Thank you, integration with activitypub is what i was after!

Software:

• firewall, no inbound and do outbound restrictions
• use immutable OS
• full disk encryption (keep in mind that in many setups you will need to be beside the computer after restart)

Hardware:

• put it in the trusted datacenter (home stuff is not safe from teenagers and people that need computer’s electrical socket for a vacuum cleaner)

I am not particularly good at math myself, but I like to program stuff… If I am any good at it… decide for yourself: https://github.com/matejc?tab=repositories … anyway, if you have interest of doing something, stop the doubt, just do it.

Looks intriguing, reading a bit … some concepts look like they came from Nix

What are you talking about? What nonfree programs? Can you give an example? Btw, for VPS you normally just need ssh, and that is free and even OSS.

I haven’t used it, but here is my first web search result: https://github.com/droberson/ssh-honeypot Also: https://github.com/paralax/awesome-honeypots

Maybe this can be of use for you, it’s not declarative but it is in Nix, it shouldn’t be too hard for someone to make it declarative: https://github.com/matejc/win11

Indeed, well:

• SearxNG is a meta search engine, can aggregate search results from a ton of other search engines (like DDG, Google, Bing, … and a lot more)
• Whoogle, looks like a proxy to Google

Hey, I do not think that this is off topic at all. My instance is matejc.com

What search engine I use? All of them. I use Searxng.

Btw, I do not use postfix

if you use starttls, just use tls_type: "starttls" in your config

My instance had the same problem, the problem was that Hetzner (where I host my server) by default is not permitting outbound smtp ports. For me the solution was to use alternative port and even that a starttls alternative port which AWS SES luckily supports (that is what I am using for smtp server). Alternative would be also to just ask Hetzner to unblock the port (people have reported success with this method).

Yeah its annoying a bit, but honestly people need to know better then to be triggered on few extra question marks.