I have two services that my main account has zero admin rights on: gitlab and nextcloud. Both have, potentially, sensitive data owned by others. I've put massive passwords and MFA on both of those admin accounts. I figure if someone somehow harvests the session data or passwords and cracks 2fa on my account, that's the only one that will be affected.
Yes. Separation of privilege wherever I can.
Different account w/ different password and different name everywhere. Never repeat anything.
Never repeat anything 👍
Never repeat anything.
Never repeat anything
Why?
“Death to the ****************” -Anything
Ohhhh…. Yeah… don’t repeat that guy
I saw that lol. Damn ddos
What powers an admin have to break your stuff when you only have a single other account?
Some times separating concerns is meaningless. Some times it's useful to have many accounts for a single user. Some other times the admin/normal user separation is useful. It does really vary.
Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!