48
QubesOS workstation + homeserver, and DANE for TLS without 3rd party company (neowutran.ovh)
submitted 6 days ago by to c/selfhosted@lemmy.world
23 comments fedilink hide all child comments
 

2.5 years ago, I migrated all my services hosted on a cloud provider to a homeserver.

This homeserver is also my workstation/gaming/dev/everything. I use QubesOS (an operating system based on the Xen hypervisor), and wrote some document about it: https://neowutran.ovh/qubes/articles/homeserver.pdf

Basically, I am hosting:

  • DNS
  • Matrix
  • Email
  • Jitsi
  • Mumble
  • Peertube
  • Screego
  • Nextcloud
  • Searxng
  • Tor
  • Wireguard VPN
  • Copy of wikipedia
  • Personal website And others.

And for TLS, to have better security, and to avoid relying on third party company/providers, I am using DANE.

https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities

https://sr.ht/~yukikoo/dane_without_root/

https://github.com/buffrr/letsdane

The "dane_without_root" is one of my projects and I am welcoming review / feedback on it

( I also posted about it on the QubesOS forum: https://forum.qubes-os.org/t/highlighting-neowutrans-technical-doc-about-qubes )

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 1 day ago (1 child)

I already considered that, and for an untrusted website I already don't trust the content or the scripts. So it doesn't matter if it was modified or not, it's still untrusted.

but then why are you reading it? is it cat photos and cooking recipes only? or does it have articles about pricey things you could buy, news, life improvement tips, car and other thing repair docs/advice?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •