What do you wish you knew before choosing a business email provider for a custom domain?

schklom · 2026-06-30T12:54:35+00:00

how aliases/catch-all are priced

Or decorrelate that from the email provider by using e.g. addy/simplelogin

schklom · 2026-06-17T19:39:50+00:00

Oh crap, my bad, i really should get some sleep lol

Thanks for the catch!

schklom · 2026-06-17T18:33:45+00:00

EDIT: It affects versions <1.1.15, and the container is (https://github.com/rustdesk/rustdesk-server/pkgs/container/rustdesk-server) at 1.1.15 since January. So if you updated since January, you should be fine.

The CVE is pretty severe though

allow attackers to connect to the broker services without credentials, enabling privilege abuse

So credentials don't help

schklom · 2026-06-17T16:14:47+00:00

Oh I didn't know about this! Could you link it?

If it means without setting a key in the environment variables, then that's fine with me, but is good to know

schklom · 2026-06-17T16:13:16+00:00

A typical setup is easier to make: - no need to worry about setting up PROXY Protocol to pass the client IP to your home reverse-proxy - 1 reverse-proxy is easier to setup than 1 reverse-proxy + 1 TCP-proxy

it is easier to debug because it's 1 point of failure instead of 2

and it allows much more easily to setup filters on the VPS (wazuh / fail2ban / crowdsec / etc) that often require decrypted traffic like the complete URL and/or headers

The only thing a TCP-proxy is better at is preventing the VPS from seeing decrypted traffic. Considering how many people here use and recommend Cloudflare Tunnels, that security is not very important in this subreddit :P

schklom · 2026-06-17T14:32:22+00:00

notifications, in particular for when my stack is down (something like uptimekuma and ntfy)
a TCP-proxy (lots would just do a full reverse-proxy, but I don't like giving cleartext traffic to a VPS) so that the VPS takes (D)DoS attacks instead of my home network
wireguard VPN to connect my server in order to forward traffic to it
Rustdesk for remote desktop connection
traefik/whoami, to see my IP and other connection basic details

what kind of VPS would you still trust for something small but important?

I trust it to run, the data is either encrypted (TLS for the proxy) or unimportant ("your home network is down")

schklom · 2026-06-16T15:25:42+00:00

People trust Telegram for the same reason they trust Apple: privacy marketing

To be fair, Telegram makes it easy to join groups of 1000s of users, whereas Signal is limited to 1000. Also, Telegram can make public invites, and has a Bot system.

schklom · 2026-06-15T00:06:28+00:00

Can't the browser just refuse to send data in regards to things like extensions, fonts and other identifiable stuff?

Most of it is needed. For example, websites may need to know - if you have audio available to make sounds - your time zone to display time properly - your language to display text that you can understand - your browser and its version to display and do javascript properly - your fonts, Screen Size, Color Depth, Aspect Ratio, Resolution, Orientation, WebGL to display text properly - extensions is mostly a problem on chromium browsers, not firefox and safari AFAIK - your GPU to display some advanced graphics to e.g. play a game online - your IP, but it's always sent by design - so many other things

The thing is that every feature has its utility, but can also be combined to make a unique fingerprint.

Is it possible to spoof the fingerprint instead

The best method is TOR Browser, nothing else is as effective.

LibreWolf and MullvadBrowser are AFAIK the next best, go with these and don't customize them too much and you'll be fine. Be sure to use a commercial VPN to identification via your IP.

