30
Lemmy server security (lemmy.antemeridiem.xyz)

I'm almost ready with my lemmy instance server. Now what are some steps that are definitly worth doing after setup?

you are viewing a single comment's thread
view the rest of the comments
[-] Sal@mander.xyz 3 points 2 years ago

consider using an email delivery service like jetmail instead of sending mail directly from the instance

Why is this better? To overcome spam filters, or is there some security risk associated with e-mails?

[-] Wander@yiffit.net 6 points 2 years ago

Better delivery and avoids exposing your IP via emails, although it's best to setup a some sort of tunnel to avoid having that problem altogether.

[-] Sal@mander.xyz 2 points 2 years ago

Better delivery and avoids exposing your IP via emails, although it’s best to setup a some sort of tunnel to avoid having that problem altogether.

Is it possible to have a public-facing instance without exposing your IP? I am not sure I understand that part, and I am very interested in understanding how to achieve that.

[-] Wander@yiffit.net 4 points 2 years ago

Yes, you tunnel all your traffic through cloudflare. Google "Cloudflare tunnel".

Whatever people say about cloudflare, right now it's a necessity if you manage a public facing server and don't have the resources to avoid DDoS attacks.

[-] Sal@mander.xyz 3 points 2 years ago

Thank you! I will look into cloudfare, what people say about it, and what resources are necessary to avoid DDoS attacks without it!

[-] ActuallyRuben@actuallyruben.nl 1 points 2 years ago

For incoming http(s) connections you can hide behind Cloudflare, which also helps for caching pictures. For outgoing connections to other instances you could also hide behind an outgoing proxy, in my opinion that's not really necessary, but I'm sure others would disagree on that.

this post was submitted on 15 Jun 2023
30 points (100.0% liked)

Technology

37804 readers
137 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS