For example, something that is too complex for your comfort level, a security concern, or maybe your hardware can’t keep up with the service’s needs?
A social media platform where you can post or view images. I don’t wanna deal with CSAM.
Anything that the family uses. Because when I cease to exist, my wife isn’t gonna take over self-hosting! So e-mail, chat, documents etc.
You know, I never thought about that
I hadn’t either until a few years ago. It’s something worth considering.
Dealing with the digital afterlife of a hacker - The Daily Dot
The main challenge was Michael’s tech footprint: His Gmail, Twitter, personal domains, rented servers, hosting business, home servers, and a huge collection of Apple tech.
“It was tough for Beth because she got home and she had a brand new phone and couldn’t even get on the Wi-Fi,” Kalat said. “Michael had done everything. Beth is very smart—she’s a scientist—but Michael had handled everything. A friend had to come over to reset the Wi-Fi password.”
Bitwarden has an option called emergency contact.
The emergency contact can request access to see all the saved passwords. If I don’t deny the request then the request is automatically approved after X days.
I feel like this would cover most of the issues in the article.
I told my wife when I die, she’s just going to have to throw it all away and start over.
We have separate email accounts and she knows how to get into my Keepass, so she should be able to get into whatever she needs to. I now have a daughter who is becoming interested in how these things work, so I’m hoping to slowly start training/handing off to her.
I gave my wife a laminated card with explicit instructions on how to access my keepass DB and encrypted backups. The rest can die when I do.
I have a router, switch and older access point preconfigured and ready to just plug in.
I have some basic documentation and a short list of folks to call, along with admin creds should anything need untangling.
But mostly it’s a rip and replace network. Ditch plex and get cable.
Google workspace is basically just gmail. You can pay someone to migrate it or abandon.
This guy has a good financial planner.
Mail, Bitwarden and Joplin. Too important stuff for my Raspberry Pi setup.
Second. I used to self-host Bitwarden. Then I realized it’d be too devistating to lose all my passwords, even with backups. So I moved to their cloud service and paid for my families accounts too.
Joplin tho, Joplin stays on the server with no backup. I should really, really make a backup this weekend.
I really want to use Bitwarden and I pay for the premium as well, but it’s starting to bother me that a lot of basic stuff is missing despite years of user requests.
- An Auto-fill UI for the web interface
- Credit card auto-fill
- A way to refresh from the auto-fill menu on the Android UI
I just tried Proton Pass (I have unlimited anyway) and it’s not better, but at least they seem to be working on these.
all the features you listed are available though?
I have replied above: https://lemmy.world/comment/1988541
It has all of those though?
Okay, credit card autofill is there at least on the browser, my bad. But the other two, no. What I mean by auto-fill UI is an overlay like we see in LastPass, Proton, etc.
If you add an item on your desktop, make sure it’s synced and try to use the Android app to auto-fill it, it won’t be there yet. And if you use the basic auto-fill view (“Items for x”), there’s no way to refresh. The main app (not the “Items for” view) does have a refresh option though, so i end up closing everything, going back and refreshing from there.
Also, I like the way Aliases work in Proton. I’m still using both and really like both, and for now, both have its pros and cons.
I’ve never heard of joplin but it looks just like what I need
I am hosting bitwarden myself (on a VPS) and I am not that concered about losing my passwords, because every device syncs all passwords locally regulary so that you don’t need internet to access them.
So to loose all your passwords not only do you have to loose your bitwarden server and all the backups, you also have to loose access to all your bitwarden clients synchroniously.
Backups. Cloud services like Backblaze B2 are so cheap for the durability they offer, it just doesn’t make sense for me to roll my own offsite solution with a Raspberry Pi at my parents’ house or something. Restic encrypts everything before it leaves my machine.
Password manager- it’s too important and it’s the thing that has to work for me to recover when I break something else. I’m happy to support Bitwarden with a few bucks a year.
Email- again, it’s mission critical and I have a habit of tinkering with things and breaking them. And it’s just no fun. The less I need to think about email, the happier I am.