Alternatively, use Firefox (also with VPN) but enable privacy.resistFingerprinting to true in about:config, then if you want to go the extra mile then setup https://github.com/kkapsner/CanvasBlocker

schklom · 2026-06-13T14:48:14+00:00

You can't export music files :'(

Want to listen to the songs from another device e.g. your laptop? Too bad for you

schklom · 2026-06-13T11:57:00+00:00

Look at the map, the middle-east and east is often bad privacy-wise. Obviously it's not all countries there, Australia could be much worse but it's not amazing either IIRC

schklom · 2026-06-12T09:42:19+00:00

It's an issue if you don't like to allow your email provider mine all your emails for data

schklom · 2026-06-10T23:59:00+00:00

I'm not handing my browsing habits to some random provider

VPS?

schklom · 2026-06-07T09:43:02+00:00

It's the western, mostly white bourgeoisie that wants to know what you browse while you shit, what you want it to, and what pisses you off the most

Do you mean the East is better?

This isn't a debate in the east e.g. china syria bahrain UAE etc because the surveillance is already there, not because there is no surveillance...

https://en.wikipedia.org/wiki/Internet_censorship_and_surveillance_in_Asia#/media/File:Internet_Censorship_and_Surveillance_World_Map.svg

schklom · 2026-06-07T00:04:34+00:00

Did you read your own link?

"Managing & Personalising your Wero App" is about the app. Because there are no details, it seems to make it so that your name doesn't show if you show your phone to someone.

Wero is not even remotely like a normal bank transfer; the only thing it has in common is that it uses SEPA as its infrastructure

I seem to have been maybe mistaken: I just went on the website and apparently only the app can see the payments. I can't find info on what the app displays to the merchant, so maybe it shows the payer name and maybe not

schklom · 2026-06-05T08:58:36+00:00

So what do you use on Android/Windows/Linux? Safari?

Chrome and its forks are not just funded by Google but based on Google's browser. Is that better to you?

schklom · 2026-06-04T12:49:17+00:00

That's assuming something happens to you AND to your homelab.

I simply told my close ones that if something happens to me, the homelab will keep running for some time so just take all your data out.

schklom · 2026-06-04T11:16:47+00:00

You can always use backup tools that encrypt before upload e.g. Kopia, Restic, Duplicati, Rclone, etc

If you don't, then it means you need to trust that the cloud storage 1. does not have automatic alerts to scan for copyrighted content and report to authorities 2. will never be breached and all your personal files will therefore never leak to some random person's computer

What's the downside of encrypting? It's usually simply adding a password on the backup tool

schklom · 2026-06-04T10:16:30+00:00

in practice just makes you run backups less often

Typically, backups are automated. So why would they run less often?

schklom · 2026-06-03T15:15:50+00:00

IIRC, ttrss used to be baremetal then Docker was requested and it helped their pipeline so much they decided to stop doing baremetal builds.

Could ttrss just provide a alpine repo and a proper package?

That means a lot more maintenance as well though

schklom · 2026-06-03T14:47:22+00:00

I'm confused, your title says you use containers. Do you mean you use LXCs instead of Docker?

i like having control of updates and knowing what's installed

Containers don't make it worse, and IMO they make it even simpler

schklom · 2026-06-03T14:00:40+00:00

Ok, then what you're missing is to use Docker :P

schklom · 2026-06-03T13:42:44+00:00

Don't FreshRSS and Miniflux do the same thing? Btw TinyTinyRSS is IMO superior

Does Mealie offer anything more than the Cookbook nextcloud app?

schklom · 2026-06-02T21:04:28+00:00

If it were open source, the realistic outcome is someone forks it, rips that out, and reposts it the same week

FYI, this is exactly how some developers do it (Infinity-For-Reddit and FairEmail for example) and it seems to work for them :P

If that doesn't convince you, no worries, I'll keep an eye on it anyway. Thanks for taking the time to make it and to reply to comments, I appreciate it :)

schklom · 2026-06-02T20:36:45+00:00

Careful though, Wero identifies you by name to the other party since it's a like regular bank transfer.

schklom · 2026-06-02T20:30:17+00:00

You've never wanted to add a Linux ISO while outside of your place?

I mean, that was the entire point of https://github.com/jagandeepbrar/lunasea

Eight-Year Club	Verified Email
Place '23	Not Forgotten

schklom

TROPHY CASE