this post was submitted on 16 Jun 2024
3 points (100.0% liked)

Selfhosted

38817 readers
97 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

I am searching for a selfhosted and secure (end to end encryption) chat platform for my family (5-20 users), possibly one i can host on a raspi.

Is matrix a good choice, or should i try something else?

top 50 comments
sorted by: hot top controversial new old
[–] Neon@lemmy.world 3 points 2 months ago* (last edited 2 months ago)

Any Reason Signal doesn't do it?

Selfhosted isn't always the Best option

[–] Mango@lemmy.world 1 points 2 months ago (1 children)

Edible paper, lemon juice, and hair dryers.

[–] mcmodknower@programming.dev 0 points 2 months ago (1 children)

My threat model is not that big :)

[–] Mango@lemmy.world 0 points 2 months ago (1 children)

I guess you're not a furry then.

load more comments (1 replies)
[–] Decronym@lemmy.decronym.xyz 1 points 2 months ago* (last edited 1 month ago)

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters More Letters
IP Internet Protocol
RPi Raspberry Pi brand of SBC
SBC Single-Board Computer
SSL Secure Sockets Layer, for transparent encryption
TLS Transport Layer Security, supersedes SSL
VPS Virtual Private Server (opposed to shared hosting)
XMPP Extensible Messaging and Presence Protocol ('Jabber') for open instant messaging

5 acronyms in this thread; the most compressed thread commented on today has 7 acronyms.

[Thread #809 for this sub, first seen 16th Jun 2024, 15:45] [FAQ] [Full list] [Contact] [Source code]

[–] Im_old@lemmy.world 1 points 2 months ago (1 children)

I've been using matrix for years to this purpose, but moving to xmpp/prosody now

[–] DARbarian@kbin.run 1 points 2 months ago (1 children)

Can I ask why you're switching?

[–] Im_old@lemmy.world 2 points 2 months ago (1 children)

No.

Yeah ok. First of all, because I can 😁. I mean z what's good being an IT nerd if I can't change stuff when I want?

Jokes aside, I've been reading more recently on matrix and looks like there are some security issues in the design of the app/protocol. I'm on mobile now, I'll look for sources when I'm on pc. Also I don't like that it is a server centric system (so data is primarily on the server instead of the clients). Also it takes more resources than I was expecting. For less than 10 users I can't have less than 4gb of ram (on a dedicated debian server, running docker) or it swaps so much it kills the system.

So basically I'm testing out if xmpp is a better system for those issues.

[–] chordsphere1@sh.itjust.works 1 points 1 month ago* (last edited 1 month ago) (1 children)

Conversations being paid on the google play store is what's stopping me from going xmpp... I can't just say "message me via xmpp, you can use the Conversations app". Now I'd have to explain what F-Droid is and why would they even get another app store and enable "unknown apps". it's not doable. I remember telling my mom to install Signal (before I got into self hosting) because I deleted whatsapp and she got angry like she worked for the zuck, saying "what do you mean you don't use whatsapp" with an astonished face, started lecturing me on why I was destroying my social life... That just made me realize right now they probably wouldn't download conversations either...welp I just wanted to share

[–] Im_old@lemmy.world 2 points 1 month ago

I know exactly what you mean. Just for general information, I've found another android client that I think it's better than Conversations. It's called Monocles chat (and it's on f-droid). On matrix/xmpp I install the whatsapp bridge. I can convert a few close family members but no way everyone. For me it's an acceptable compromise. I get the close members to use my servers/apps, everyone else through the bridge so I can at least have all the chat in one place

[–] ninekeysdown@lemmy.world 1 points 2 months ago

XMPP is fantastic IMHO

If you want to support a great project and have great uptime check out conversations.im

I don’t recommend self hosting something you want available all the time. That being said everyone has different needs/uses 😊

[–] oldfart@lemm.ee 1 points 2 months ago* (last edited 2 months ago) (1 children)

XMPP. It just works, requires very little resources, is stable and has decent clients.

I would go with Snikket instead of Prosody if I had been starting now.

Conversations on phones, Dino or Gajim on PCs, plus a conversejs install on the xmpp server, to allow web access when needed.

Conversations is easy for the family to figure out.

[–] possiblylinux127@lemmy.zip 0 points 2 months ago (1 children)

XMPP if you are loving the 90's

[–] atzanteol@sh.itjust.works 0 points 2 months ago (1 children)

IP was invented in the '70s. Sometimes older protocols that work are just fine.

[–] princessnorah@lemmy.blahaj.zone 1 points 2 months ago (1 children)
load more comments (1 replies)
[–] rebellioustrickster@monero.town 1 points 2 months ago* (last edited 2 months ago)

Ideally, SimpleX (https://simplex.chat/). Session is nice, but less secure (https://getsession.org/). Delta Chat (https://delta.chat/en/) will be secure enough, and the most familiar visually. Lastly, XMPP is a great solution as well.

[–] kugmo@sh.itjust.works 1 points 2 months ago (1 children)

I know it's not self hosted but why not Signal? Matrix is demanding on a SBC and your family would probably get the 'unable to decrypt message, please re-verify keys' error that happens in encrypted matrix group chats and Element does not have the best UI especially if you want your grandma to use it.

[–] philpo@feddit.de 0 points 2 months ago

Very unlikely by now, these issues have been adressed a while ago.

[–] pewgar_seemsimandroid@lemmy.blahaj.zone 0 points 2 months ago* (last edited 2 months ago) (1 children)

three main ones I've seen in this comment section are

• XMPP

• Matrix

• SimpleX

[–] lemmyvore@feddit.nl 0 points 2 months ago (1 children)

So all of these encrypt the conversations so not even the server admin can access them?

