I’m looking into hosting my personal instance of some fediverse software. I want to do it to grow my tech-literacy more than to host my own service. So I want to pick one in the fediverse, because I love the federation concept, but I’m open to a software I don’t use yet.

I have made previous attempt at hosting internet services a few years ago, mainly things my teachers told me to do. It was a big failure and I mostly remember from it that I got a hard time understanding instructions given on internet tutorials or at which point what I did was different from what my classmates did :( But I want to try again and do better! 😤

I plan on hosting it on a old laptop I hope not to break completely and maby in a docker container (but I also used to have a hard time with docker)

What fediverse software would you recommend me? Is there one that is easier to install than another? Or one with more clear installation instructions?

Thanks for your advice!

  • ComradeMiao@lemmy.world
    link
    fedilink
    English
    arrow-up
    9
    ·
    29 days ago

    I don’t think anyone opens a port directly to the application. One should use a reserve proxy manager such as NPM. Further security such as authentik. And maybe even cloudflare proxy for hiding one’s IP.

    Also, what ISP cares about hosting other then frequent IP changes which duckdns solves? Is this for a specific company or country?

    • limonade@jlai.luOP
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      28 days ago

      I don’t think anyone opens a port directly to the application

      Well, I don’t really know what I’m doing so it may be pretty important. I will look for reserve proxy manager. Thank you for helping :)

      • ComradeMiao@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        28 days ago

        This sort of question made me originally think I was on c/selfhosted.

        What I would do if I was you would setup lemmy, authentik, nginx proxy manager, and a cloudflare website with cloudflare proxy turned on. On cloudflare you make an A record or a CNAME pointing it at your IP. You need to open ports on your router aimed at NPM. My setup then routes ALL traffic inside NPM to authentik. Authentik can provide many forms of authentication. My current setup requires a username, password, and OTP. Then Authentik will route your successful login to your lemmy. I use this setup for private services.

        I have not hosted my own lemmy. If it has to be fully public to federate successfully, I would get rid of authentik. That’s NPM directly to lemmy. You can add extra security by adding 2auth login. On cloudflare you can also region block all visitors from countries you don’t expect traffic. Lemmy appears to be mostly western so any Eastern country that randomly has a high amount of traffic you could block.

        You can additionally use fail2ban to read through your NPM and docker logs then link to cloudflare API to ban any IP that tries to login to your lemmy instance and fails.

        Selfhosting is really exciting, and a fun and rewarding learning process. I am more happy to help you with any questions as I have done all of this except the lemmy part.

        Is your old laptop running a specific OS? Can you change it to linux? That would help with efficiency and giving it more life :) I prefer Ubuntu or Fedora. You can just install the server part so you won’t have a GUI. All you need to do is install a linux server, get it running, install docker, via command line install portainer to manage docker. Then you can visit the portainer website at your laptop’s ip and portainers port number and manage all of your docker images easily via web.

        • limonade@jlai.luOP
          link
          fedilink
          arrow-up
          1
          ·
          28 days ago

          For now, I plan on keeping Windows. I also have bad experience with installing new OS. Linus is nicer to use pre- installed and parametrized on the school computer. Thanks for the advice. I did not know about [email protected] oh… There is four of it :-) I won’t need to be posting this kind of question in this community now