i rather doubt a government would push people out of signal-protocol apps and into Some Other App if they didn't already have a backdoor into the designated substitute
is 2fa reliable now? in the early days of lemmy one could end up in lockouts when trying to set it up
no idea. impossible to rule out. there's no good answer to 'why' that i've seen
strangest thing. i updated firefox and now i have no notifications. only a limited number of sites have notification perms; they still say they have that permission and my system settings still have firefox allowed. i have another machine running ubuntu (with firefox from the PPA for apt) and notifications are unchanged there.
Prerequisites
- Internet-facing web server with reverse proxy and domain name (preferably SSL of course)
- Server behind the reverse proxy with Rust environment
Installation
- Don't bother downloading the source code to your server; installing it that way gives you a big debug executable
- Instead just
cargo install mollysocket - Move the
mollysocketexecutable if desired - Run
mollysocketonce so that it will emit the default config
Configuration
- Fish the config file out of
.config/mollysocket/default-config.tomland copy it somewhere.
config.toml
- In the new file, replace the
allowed_endpointsline withallowed_endpoints = ['*']. The default 0.0.0.0 config appears to be a bug; this setting controls access to endpoints within the app, not IPs from outside. Leaving the original value causes mollysocket to reject everything. - Put a proper path in the
db = './mollysocket.db'line rather than just having it land wherever you're sitting. - Delete the
mollysocket.dbthat was created on first run (even if it's already where you're intending to put it). This is just to make sure the web server creates it and has the correct permissions.
Run script
- The environment variable ROCKET_PORT must be set or the server will sit and do nothing. It's best to create all of the environment variables mentioned in the README, whether that is in a user profile script or in a shell script that wraps startup. You can change any of these values, but they must exist.
-
export ROCKET_PORT=8020 export RUST_LOG=info export MOLLY_CONF=/path/to/your/config.toml
Proxy server
- You'll need to proxy everything from
/to your mollysocket server and ROCKET_PORT. - Exclude anything that you may need served from your web server, such as .well-known.
Things to know
- I get this warning on startup: "Forced shutdown is disabled. Runtime settings may be suboptimal."
- I also can't stop my server with any sane signal; only SIGKILL brings it down.
- Some discussion here: https://github.com/SergioBenitez/Rocket/discussions/1880
you probably already found this, but for others who might be curious:
in the settings if you change notification method from websocket to unified push, the UP settings come up, including a server address (which is what they intend to be used) or some air gap mode that i can't find documented
thank you. sounds like i get the official working, or nothing at all.
if your threat model were 'encrypt everything at rest', invitations to people outside your own service would be tricky as they have to be machine-readable text in a specific format. i'm sure it's possible but you'd have to be specific in looking for that as a feature.
my needs are more modest - don't store email in GAFAM or particular regimes - and i use runbox, which is bog-standard except for being stored somewhere else, being paid, and having slightly more homely webapps. using 'evolution' on linux, a bog-standard email program that's also a bit more homely than alternatives, invitations go out to whomever i choose and look normal. i make recurring events for myself all the time and remove individual occurrences. i've added on ical subscriptions for things like country holidays, which are the first thing you'll notice missing when you leave outlook.
the mail's just imap and the calendar's just caldav. when you get into providers that don't provide imap or caldav for (valid) security reasons, that's when you're more likely to get integration issues with regular people.
i'm shopping for mp3 players for precisely this reason - a friend has an ipod touch that abruptly stopped scrobbling. the last.fm app is stuck in a loop sucking battery. and she needs bluetooth anyway. she has always kept music and phone separate but now we have to ask the five whys on that before getting her a new unfamiliar gadget.
it's perhaps interesting to see what existing apps ZipoApps has on the Android Play Store.