• 35 Posts
  • 64 Comments
Joined 1 year ago
cake
Cake day: June 21st, 2024

help-circle



  • cron@feddit.orgtoSelfhosted@lemmy.worldIPv6 for self hosters
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    8 days ago

    Its really not that hard. Sadly, my ISP doesn’t offer IPv6 yet, but for my vServer, enabling IPv6 was just a checkbox during creation. Then, you need to make sure that the service (e.g. webserver) also listens on the IPv6 address and maybe tweak the configuration of the webserver to actually serve websites via IPv6. Also, check your firewall settings. Lastly, you need to set the DNS AAAA records and you’re done.












  • This article is IMO factually wrong. Just take one example:

    Passkeys only solve one use case - phishing where the user inputs their password and MFA into a fake site.

    Passkeys solve a few issues:

    • Phishing resistent
    • Unique per site (e.g. protection against credential stuffing)
    • Immune against brute force attacks
    • And offer an (optional) way to log in with biometrics

    This tech is clearly not perfect, but not as bad as this article suggests.

    Also, you can store passkeys in a password vault like bitwarden and have it available on all your devices.




  • I’m currently following this guide to setup caddy reverse proxy with coraza web app firewall.

    But be warned, this whole rabbit hole of WAF isn’t trivial, some protections don’t work well with some apps (e.g. portainer triggers some rules about system command execution) and it needs some tuning. I personally set it up to learn more about WAFs because I believe it will help me in my career, but I would not blindly recommend it to everyone.

    Approaches like crowdsec and fail2ban seem much more suitable for selfhosters – and keep your server software updated.



  • Great idea. Would be even better if we turned lemmy into an AI only social network. Thousands of bots will create content, vote and comment. And all this could be done without user interaction.

    Finally, even the super niche communities will have hundreds of bot comment per day, and all human lemmy users will leave voluntarily (thus reducing the need for moderation).