can lead to access…Cloudflare wont do much for you. For example Kbin has already have PRs for SQL injections and even XSS vulns.

              These will get flushed out with time and more people maintaining them of course. But I dont know if I would want that on my personal network even if on a DMZ. If for no other reason than if your instance starts spamming outbound traffic and you get flagged by your ISP.

              Heck I had one of my domains flagged by my works Cisco Umbrella instance and the dang thing wasnt even in prod yet.

            • Matt
              link
              fedilink
              English
              11 year ago

              Sure, it would keep the origin from being publicly accessible on the Internet, but you would want to put that server on its own network, anyway.