OnionPhone is a native Android application for anonymous, end-to-end encrypted push-to-talk voice and text communication over the Tor network. No servers, no accounts, no phone numbers — your .onion address is your identity.

Cross-platform compatible with Terminalphone — call between Android and Linux/Termux using the same protocol.

Optionally use your connection as a relay for ephermeral group channels.

Find the release page for version 1.0.2 which supports custom bridges for accessing censored networks.

Get a android you lunatic

why go with tor and not with i2p?

You might be confusing the old OpenID with OIDC (short for Open ID Connect), which is based on Oauth2, an entirely different technology.

OpenID was definitely more decentralized compared to how OIDC is commonly used these days, but OIDC has various little know options to do similar things.

Forgejo has a feature (that people usually disable) where you can bring your own openid connect url and use it to auth. So if I have my own OIDC provider I am self hosting, I can just use that to log in.

Most people only use it for google and microsoft and whatnot but it’s very possible. I don’t realkly see what FedCM offers that OIDC doesn’t or can’t, or why we shouldn’t be adding features to the existing and popular OIDC instead.

Sure. All I said was that it doesn’t actually seem to be run by Mozilla, like you implied it was.

Sunup is simply a client app for Android. It does not do anything on its own.

So we’re in agreement. Not sure why you’re trying to argue with me, then.

A lot of hot takes. Definitely don’t agree with calling every youtuber and twitch streamer a narcissist. If you just go on the front page, sure. But there are thousands of normal people on there making great content. They just don’t appeal to the algorithm as much so you haven’t heard of them. But they’re out there

It’s the internet I was promised in 1996. It only took thirty years and the complete collapse of American journalism to get here.

https://sh.itjust.works/pictrs/image/9b7b6093-2ae8-46db-ae84-09d952f5ee75.mp4

According to the release:

Adds experimental PostgreSQL support

The code was written by Cursor and Claude

14,997 added lines of code, and 10,202 lines removed

reviewed and heavily tested over 2-3 weeks

This makes me a bit uneasy, especially as ntfy is an internet facing service.

Am I overreacting or do you all share the same concern?

It’s not virtue signalling, I know very well what I’m doing is hypocritical at best, but it’s also unavoidable for me. For one, I’m using it like this at work where they’d love nothing better than for me to start vibe coding. This is the compromise I’ve been able to make so far.

No judgement. I just thought it was funny.

https://wayfindr.online/

Is there any way for someone to remove themselves from a starter pack here?

Good question, but I think you will need to ask the original author.

Hello!

I’ve been playing around with self-hosting for a while now and I’ve started moving over to a VPS. At home I have a PC that’s on more or less ²⁴⁄₇ with an *arr stack, jellyfin and some other services. They can only be accessed through Netbird. The services aren’t that important, the data doesn’t really need to be backed up since it’s not very important. On the VPS, however, I would like to host some more critical services, such as:

• Vaultwarden
• Immich
• Gitea
• Overleaf

I want them available ²⁴⁄₇, even if I decide to distrohop and wipe my PC at home. The problem is how to structure all this. My current idea is to run Gitea and Overleaf out in the open behind some reverse proxy without authentication (Nginx or Nginx Proxy Manager). I’d like Vaultwarden and Immich to be on the same VPS, but, I don’t want those services to be accessible to anyone but me, so I’d need some form of ACL or authentication system. I’m thinking of using Netbird for this, since I already use it on all of my devices.

So I would set up DNS records from within Netbird that would point immich.domain.tld and vaultwarden.domain.tld to the internal Netbird IP of the VPS. In the reverse proxy, I’d set up access control such that it only redirects the Netbird IP range to those services. On Cloudflare, I’d point git.domain.tld to the external IP of the VPS with proxy enabled.

Everything would receive HTTPS certificates, and I’d block incoming traffic on every port except for 80 and 443.

Is this a good setup? Any tips or recommendations? Any pitfalls?

Thanks!

@versionc
Nice setup, pretty close to what I run. Few thoughts:

Reverse proxy + auth: I'd look at Traefik over Nginx Proxy Manager - it plays really well with Docker (auto-discovers containers, handles Let's Encrypt certs). For the auth layer on Vaultwarden/Immich, consider Authentik instead of tying it to Netbird. Gives you SSO across everything and you're not locked into one VPN mesh for access control. I run Authentik in front of most of my services and it's been solid (minus the time I accidentally deleted its secrets and locked myself out of everything - back up your auth server config).

Netbird approach: Using Netbird IP ranges for access control on the reverse proxy can work, but it's a bit fragile. You're coupling your network topology to your auth policy. If Netbird changes IPs or you add a device, you're editing nginx configs. A proper auth proxy in front gives you more flexibility.

Gitea / Forgejo: I'd also recommend checking out Forgejo if you haven't - it's a community fork of Gitea that's been moving faster and stays fully open. I ran Gitea for years before switching. Either way, I'd push back on running it without auth entirely. Even for public repos, you want auth on the admin/write side. Forgejo (and Gitea) support public repos with anonymous read access - you don't need to skip auth, just configure repo visibility. The built-in controls are solid enough.

General structure: Your instinct to keep critical services (Vaultwarden especially) off the public internet is right. Password manager should have the smallest attack surface possible. The VPS-as-entry-point pattern is good. I do the same thing with a cheap VPS running a reverse tunnel so my home IP is never exposed.

One thing to think about: if you wipe your home PC, make sure your VPS services can stand alone. Docker volumes + a backup strategy (even just weekly to cheap cloud storage) will save you when something goes sideways.

@deepjoy @versionc name dropping Traefik AND Authentik in one comment? Ok, you’re talking my language. Followed.

I’ve been working on Habitat for the past two years. It all stemmed from this idea that I posted in April 2024.

Habitat is a free open-source, self hosted social platform for local communities. It is aimed at fostering local community discussions and discovery of areas of interest. This is why it is built primarily around location. A Habitat instance centers on a specific area, and the local community can make generic posts about that area, or they can make posts about specific locations in that area. More about what I’ve been building and the future plans here.

Features

• Habitat specification of location and size - enabling posts related to the local area
• Home feed - Displays the most recent posts
• Nearby feed - Displays posts sorted by proximity to the user
• Create posts - Upload photos, set locations, comments
• Categories - Location rules
• Amazon S3 image storage option
• Personalisation - Overrides Habitat defaults per user: kms/miles, hidden categories
• Moderation tools - User, post, comment moderation, block email addresses
• Announcements - Scheduled announcements
• Public moderation log - Keep moderator actions visible for 30 days

If you’re interest in this at all, please give it a spin and let me know how you get on. I’ll keep an eye here on Lemmy, but you can also post to the Habitat discussion board on GitHub.

Did you even understand the problem?

The answer is no, not yes.

Thanks for this. Regarding your point on on making people care, I’ve just written up a post that touches on this: https://feddit.uk/post/45292700

Federation is not yet built in, but I have a plan. There are some details here: https://carlnewton.github.io/posts/location-based-social-network/#connecting-instances

Hey hey, I am thinking of implementing a lself-hosted office suite and on my radar are OnlyOffice and CryptPad. I just demoed cryptpad.fr as a trial, and noticed it uses OnlyOffice client side. So next I wondered, what does CryptPad add to OO?

On the web site FAQs , CP says:

The CryptPad Document, Presentation & Spreadsheet applications are an OnlyOffice Docs integration. However, this only concerns the client-side code, CryptPad does not make use of the OnlyOffice Document Server. CryptPad’s encrypted collaboration, used for document, presentantion & spreadsheets and other applications, is completely different from the encryption system used in parts of upstream OnlyOffice. Some of CryptPad’s file format conversion tools are based on OnlyOffice code, but substantial work has been done to make it run in the browser rather than on the server, therefore avoiding the need to reveal the contents of users’ documents when converting.

That might help developers but I’m still not clear.

On the OO web site, they say the suite includes:

Three levels of encryption: at rest, in transit, end-to-end

Sounds good on the surface. NB - this is just for my family’s simple docs; I’m not trying to protect government whistleblowers here.

So I am still not clear. Why do I need to add CryptPad to the mix if OO already is the basis for the office suite?

Another NB - a big part of my self hosting is I want as few people I have to trust as possible. So if I don’t need CP to host docs on my VPS, I’d rather not add them to my server.

Thanks for any clues.

CryptPad is encrypted Google Docs/Office 365. Proton has been expanding their offering for this, but it’s not as good in my opinion.

A mobile app would be nice for CryptPad otherwise, it does the job.

Is it possible to listen to music hosted on Funkwhale from Mastoson (or any other fediverse social media for that matter)? I can see user accounts (though empty), but I couldn’t get albums or songs working.

Thanks. 85% for 2.0.0 is really good!

Thank you both for the news @myszka@lemmy.ml .