this post was submitted on 17 Aug 2023
31 points (86.0% liked)
Fediverse
28736 readers
182 users here now
A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).
If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!
Rules
- Posts must be on topic.
- Be respectful of others.
- Cite the sources used for graphs and other statistics.
- Follow the general Lemmy.world rules.
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
You can disable communities on your instance as an admin, but you would need to disable uploading.
Would that allow someone to still post/upload on other communities? Honestly haven't looked into this at all. Was going to in a couple weeks when I have time to actually sit down and test
Commenting because I'm also interested
Yes it works
When I finally look into it I'll make sure to let you know. Are you going to selfhist yourself or just want to use it if I actually set it up? Maybe you can help me host it. Lol
If you let me know how to help you, then I'm in. I have a raspberry pi 4 and some external hard drives. That's it. But I also have some money and would rather help you than host a lonely instance, Mr skankhunt
Yep. My instance just has me on it and posting elsewhere works without issue. Anything I upload goes to my instance and federates out. It's really quite great not having to worry about the instance drama when big ones defederate from each other. I also turned off NSFW so I don't have to worry about any of that content (legal or otherwise) even hitting my server.
Here's an image of me making this comment via Sync for Lemmy
Edit: I have community creation locked down to admins, which everything disables them on my instance.
I did the same thing for the same reason. Admin approval for everything and I'm the only admin. Basically a personal instance for me and my friends if they're too lazy to host but want to try Lemmy.
Exactly. I went one step further and decided not to use my admin account as my main. I don't run around as root on servers so I try not to do that with apps. It's easier with Lemmy because once it's set up all the admin tasks hit my email.
I also wanted to avoid that vulnerability that hit Lemmy World a few weeks ago that was only possible because the server admin got their jwt stolen, which wouldn't have been so impactful if they weren't on the admin account.
I didn't read the story about how exactly he lost the jwt, but is it still as big of an issue since 2fa was introduced?
I guess existing jwt hashes will bypass 2fa, but I'm not super worried since my instance has 3 users.
2fa was in at the time. IIRC the jwt was granted after 2fa so it didn't matter.
You've got a point though, small instances aren't gonna be nearly as useful as a giant one to threat actors. Assuming you don't give them a reason to go after you specifically they wouldn't have a reason to target such a tiny server.
Still though, I don't need that shiny A next to my name so I'm good with how I have it set up.
If a user from your instance posts to a community and wants to upload a file, that file will be saved to your instance. Not the instance in which the community is. Keep that in mind.