# Safety on the WorldWideWeb

**URL:** https://forum.yunohost.org/t/safety-on-the-worldwideweb/17509
**Category:** Discuss
**Tags:** english
**Created:** [October 16, 2021, 10:34pm UTC](https://forum.yunohost.org/t/safety-on-the-worldwideweb/17509 "2021-10-16T22:34:13Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![openZource](https://forum.yunohost.org/letter_avatar_proxy/v4/letter/o/bcef8e/32.png) [@openZource](https://forum.yunohost.org/u/openZource)
#### Post date: [October 16, 2021, 10:34pm UTC](https://forum.yunohost.org/t/safety-on-the-worldwideweb/17509/1 "2021-10-16T22:34:13Z")

</div>

Love the Yuno concept but i’m finding many warnings about hacking & self-hosted websites(html/js/php). Even been advised to buy hosting instead because safety is next to impossible for simple users? Isn’t there a simple method? I would also like to keep ip private at minimal cost.  
Thanks

---

<div class="post-metadata">

### Author: ![jarod5001](https://forum.yunohost.org/user_avatar/forum.yunohost.org/jarod5001/32/5323_2.png) [@jarod5001](https://forum.yunohost.org/u/jarod5001)
#### Post date: [October 17, 2021, 12:12am UTC](https://forum.yunohost.org/t/safety-on-the-worldwideweb/17509/2 "2021-10-17T00:12:32Z")

</div>

Yunohost security is good. You can stick with the default settings and have a very good password (very long, caps and lowercase, numbers…)  
You can restrict access to your server based on geographical information (geoip), follow the link below, hook number 6:

> [@Share your "hooks" to apply custom configurations- Partagez vos "hooks" pour appliquer des configurations personnelles](https://forum.yunohost.org/t/share-your-hooks-to-apply-custom-configurations-partagez-vos-hooks-pour-appliquer-des-configurations-personnelles/17235):
>
> gb English version Translate with DeePL A “hook” allows you to apply personal configurations to Yunohost files without the system detecting them as modified. Without a hook, Yunohost does not update these files and this is a real risk in terms of security and system stability. This is especially true with SSH by modifying sshd\_config. The solution without a hook is to run the following command after each update to see if there have been any changes: yunohost tools regen-conf -n -d If there…

---

<div class="post-metadata">

### Author: ![arkadi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/arkadi/32/5350_2.png) [@arkadi](https://forum.yunohost.org/u/arkadi)
#### Post date: [October 17, 2021, 9:51am UTC](https://forum.yunohost.org/t/safety-on-the-worldwideweb/17509/3 "2021-10-17T09:51:20Z")

</div>

> [@jarod5001](#):
>
> caps and lowercase, numbers…)  
> You can restrict access to your server based on geographical information (geoip), follow the link below, hook numbe

There is risk doing anything, and it’s true there is no 100% infallible computer system.

> Love the Yuno concept but i’m finding many warnings about hacking & self-hosted websites(html/js/php)

Warnings from who?

> Even been advised to buy hosting instead because safety is next to impossible for simple users?

Advised by who? VPS who make money from people who buy hosting? If you’re willing to follow best practices and do some research, it’s not impossible for ‘simple’ users.

> Isn’t there a simple method? I would also like to keep ip private at minimal cost.

What are your goals with using Yunohost? Run a blog? Use Nextcloud?

Maybe you could expand upon this post and be more specific.

1. What are your concerns about safety? (specifically running what services/apps)
2. Keep IP private? Do you mean use a VPN? or run a TOR onion website?

---

<div class="post-metadata">

### Author: ![openZource](https://forum.yunohost.org/letter_avatar_proxy/v4/letter/o/bcef8e/32.png) [@openZource](https://forum.yunohost.org/u/openZource)
#### Post date: [October 18, 2021, 3:28pm UTC](https://forum.yunohost.org/t/safety-on-the-worldwideweb/17509/4 "2021-10-18T15:28:30Z")

</div>

> [@arkadi](#):
>
> What are your concerns about safety?

Basics for a newbie. I’ve been hack’t & violated before so i know there’s evil out there. I can only imagine having my own server… If i remember… it’s easy to get to a door on google street view from a IP.

> [@arkadi](#):
>
> Keep IP private? Do you mean use a VPN? or run a TOR onion website?

Find how to install sites on clearnet & keep my privacy, cheapest safe method.

> [@arkadi](#):
>
> What are your goals with using Yunohost?

Yuno looks like candy so i will try many apps. Some things can only be on local network others like a e-com site, blog on web. Is each Yuno app in it’s own Sandbox?

---

<div class="post-metadata">

### Author: ![arkadi](https://forum.yunohost.org/user_avatar/forum.yunohost.org/arkadi/32/5350_2.png) [@arkadi](https://forum.yunohost.org/u/arkadi)
#### Post date: [October 18, 2021, 11:14pm UTC](https://forum.yunohost.org/t/safety-on-the-worldwideweb/17509/5 "2021-10-18T23:14:26Z")

</div>

> [@openZource](#):
>
> clearnet &

> **[Try YunoHost | Yunohost Documentation](https://yunohost.org/en/try)**
>
> Yunohost Documentation

Try it out. Yunohost has a single sign in (SSO) that protects all the user apps. There is also an administrative web UI (can be disabled).

Each app is not in its own sandbox. Yunohost is basically Debian but with lots of things built in and made to work with each other (failtoban, XMPP, mail server, NGINX).

Security wise you can make it as restrictive as you want: make SSH only key based, disable the administrator web ui

> **[Security | Yunohost Documentation](https://yunohost.org/en/security)**
>
> Yunohost Documentation

You can start up a server and just take it slow. Run a few things, and learn as you go.
