this post was submitted on 24 Nov 2023
2 points (100.0% liked)

Self-Hosted Main

504 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
[email protected]
2
Self-hosted alternatives to cloudflare/next secure dns servers? (alien.top)
submitted 11 months ago by [email protected] to c/[email protected]
3 comments fedilink hide all child comments
 

I've seen a lot of threads here about self-hosting DNS from people that host their own services, but nothing beginner-friendly on hosting your own DNS server just for privacy. It seems to me that your biggest privacy risk as a consumer is your ISP snooping on your DNS requests, and replacing your ISP with another mega-corp doesn't seem like much of an improvement. Does anyone know of an easy way to spin up your own secure DNS server? Something like a digital ocean droplet that's idiot proof, fire-and-forget, and not too expensive?

Edit: mirroring is fine, but just running a proxy doesn't seem much better to me since you're still creating a paper trail for all of your browsing back to a server you're renting, but I'd be happy if someone could explain why I'm wrong about that.

top 3 comments
sorted by: hot top controversial new old
[–] [email protected] 2 points 11 months ago

Coincidentally thats my setup rn. Hosted my domain dns myself using technitium. Then i further xafr icann root zone and setup dns over tls. The dns over tls queried the local icann root zone copy i got. Its also blocking ads and tracker craps. Basically self reliant dns.

Can be done with bind9 too but i prefer technitium gui than bind9 cli.

[–] [email protected] 1 points 11 months ago (1 children)

Adguard Home or pihole for starters.

Or run unbound and go straight to authoritative DNS servers.

[–] [email protected] 1 points 11 months ago

Unbound is pretty easy if you have experience with editing config files.