view the rest of the comments
Selfhosted
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
Any reason to pick this over Immich?
I've never used Immich so I can't speak for or against it. When I started down the selfhosting road, I found Ente first, that's all.
That's a bit odd considering how much more popular Immich is, but ok.
Looks like Ente supports end to end encryption and Immich doesn’t.
Does that matter if you're self hosting and not exposing it to the internet?
That entirely depends on what your threat model is. You may not get any value out of that feature, but others may want it. One reason may be ease of storage drive disposal upon drive failure; i.e., if your drive is unencrypted and has your personal photos on it and it fails, the data is still recoverable with no easy way for you to destroy the data. If it was encrypted at rest, you wouldn’t have to worry about it because you would only have to rotate the encryption key.
If you're using a raidz array (which you should) the data would be irrecoverable anyways when you dispose of a single drive, wouldn't it? Also, why would you throw away a server drive that still works?
Why should I use a raidz array? I use other scalable storage solutions. Encryption at rest is a standard core tenant to cybersecurity. If one of the raidz drives is removed from the array, and you’re not encrypting your datasets, someone could recover data from the drive.
Well, if you're storing data you care about on your server you kind of need to have redundancy. The best filesystem for that (imo) is ZFS so yes, you should use that (or something similar). Apparently you do use a "scalable storage solution" but you also seem fond of mystery.
The solution is in the question. Just encrypt the dataset.