Safety on the WorldWideWeb

[openZource]

Love the Yuno concept but i’m finding many warnings about hacking & self-hosted websites(html/js/php). Even been advised to buy hosting instead because safety is next to impossible for simple users? Isn’t there a simple method? I would also like to keep ip private at minimal cost.
Thanks

[jarod5001]

Yunohost security is good. You can stick with the default settings and have a very good password (very long, caps and lowercase, numbers…)
You can restrict access to your server based on geographical information (geoip), follow the link below, hook number 6:

Share your "hooks" to apply custom configurations- Partagez vos "hooks" pour appliquer des configurations personnelles

English version Translate with DeePL A “hook” allows you to apply personal configurations to Yunohost files without the system detecting them as modified. Without a hook, Yunohost does not update these files and this is a real risk in terms of security and system stability. This is especially true with SSH by modifying sshd_config. The solution without a hook is to run the following command after each update to see if there have been any changes: yunohost tools regen-conf -n -d If the…

[arkadi]

@jarod5001

caps and lowercase, numbers…)
You can restrict access to your server based on geographical information (geoip), follow the link below, hook numbe

There is risk doing anything, and it’s true there is no 100% infallible computer system.

Love the Yuno concept but i’m finding many warnings about hacking & self-hosted websites(html/js/php)

Warnings from who?

Even been advised to buy hosting instead because safety is next to impossible for simple users?

Advised by who? VPS who make money from people who buy hosting? If you’re willing to follow best practices and do some research, it’s not impossible for ‘simple’ users.

Isn’t there a simple method? I would also like to keep ip private at minimal cost.

What are your goals with using Yunohost? Run a blog? Use Nextcloud?

Maybe you could expand upon this post and be more specific.

1. What are your concerns about safety? (specifically running what services/apps)
2. Keep IP private? Do you mean use a VPN? or run a TOR onion website?

[openZource]

@arkadi

What are your concerns about safety?

Basics for a newbie. I’ve been hack’t & violated before so i know there’s evil out there. I can only imagine having my own server… If i remember… it’s easy to get to a door on google street view from a IP.

@arkadi

Keep IP private? Do you mean use a VPN? or run a TOR onion website?

Find how to install sites on clearnet & keep my privacy, cheapest safe method.

@arkadi

What are your goals with using Yunohost?

Yuno looks like candy so i will try many apps. Some things can only be on local network others like a e-com site, blog on web. Is each Yuno app in it’s own Sandbox?

[arkadi]

@openZource

clearnet &

Try YunoHost | Yunohost Documentation

Try it out. Yunohost has a single sign in (SSO) that protects all the user apps. There is also an administrative web UI (can be disabled).

Each app is not in its own sandbox. Yunohost is basically Debian but with lots of things built in and made to work with each other (failtoban, XMPP, mail server, NGINX).

Security wise you can make it as restrictive as you want: make SSH only key based, disable the administrator web ui

Security | Yunohost Documentation

You can start up a server and just take it slow. Run a few things, and learn as you go.