That’s what “1” in the “3-2-1” backup strategy stands for, a true offsite backup (preferably continent where you do not reside) For “2” I would still deploy a local offsite at someone’s house for quick disaster recovery.
Downloading your 10TB data from B2 (or even requesting a tarball HDD from them) is costlier than recovering from an offsite backup facility within an hour’s reach.
deleted by creator
Because the assumption is there’s very little throughput. Storage isn’t really that expensive, but bandwidth is and Backblaze is only cheap if you aren’t trying to get at your data regularly. That’s fine for backups because hopefully you never need them.
EDIT: I should say that for an individual user, getting data out of Backblaze isn’t that expensive, but it’s more expensive than cold storage. I think they charge $.01 per GB transfered, so a 10GB movie would cost you about ten cents to stream. It would cost you $100 to recover a 10TB backup from Backblaze (though for a fee than can mail you some of that on a hard drive, I think).
Re backups, to be clear it sounds like you’re specific referring to offsite backups.
I run my own local backup server using syncthing for replication and restic for snapshotting, but I also send offsites to cloud storage (in my case gdrive).
I self-host all those things.
I just have two portable drives, and I bring one home from work at a time to run an rsync backup job.
Minecraft. When I started out it was fine but when I began to get regular visitors I got DDOSed for days on end and people poking me for ssh access. Never again.
Been using mine using docker behind an extra vpn container…works beutifully…
Why were people asking for SSH access?
They weren’t asking, I was getting spammed with attempts. I changed the ports and locked down my server. In the end I switched to VPS’s.
You get spammed with ssh attempts no matter what. Just set up fail2ban with harsh firewall rules, key-only auth, and live happy!
Aegis. Never use a local-only 2FA app on your phone.
What’s the problem with it being local-only? Just backup the secrets, and you’re good? Or is backing it up the “online” element?
Like a password manager, I can’t trust myself for the seeds to get misplaced.
First, that’s what recovery codes are.
Second, that’s what backups are for.
Frankly, given what we’ve seen with LastPass this past year alone, there is absolutely no one I would trust to host any of my credentials.
My TOTP seeds go in a Keepass database that has a very long passphrase. That database is then sync’d across devices with syncthing and included in encrypted backups.
Any recommendations for 2FA?
Authy, having paid bitwarden and 2FA in one app is a disaster waiting to be happen in case of a security breach.
Can Authy really be trusted?
Out of all hosted options available that I lasted tested 2-3 years back, Authy is the only one that reliably syncs and backups seeds across devices. I would switch in an instant if something like Bitwarden comes up but for 2FA only.
Why not just use Aegis with a remote backup?
A video hosting service. I cant be bothered collecting and storing all that media.
I did this for a couple of years and it became such a major hassle I just closed my server and told everyone to go get their own subscriptions. 30 terra-bytes of data deleted!!
Ouch that’s brutal. You must have spent so much money on running all that and so much time collecting all that media.
It’s not that hard honestly. I only have one TB though but it really isn’t that much of a hassle.
I was the same way for a while, but the last few years have just gotten worse and worse for streaming. I have a handful of streaming services I don’t have to pay to access (some through phone provider, prime video, parents accounts, etc), but anything not on there I’m just going to pirate. I use sonarr/radarr with Plex so it’s super easy to get and maintain media and it’s easy to access on all my devices, and my 4 tb hdd was $100, which I more than made up for after 4 months or so by not paying for hbo max and Netflix. No way in hell I’m going to pay for every streaming service for every show that looks good, or buy them individually.
I feel like I’m having a change of heart on NextCloud… Every time some little thing breaks I have to figure out how to fix it
Really? Nextcloud has been pretty set-and-forget for me.
deleted by creator
Ouch, that’s awful. Yeah tbh I wouldn’t quite trust it to do encryption well. I haven’t had any actual problems with Nextcloud but it does feel like it’s held together by duck tape.
deleted by creator
Okay, but do you run it in containers or on bare metal?