[–] Lemmchen@feddit.de 1 points 2 months ago (2 children)

XMPP only does it with certain client extensions. And Matrix only does it when the rooms are set up this way. SimpleX does what you want, but is kind of unintuitive for the average user.
I say go with Signal, it does what you want and is idiot-proof.

[–] EngineerGaming@feddit.nl 1 points 2 months ago

To be fair, pretty much all major XMPP clients have adopted OMEMO encryption, so doesn't seem like much of an issue.

[–] philpo@feddit.de 0 points 2 months ago (1 children)

It is literally one setting in Matrix to force all rooms to only do encrypted messages.

Signal is pretty unintuitive when it comes to multiple devices per user, device transfers after a device has been lost,etc.

[–] essteeyou@lemmy.world 0 points 2 months ago (2 children)

Signal is perfectly good under normal usage. Everything is unintuitive when it comes to extremes like losing your device.

[–] EngineerGaming@feddit.nl 0 points 2 months ago (1 children)

Signal is annoying to use if you don't have a smartphone you can trust, since they do not allow registration from desktop. So either an Android VM or Signal-cli. But maybe it was just a one-off bug that the desktop client didn't bind to signal-cli for me. Still, the fact that you need an unofficial command-line application just to register makes it not exactly user-friendly.

[–] essteeyou@lemmy.world 1 points 2 months ago (1 children)

I imagine that most people's families will find Singal easier than using a CLI program anyway. It's rare to find an entire family without typical cellphones.

load more comments (1 replies)
[–] philpo@feddit.de 0 points 2 months ago

Wouldn't say that. With most Matrix Clients, WhatsApp, etc. it's far easier. Especially from a perspective of a elderly,less tech adept user.

[–] MonkderDritte@feddit.de 0 points 2 months ago (1 children)
[–] cryptix@discuss.tchncs.de 0 points 2 months ago (2 children)

Is it fast on a raspberry pi?

[–] MonkderDritte@feddit.de 0 points 2 months ago

Uh, don't know. XMPP likely yes.

[–] possiblylinux127@lemmy.zip 0 points 2 months ago (1 children)

Nothing is going to be fast on a raspberry pi.

[–] possiblylinux127@lemmy.zip 0 points 2 months ago* (last edited 2 months ago) (1 children)

Simplex chat would work

However, I wouldn't host on a Raspberry Pi or even at home for that matter. Get a VPS and host it there. Linode even has a one click app install for Simplex Chat

[–] matcha_addict@lemy.lol 0 points 2 months ago (1 children)
[–] possiblylinux127@lemmy.zip -1 points 2 months ago* (last edited 2 months ago)

To much risk and you won't have as much uptime.

[–] danhab99@programming.dev 0 points 2 months ago (1 children)

Rocket chat is like slack but FOSS.. haven't tried it myself but it could be something

[–] Lemmchen@feddit.de 0 points 2 months ago

Not E2EE though, or at least not fully.

[–] anzo@programming.dev 0 points 2 months ago (1 children)

E2E is complicated, if you self-host for a group, having TLS and encrypting data at rest (storage) may be enough. Get a threat model. That being said, I would recommend snikket.org which is a superset of extensions over XMPP which is the open source IM that was the base of almost every app out there. Matrix and Rocket are both alright too. Depends too on your resources, synapse requires too much RAM (or so I heard)

[–] thfi@discuss.tchncs.de 0 points 2 months ago (1 children)

Yes, XMPP with proper TLS on the server side and Conversations or one of its forks (preferably fetched from F-Droid) using OMEMO encryption should be good enough. If you are brave or paranoid, give Tox a try: https://tox.chat/

[–] diamond_shield@reddthat.com 1 points 2 months ago* (last edited 1 week ago)

Except tox's graphical clients aren't maintained anymore

[–] PlutoniumAcid@lemmy.world 0 points 2 months ago (1 children)

Mattermost runs as a Docker container and is excellent. You can create channels and groups which is incredibly useful.

[–] Lemmchen@feddit.de 0 points 2 months ago* (last edited 2 months ago)

Mattermost does not have E2EE to my knowledge.

[–] mike_wooskey@lemmy.thewooskeys.com 0 points 2 months ago (1 children)

Matrix is good, secure, very versatile, Foss, and easy to use, but I think not easy to set up or manage.

[–] philpo@feddit.de 0 points 2 months ago

Depends. If you use an intermediary layer like Yunohost/Cloudron/etc. or now your way around docker it's manageable easily.

[–] helenslunch@feddit.nl 0 points 2 months ago (1 children)

Matrix is fine but quite slow. Has excellent clients and is feature rich.

There's also an app called Circles that turns your Matrix chats into a social feed.

XMPP is fine but the available clients are outdated and ugly.

Session is also self-hostable and anonymous.

[–] philpo@feddit.de 0 points 2 months ago (1 children)

Matrix is slow on large instances, but that's not the case here, especially if no federation is done.

And the issue with sluggishness is currently the main development focus with ElementX/matrixX that will become mainstream matrix soon. With that even the large instances are extremely fast.

[–] helenslunch@feddit.nl 0 points 2 months ago (1 children)

Matrix is slow everywhere. Anyone who says otherwise is lying. Element X is also super slow. Waiting 5-10 secs for messages to appear every time I open the app. I know what I'm talking about.

[–] philpo@feddit.de 0 points 2 months ago (1 children)

And on which instance did you experience that?

[–] helenslunch@feddit.nl 0 points 2 months ago (1 children)
[–] philpo@feddit.de 0 points 2 months ago

Thanks for confirming that you're full of shit.

Because there are very very few Sliding Synch (which is the part of X that makes it faster) instances at the moment and only one that has a major userbase.....

load more comments
view more: next ›