Compare commits

...

2 Commits

Author SHA1 Message Date
Amolith c5a6dbd23b
move tech details to about 2021-11-15 00:07:33 -05:00
Amolith 1b5382d4c9
remove dns from privacy policy 2021-11-14 23:58:06 -05:00
3 changed files with 10 additions and 21 deletions

View File

@ -1,8 +1,8 @@
---
layout: page
title: About
subtitle: 'A little bit about NixNet and some financial information'
description: A little bit about NixNet and some financial information
subtitle: 'A little bit about NixNet and the guys who run it'
description: A little bit about NixNet and the guys who run it
permalink: /about/
---
**NixNet** is a network of websites and services hosted by the pseudonymous **Amolith** (me) and a close friend of his, Manton. The main reason we run these sites is because we like to be in control of our own data where feasible. The easiest way to accomplish that is to host the services we use. We make them public and maintain them simply because we want to; the Linux and FLOSS community has completely changed ours lives and we feel like this is a small way we can do our part and give back.
@ -12,3 +12,9 @@ Our [bus factor](https://en.wikipedia.org/wiki/Bus_factor) is currently 4. Shoul
Amolith's *personal* corner of the internet is [Secluded.Site](https://secluded.site).
For our financial information, check [the Finance](/finance) page.
## Some technical details
Our main server is the [AX51-NVME](https://www.hetzner.com/dedicated-rootserver/ax51-nvme) provided by [Hetzner](https://www.hetzner.com/) and located in Finland. The BigBlueButton server and its accompanying TURN server are Hetzner's CX22 and CX21 VPSes respectively; check their [cloud pricing page](https://www.hetzner.com/cloud) for more information. Our authoritative nameservers are each [Slice 1024](https://buyvm.net/kvm-dedicated-server-slices/) from [BuyVM](https://buyvm.net) and hosted in Las Vegas, New York, and Luxembourg. Daily backups are automated with [Tarsnap](https://tarsnap.com/) and [ACTS](https://github.com/alexjurkiewicz/acts/); we keep ~30 daily backups, 12 monthly backups, and manually delete yearly backups when we feel they're no longer necessary.
Our processes for setting Debian-based VPSes up is described in [our wiki](https://docs.nixnet.services/Debian), as is our process for [bare metal servers](https://docs.nixnet.services/Debian/Hetzner) and [Tarsnap](https://docs.nixnet.services/Tarsnap). Other resources pertaining to our setup can be found by exploring the wiki.

View File

@ -16,7 +16,7 @@ I prefer fiat because of the volatility of crypto but I do have a couple of wall
---
Our main server is the [AX51-NVME](https://www.hetzner.com/dedicated-rootserver/ax51-nvme) provided by [Hetzner](https://www.hetzner.com/) and located in Finland. The BigBlueButton server and its accompanying TURN server are Hetzner's CX22 and CX21 VPSes respectively; check their [cloud pricing page](https://www.hetzner.com/cloud) for more information. Our work-in-progress authoritative nameservers are each [Slice 1024](https://buyvm.net/kvm-dedicated-server-slices/) from [BuyVM](https://buyvm.net) and hosted in Las Vegas, New York, and Luxembourg according to the suffixes.
See the [about page](/about) for information regarding specific servers.
### Monthly server cost
* **Main**: 54,00€ ($63.52)

View File

@ -27,25 +27,8 @@ Your web browser communicates uniquely identifying information to all websites i
## Usage and storage of collected information
Whatever data is collected is stored on servers I have sole control over and it won't be shared with any third parties whatsoever.
## DNS services
In short:
* Haproxy TCP/HTTP logs are disabled. No IP addresses are collected.
* Unbound debug logs are enabled (verbosity: 1).
* Query amounts coming specifically from the DNS-over-TLS server aren't counted.
* Website/DNS-over-HTTPS gateway's NGINX logs are disabled.
To elaborate on Unbound's verbosity, if you have it installed, you can run `man unbound.conf`, search `verbosity` and read it yourself. More human-readably . . .
* Level 0 only outputs **errors**
* Level 1 gives **high-level operational information** (debug logs)
* Level 2 gives **detailed debug logs**
* Level 3 shows the admin what **queries** are going through Unbound
* Level 4 gives lower-level **algorithm** information
* Level 5 logs **client** information
There's no warranty, no uptime assurance, etc. so I recommend using multiple [resolvers](https://wiki.lelux.fi/dns/resolvers); that also improves privacy because the DNS queries are spread across multiple providers
# Exceptions
I do live in the US; I have three servers here, three in Germany, and another in Luxembourg. If, for whatever reason, I'm compelled by law enforcement to give up your email, IP address, or any other information, I will even though *I don't want to*. As such, I do whatever I can to make sure *I don't have that information*. If I don't have it, I can't share it.
I do live in the US; I have two servers here, one in Finland, and another in Luxembourg. If, for whatever reason, I'm compelled by law enforcement to give up your email, IP address, or any other information, I will even though *I don't want to*. As such, I do whatever I can to make sure *I don't have that information*. If I don't have it, I can't share it.
# Recommendations
To mitigate invasions of privacy like this, use a throwaway email address for registration, such as one from [anonbox](https://anonbox.net/) if you want a temporary address or [cock.li](https://cock.li/) for something a bit more permanent. Also provide a [fake name](https://fakena.me/fake-name/) and use the service from behind [Tor](https://www.torproject.org/) or a VPN. Rather than a VPN, however, I *strongly* recommend using Tor across all devices. They have an [Android version](https://www.torproject.org/download/#android) now and there's another browser they recommend for iOS called [Onion Browser](https://apps.apple.com/us/app/onion-browser/id519296448). I don't use iOS so I can't say whether or not it's any good, just that the Tor Project recommends it.