cross-posted from: https://lemmy.world/post/8181688

undefined

  • TheCaconym [any]
    ·
    8 months ago

    I realize you're probably pretty angry right now since you were getting piled on a bit and I should've taken that into account, sorry for calling you a nincompoop.

    But to be clear: every single information about your server matters. Security flaws that might not look exploitable can suddenly thrive due to internal information leaked by badly obfuscated hosting. It is a small issue, admittedly.

    And no, not every lemmy is set up the same way. If you're serious about hosting an online forum that can potentially host activist-adjacent content (might not be the case ? but you do host a lot of piracy content at least), you need to think about opsec more. Starting with not just running ansible as-is to "deploy everything".

    • db0@lemmy.dbzer0.com
      hexagon
      M
      ·
      8 months ago

      There's not enough time in the world to do all the opsec right and I'm not skilled enough anyway. I rely on the tools provided and hope they're sufficient. I'm sorry this is not the best answer, but I'm only one guy and I have a life as well. One can only do so much.

      • TheCaconym [any]
        ·
        8 months ago

        That's fair enough, but if you're really alone I suggest trying to find volunteers among your own instance. I say that kindly, you have 11k users already, you'll either burn out or screw up eventually.