Rspamd seems to be common, it’s included in the mailcow stack and others. Seems to work pretty good, I’ve been on Mailcow for several years now with no major spam issues after I dialed it up a bit.

- 8 Posts
- 644 Comments
The term you would search for here is “split-horizon DNS”. Assuming you’re using a real domain name with hosts, you want a DNS server inside that resolves the LAN address, and the outside DNS server for everyone else resolves your WAN address (which presumably you reverse-proxy to inside host).
Even better is to not expose the service at all from the outside, use a VPN like Tailscale, and then use their MagicDNS service on the tailscale network to keep everything behind the firewall.
Every service you expose to the outside is more attack surface.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•Nicer than a lot of commercial racks I have had to work onEnglish
8·8 days agoI had a car dealership I was to add new servers into a new rack and recable it. I walked into a room with about half a dozen servers balanced on a pile of cat5, BNC and serial cables about 4’ high. I spent 3 weeks untangling cables, removing dead cable, decommissioning serial and token ring networks and re-terminating or re-running ethernet that didn’t test well.
Pretty much everything was done by scream test because nothing was marked. I found an ancient server that was still used for manuals occasionally that was drywalled into a old closet in the shop when I traced down a line I disconnected and one of the mechanics asked where his manuals had gotten to. That server was shut down every night when they turned off the shop lights and booted back up every morning for who knows how many years when someone came in to work and turned on the lights.
I eventually got to the point I could set up my rack and SANs/servers, patch everything over from the network rack I mounted on the wall, and get guys going on the workstations.
We had a series of meetings after that with the sales team about getting a technical appraisal before we sold our equipment into dealerships. And every dealership I worked in after that was pretty similiar.
Honestly, it was an amazingly satisfying feeling at the end to look in that room after I was done. I get a little shiver 20 years later thinking about it now.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•What does your self-hosted e-book management workflow look like?English
2·14 days agoOpenbooks downloading to Calibre’s auto ingestion folder, all running as a docker compose. OPDS service feeds FBreader on an Android tablet.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•Which Llama Server Hardware do you use?English
1·14 days agoMemory bus speed of the Spark is poor and that’s a huge detriment.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•Web-based document editing without Nextcloud?English
1·15 days agoHonestly, the NC AIO is the same. I don’t think you even need to change any of the environment options in the compose.
But glad you found something that works for you.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•Web-based document editing without Nextcloud?English
1·15 days agoThat’s basically OnlyOffice with file storage. I’m not sure how that trumps Nextcloud
ikidd@lemmy.worldto
Selfhosted@lemmy.world•Looking for recommendations on a rack.English
1·19 days agoIKEA Lack rack. Otherwise Startech have made racks for decades, probably find something used on eBay.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•How to get a phone notification if my VPS goes offline?English
1·24 days agoUptime Kuma and a VOIP subscription that lets you send webhooks.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•What to study to be able to host a site?English
5·25 days agoI’d suggest you take a legal course to find out what you’re responsible for that people upload to your server in your jurisdiction. Decide from there if you can handle that before you look into the technicalities of it first.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•I prompt injected my CONTRIBUTING.md – 50% of PRs are botsEnglish
3·27 days agodeleted by creator
The time to do this was before the hard fork.
The easy way to do this is make your user(s) and use Forgejo’s migration functions. Why would you muddy this up like this? Just nuke and pave, it would take a tenth of the time and be a hell of a lot less chancy in their long term.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•a VPN that is easily self-hostable and resistant to blocking?English
9·1 month agoYou can obfuscate Wireguard with a SOCKS proxy.
No, if people use AI for organizing the shopping list they use to buy components for the server my favorite FOSS program that I’ve never contributed to or donated to, then they must be burned in effigy and cursed to the ends of the earth. I’ve never built a thing in my life, but if I did, it certainly wouldn’t be with AI.
You’re welcome.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•Is *arr stack a real Netflix replacement?English
1·1 month agoClosest thing to streaming is Kodi + Umbrella + Premiumize (or other debrid). Search for Movies or Shows in Umbrella and stream immediately, once it scrapes and you pick a source/resolution.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•Do you stick to the same linux distro across your devices?English
10·1 month agoFedora KDE for anything I need a GUI for, Debian for anything headless.
I’ve used damn near everything else in 30 years of Linux, but I’m pretty sure my tombstone will run Debian.
ikidd@lemmy.worldto
Selfhosted@lemmy.world•Does anyone have any experience with Sync-in for online files?English
2·1 month agoI like NC and use it primarily for file sync. I think this would create a fragile maintenance nightmare for the sake of saving a few MB of storage and memory.
You can do a sanoid sync to another zpool or dataset on the same machine or a remote host, they behave the same. It’s replicating that dataset on the other machine, then sending the snapshots after that point over via
zfs send. You can instruct sanoid to prune those snapshots after the send and start new ones for the next send, or just accumulate them so you have points in time to revert to.IIRC, you can send a zfs snapshot to a file, but I can’t recall how to do that, so AFAIK, you can’t just send it to a file based service like Onedrive. You can use a service like zfs.rent and send them a harddrive with your base sync on it (encrypt it) and then once they’ve brought it online, you can sync to that. Best to test out your methods with the drive hooked up locally.
I know it’s anathema to Lemmy, but the best help you’ll get is Claude where you can paste the errors in and have it sort it out for you as you troubleshoot. It’s pretty good at shit like that.
If you’re already running ZFS, sanoid would be an option.






Probably use Gemma4 if your machine has the chops for it.