Does Podman work well when you have multiple rootless containers that you want to communicate securely in a least-privilege configuration (each container only has access to what it needs)? That is the one thing I couldn’t figure out how to do well with Podman.

deleted by creator

I think what you mean is abandoning self hosting right? Because self hosting Bitwarden would have similar issues if you don’t take the initiative to update.

To each their own I guess, databases are ridiculously expensive when managed and I always self host.

A team? For what OP described, all you need is one person

This is extremely overkill…

I actually do all of that, thanks to Gentoo :')

It does require some effort to manage, but I would argue it’s easier to keep all packages (including dependencies) up-to-date across the system, which is a huge security benefit imo.

The permission system, once you set it up, you never need to change it unless you’re changing something.

I am really interested in systemd-nspawn. Unfortunately I have openRC now (I liked it’s simplicity) so can’t try out systemd yet.

Is machinectl tied to systemd also?

A fellow gentoo user in the wild! Do you have any thoughts on using containers with gentoo? It pains me the idea of foregoing all the awesome features of portage by using containers.

What exactly does SE Linux provide over users / groups?

What’s the issue with VLAN?

I really wish there was a system wide package manager for docker containers, which would update software in all your containers at once similar to how a typical package manager would.

I did not completely rule out docker, but I wonder if I can obtain most of its benefits without this major con with package management. I mean I know it’s possible, since its mostly kernel features, but it would be difficult to simulate and the tooling is probably lacking (maybe nsjail can get me closer).

If you do not have an argument to make or anything of value to add, please stop replying to my comments or I will ignore them going forward.

The “app”, as you call it, only subscribes to the services provided.

And?

any features you described are on the server side (as to your post title)

None of the features I described (the interface) are on the server (the interface).

If you think otherwise, you’ll have to prove it to be taken seriously :)

You are asking about the server

I am not. Again, please refer to the first three words in the body of post. In general, I urge you to read posts before you respond to them.

Why else would you post in “self-HOSTED”. Applications aren’t hosted.

it’s in regards to a self-hosted xmpp server.

Monocles looks really nice! I’ll try it out, it may be exactly what I need. Thanks :)

You are asking about the server, not the apps.

No. Please refer to the third word in the body of my post, which spells “app”.

This is another “I WANT EVERYTHING FOR CHEAP!” post

Where? I am not seeing what you’re seeing. Feel free to quote my post to show where this is, and please demonstrate how it is “i want everything for cheap!” in all caps.

Telegram client is open source, and there are many forks of it with enhanced features (forkgram, nekogram, etc.)

You’re keeping the project alive. You’re purchasing the ability to continue using a project that will sustain and continue to get updates and add features.

I agree it is not clear, but it’s also hard to say that in one or two words.

That’s just a bandaid on capitalism’s issues. Urging people not to support the biggest actor will never work in the grand scheme of things, when said actor provides their best immediate interests.

Isn’t it enough to have a single offsite backup?

Whats the risk? My uptime is pretty good and I host from home.