Oh, I know I could get them to run with enough work. I just don't have that much time to spend on initial implementation and upkeep of the charts.
I'm using FluxCD, which I believe can do deployments of plain Kubernetes manifests, but that still requires a decent amount of overhead to keep up to date.
Just because it’s not public facing doesn’t mean that it’s not an issue. It might be less of an issue, but it is still a massive vulnerability.
All it takes is one misconfiguration or other vulnerable system to use this as a jumping off point to burrow into other systems. Especially if this system has elevated access to sensitive locations within your network.
I don't think it's worth the devs' time to implement e2ee for DMs, there are lot of other things that need to be fixed first. Not only that, but if it's implemented in Lemmy, it'd make Lemmy non-interoperable to DM users from other federated platforms such as Mastodon or KBin. Which, I'm not sure works right now, but in theory would be possible.
I highly doubt it will, there are many much better solutions available, and as it says when DM’ing someone, you can you Matrix for e2ee. In fact, there is even an option in the profile settings to provide your Matrix username.
Implanting e2ee within DMs is massive scope creep and also really difficult to do properly.
The general rule is basically “never implement your own encryption/security, just use what’s already been implemented by people who actually know encryption/security”.
I’m on Kubernetes, but it’d be the same via Docker - a volume mount (iirc at the same place it stores local data if you don’t use S3, should be in the docs)
Ahh, I didn't get that far in the docs, but seeing as there are no (that I can tell) post limits, running a blog on Lemmy would work pretty well with a bit of a UI change.
Oh, I know I could get them to run with enough work. I just don't have that much time to spend on initial implementation and upkeep of the charts.
I'm using FluxCD, which I believe can do deployments of plain Kubernetes manifests, but that still requires a decent amount of overhead to keep up to date.