Bare metal (using the NixOS module, so the manual stuff like database upgrades after an update and such is automated). Only containers that go on my servers are Pterodactyl because it requires it ;)
It largely is, but yesterday the Recognize app broke and I have no idea how to fix it. I think the environment got messed up from an apt-get upgrade? Its little things like that I have to figure out how to fix
Nextcloud AIO has officially hit the 1 year mark for me without any issues. The truck has been to use it as a real Dropbox replacement not a Google Drive with word and all these other integrations. I had it break 3 times due to weird updates because of that the prior year. Using it to mirror/backup files is pretty nice.
Email. Way too complicated and lots of maintenance. Not to mention it you mess it up, there are huge downsides.
I find it funny that a bunch of the simple basics are nowadays considered complicated. I’ve been doing my own mail and DNS for over two decades now, and don’t see a reason for stopping. It is pretty low maintenance, and generally less headache than having someone else do it.
Standing up email might not be that hard… but it’s much harder to ensure that your mail will actually be delivered successfully. Plus it’s not a service you can typically afford to go down. Any emails you miss during that downtime are gone forever, whereas even if my Vaultwarden credential vault goes down I can access passwords from a device that has things cached at least while I fix things.
Plus the big providers just treat small mail servers with a lot more skepticism than they did 20 years ago.
Plus it’s not a service you can typically afford to go down. Any emails you miss during that downtime are gone forever
The sending server will retry a few times, so you have at least a few days to bring it back. And if you prefer an additional fail-safe - adding a secondary MX somewhere else which will just store mails until the primary comes back is trivial.
not complicated or hard, just don’t care enough: music, spotify is fine, especially on the family plan.
A public Matrix server. Its just a never ending black-hole of ever increasing storage requirements and the software is too buggy to not become a maintenance hassle.
I do run a Synapse server for bridging purposes, so I am not just talking in theory.
XMPP is safer and lighter anyway
And so damn easy to self-host in general. Ejabberd is batteries included down to offering stun/turn for audio/video calls, Erlang is just unrivaled when it comes to hot reloading so updates are effectively zero-downtime (unsurprising considering all the business critical environments it’s deployed).
At first (and especially because I went with Matrix originally) I wouldn’t think of self hosting all my instant messaging, but in retrospect, ejabberd is one of the easiest services I’ve got to maintain. I highly recommend everyone to give it a shot, especially to all the matrix refugees to whom it was a surprise/disappointment.
Bitwarden actually. I was really split on this but ultimately I trust Bitwarden, the company, to run a secure server than myself.
Who has time to track CVE’s and react to them in a timely manner? I don’t. If something happened, I probably don’t have the infrastructure or know-how to even realize I had been breached.
Nothing really. I’m comfortable hosting mail, chat, my passwords and important documents. However:
Hosting personal/important data for other people is a bit intimidating because you kind of guarantee for safety and availability.
And services that are likely to be misused for illegal stuff and would be too bothersome. Otherwise i might host an anonymous spam eating email-forwarder, maybe a tor exit-node and a forum where adults can practise free speech. But that kind of stuff just attracts the wrong kind of idiots.
deleted by creator
Been having a wonderful experience with mailcow on a small vps…
I’ve managed to do it for my personal email and find it very rewarding. Sadly, I could never use it for my business. It’s just too risky and there may always be a few delivery problems here and there.
VPS hosting, BTW, not home.
I have setup a mail server for my employer, and doing it manually yourself is difficult. I didn’t want to do it for myself as well.
However I looked into mailcow, and tried that privately and it works great so far! However, i would dedicate a separate VPS for just that.
That, and the fact that Spam abatement is a terrible chore. Whackamole at its worst.
rspamd seems to do a fair job of it.
I don’t self-host Nextcloud. I have a cheap cloud instance running it and it’s essentially my off-site backup for important documents. I don’t put just anything up there but I live in New Orleans so I feel like I should assume my home server won’t necessarily be online when I most need insurance documents and shit like that.
Same, Hetzner Storage Share has been really good for me so far.
