Hey there!

I’m thinking about starting a blog about privacy guides, security, self-hosting, and other shenanigans, just for my own pleasure. I have my own server running Unraid and have been looking at self-hosting Ghost as the blog platform. However, I am wondering how “safe” it is to use one’s own homelab for this. If you have any experience regarding this topic, I would gladly appreciate some tips.

I understand that it’s relatively cheap to get a VPS, and that is always an option, but it is always more fun to self-host on one’s own bare metal! :)

  • Findmysec@infosec.pub
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 minutes ago

    You should do it on a VPS so that even if it gets infected your home network is not compromised

  • knowatimsayn@programming.dev
    link
    fedilink
    English
    arrow-up
    2
    ·
    2 hours ago

    Yea depends on your website bandwidth/uptime requirements. I use a VPS running nginx and wireguard, and tunnel into that from a VM in my homelab, so no ports are open on my home firewall. nginx drops all random traffic at the VPS that isn’t destined to a preconfigured service, expected traffic is forwarded through the wireguard tunnel to the right VM’s, segregated from the rest of my home network by VLANs. I host a bit of web content where I’m not concerned with bandwidth or uptime really, as well as home assistant, file browser, a few dedicated game servers, etc.

  • cron@feddit.org
    link
    fedilink
    English
    arrow-up
    10
    ·
    3 hours ago

    No, with these reasons:

    • Bandwidth isn’t plenty
    • My “uptime” at home isn’t great
    • No redundant hardware, even a simple mainboard defect would take a while to replace

    I have a VPS for these tasks, and I host a few sites for friends amd family.

  • wjs018@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    4 hours ago

    I have hosted a wordpress site on my unraid box before, but ended up moving it to a VPS instead. I ended up moving it primarily because a VPS is just going to have more uptime since I end up tinkering around with my homelab too often. So, any service that I expect other people to use, I often end up moving it to a VPS (mostly wikis for different things). The one exception to that is anything related to media delivery (plex, jellyfin, *arr stack), because I don’t want to make that as publicly accessible and it needs close integration with the storage array in unraid.

    • Sunny' 🌻@slrpnk.netOP
      link
      fedilink
      English
      arrow-up
      2
      ·
      3 hours ago

      Good points here, uptime is a factor I had not taken into consideration. Probably better to get a vps as you say.

  • Foster Hangdaan@lemmy.fosterhangdaan.com
    link
    fedilink
    English
    arrow-up
    5
    ·
    3 hours ago

    I self-host everything from my home network including my website. I like to keep all my data local. 😁

    It’s a simple setup: just a static site made with Lume, and served with Caddy. The attack surface is pretty small since it’s just HTML and CSS files (no JavaScript).

  • dan@upvote.au
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    3 hours ago

    A VPS still counts as self-hosting :)

    I host my sites on a VPS. Better internet connection and uptime, and you can get pretty good VPSes for less than $40/year.

    The approach I’d take these days is to use a static site generator like Eleventy, Hugo, etc. These generate static HTML files. You can then store those files on literally any host. You could upload them to a static file hosting service like BunnyCDN storage, Github Pages, Netlify, Cloudflare Pages, etc. Even Amazon S3 and Cloudfront if you want to pay more for the same thing. Note that Github Pages is extremely feature-poor so I’d usually recommend one of the others.

  • eric@lemmy.ca
    link
    fedilink
    English
    arrow-up
    5
    ·
    4 hours ago

    I have a Hugo site hosted on GitHub and I use CloudFlare Pages to put it on my custom domain. You don’t have to use GitHub to host the repo. Except for the cost of the domain, it’s free.

  • helenslunch@feddit.nl
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    2 hours ago

    I self-host a Ghost blog. It’s about as safe as any other service exposed to the internet.

  • schizo@forum.uncomfortable.business
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 hours ago

    Have some stuff on a VPS, some stuff hosted as static pages at Cloudflare, some stuff hosted at home too.

    Depends on if 100% uptime is required, if they’re just serving static content, or if they’re in some way related to another service I’m running (I have a couple of BBSes, and the web pages that host the clients and VMs that host the clients run locally).

    Though, at this point, anything I’m NOT hosting at home is kinda a “legacy” deployment, and probably will be brought in-house at some point in the future or converted to static-only and put on Cloudflare if there’s some reason I can’t/don’t want to host it at home.

  • stoy@lemmy.zip
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 hours ago

    Nah, I host it on a web hotel.

    I am using a very generic ISP and they tend to have a dim view of running servers on their network.

    I did have an RPi running SSH and a Mumble server directly connected to the internet years ago, but after a few years I realized that I was bringing needless attention to my network when I found my server on Shodan.

    So I took it down…