FlorisBoard is also back in the game :)

What about the missing about:config feature ? :/

If you want to run your own pki with self-signed certificate in your homelab I really encourage you to read through this tutorial. There is a lot to process and read and it will take you some time to set everything up and understand every terminology but after that:

• Own self-signed certificate with SAN wildcards (https://*.home.lab)
• Certificate chain of trust
• CSR with your own configuration
• CRL and certificate revocation
• X509 extensions

After everything is in place, you can write your own script that revoks, write and generates your certificate, but that is another story !

Put everything behind your reverse proxy of choice (traefik in my case) and serve all your docker services with your own self-signed wildcard certificates ! It's complex but if you have spare time and are willing to learn something new, it's worth the effort !

Keep in mind to never expose such certificates on the wild wild west ! Keep those certificate in a closed homelab you access through a secure tunnel on your LAN !

edit

Always take notes, to keep track of what you did and how you solved some issues and always make some visuals to have a better understanding on how things work !

They also have an I2P address. More secure than Tor, because alot of the end nodes are controlled by government and private institutions.

I tried it 3 months ago. It looked nice had some cool features, but It didn't fit into my personal selfhosted Home server.

This is more or like to help less-tech savy people to secure their infrastructure, which is a good point, but can't replace a complex wireguard, VPN, opnsense, 2FA , self-signed CA, docker installation.

It's a bit like Nginx proxy manager, it's good enough, does what it is suposed to do with minimal user inputs. Less prone to error, security issues...

Does anyone know where they are going to leak that data to the public? A torrent? DL? I2P?

Here you go !

• Vaultwarden
• Searxng
• Nextcloud
• Smallstep (own CA for self-signed full chain certificates)
• Linkding
• Gotify + watchtower
• Adguardhome
• Traefik
• Wireguard

Took me to much time to make everything work perfectly together, but learned alot along the road ! Everything hosted on a old spare laptopt with docker containers.

Yeah... they are probably going to sell it to the best bidding on the darknet... but because they said they are going public, I though they were releasing it to everyone.

That's way exposing your home services to the internet is a bad idea. Accessing it through a secure tunnel is the way to go.

Also, they already "fixed" the docker image with an update, something todo with phpinfo...

That was also my first though xD. Yes It can sometimes take time get something working correctly but I largely prefere "wasting" my time learning something than losing time on reddit, tiktok, facebook... whatever your drug is ! Also curious what you mean with "too addicting" !

I use Linkding, which even as an android workaround for mobile. I have no idea if it works with brave, but does work with Firefox/chrome !

It's pretty cool piece of software, but something it's missing is a way to groupe tags together or have some folder structure.

If you don't have a tag structure beforehead, your tags can quickly get messy :/!

Linkding

Bookstack looks good :) But I'm to much tied to Obsidian.

Just self-host your toilet 😎

Have you tried Obtainium as f-droid alternative? It's a really cool project with some degree of customization !

Migration takes some time specially if you have a dozen apps, but after that everything is automated !

As long as they continue to maintain the github repository and keep it free without any hidden ads/spyware or restrictions, I will continue to use their service.

wow... That blog post blew my mind ! I don't know if you're the author, but really interesting read !

I blocked all reddit domain names, delete reddit and will never come back... Right now I feel the carving like any other drug abuse. Thankfully I wasn't that much of a reddict and were scrolling through healthy subreddits. Keep save, don't fall for the poisonous digital social drug !

Strange enough TLS 1.3 still doesn't support signed ed25519 certificates :| P‐256, NIST P‐384 or NIST P‐521 curves are known to be "backdoored" or having deliberately chosen mathematical weakness. I'm not an expert and just a noob security/selfhoster enthusiast but I don't want to depend on curves made by NSA or other spy agencies !

I also wondering if the EU isn't going to implement something similar with all their new spying laws currently discussed...

I wish It could be so simple for everyone... Docker is great when you have an old spare laptop and want to self host a few nice things: vaultwarden, traefik, searxng... Sure it's relatively new compared to VMs and is going to have some security flaws and reworks during the maturing process... But VMs had also their ups and downs long time ago before It got in a stable maturing state !

VM are nice but we (in my opinion) as human species need to find other solutions to get away from energy, rare metal hungry devices... something in between docker and VMs. But that's just my opinion.

Plus, docker and derivatives are also really interesting technologies where you have to read manuals and gain deep and durable knowledge to understand the future of virtualization.

Then, I tried ownCloud for the first time. Wow, it was fast! Uploading an 8GB folder took just 3 minutes compared to the 25 minutes it took with Nextcloud. Plus, everything was lightning quick on the same machine. I really loved using it. Unfortunately, there’s currently a vulnerability affecting it, which led me to uninstall it.

I have no idea on how you access your self-hosted services but wireguard could help you out to access all your service from all your devices, with less security risks and only one point of failure (the wireguard port). Also this takes away most of the vulnerabilities you could be exposed to, because you access all your home services through a secure tunnel without directly exposing the api ports on your router !

I personally run all my services with docker-compose + traefik + self signed CA certificats + adguardhome dns rewrite. And access all my services through https://service.home.lab on all my devices ! It took me some time to set everything up nicely but right now I'm pretty happy how everything works !

About the current ownCloud vulnerability, they already took some measure and the new docker image has the phpinfo fix (uhhg). Also while I wouldn't take their word for granted:

"The importance of ownCloud’s open source in the enterprise and public-sector markets is embraced by both organizations.”