Hello,

I took the degoogle boat in 2024 when I saw shit like gulf of murika.

So far I have no regrets, and if I have to do it again, I’ll do it again.

My actual setup : Phone : Pixel with GrapheneOS.

Mail : Proton Drive : Proton VPN : Proton Password Vault : Proton

Calendars/Contacts : radicale (selfhosted) Photo : Immich (selfhosted) Home : Home Assistant (selfhosted)

Notes : Standard notes YouTube : Newpipe/Grayjay/SmartTube Maps : CoMaps Authenticator : Aegis Wallet : Catima & (Mybank app)

Now with the last declarations from CEO of Proton, I’m seriously thinking to change some of my setup.

Did someone have recommandations for mail provider, with a private domain name? I want to be more resilient in case my mail provider turn on the dark side.

Actually I’m thinking about mailo services. 1,5€/months for 20Go with drive. If someone have some experience with them and coule advise me.

Also I need a solution for my aliases. I was thinking of Addy.io or duck.

VPN, I need a solution for Android with split tunneling, and also for linux. Maybe Amnezia, but there website don’t inspire me confidence.

And also I need a new password vault, easy to sync between my devices. Lots of articles talk about BitWarden and VaultWarden, but from US, and I don’t wan’t to feed the beast even if it’s a geniune editor focused on privacy.

  • CorrectAlias@piefed.blahaj.zoneEnglish
    8·
    4 days ago

    Mailbox.org for mail, probably. It allows for catch all inboxes, meaning you can send to any address and it’ll be routed properly, giving you your own sort of email alias service. It’s obviously not as refined or private as something like simplelogin, but if an address is compromised you can create an inbox rule to send it directly to trash, for example. This also gives you the flexibility of moving easily: you just update your DNS to your new mail provider that supports catch all, and you don’t need to update any email addresses anywhere.

    Vaultwarden is open source and self hosted, so it being “from the US” is a bit of a strange way to put it. Bitwarden is US based though. A solution that might work for you is using KeePassXC paried with syncthing, which will sync your vault between devices.

    For drive-like functionality, Nextcloud is probably one option. It can also do caldav like radicale.

    VPN, I’d take a look at AirVPN, personally.

    • LewdLemon@sh.itjust.works
      4·
      4 days ago

      +1 for a lot of the things you said. Adding to that:

      Vaultwarden may be open source, but it puts the onus of hosting it securely on you. Whenever you think about putting something on the internet (self-hosted or not): always assess the potential fallout in case of compromise. And having your password manager breached could easily be catastrophic, costing you a lot of time, nerves and potentially even money. That’s why, in my opinion, password managers do not belong on the internet, neither commercial nor self-hosted.

      Thus I’d strongly advise to go the KeePassXD (PC) / KeePassDX (Android) + Syncthing route. Points speaking in favour of this solution:

      • entirely offline - all of your keys are in an encrypted database file on your device, and thus inaccessible to any online attacker.
      • simple, yet feature rich: KeePassXC can do a lot of what the “big guys” can - TOTP, Passkeys, built-in SSH agent, auto-fill, etc.
      • independence: unlike Bitwarden (which keeps you reliant on a subscription with a for-profit company) and Vaultwarden (which is maintained by only a handful of guys on Github), KeePass is a reasonably large project that is both impossible to enshittify and maintained by a large base of contributors.
      • Syncthing still allows you to keep all of your devices in sync, in spite of the data being “offline” technically.

      +1 for Nextcloud with calDAV and cardDAV for contact sync. Bonus points for self-hosting it (but again, think carefully which files you put on there).

      As for the VPN, I’m currently still on Mullvad, but considering the switch to IVPN or Nym.

      • imminent_nebula@lemmy.ca
        2·
        4 days ago

        I’m looking into self hosting but I’m pretty new to all of this networking stuff. I’m going to be setting up an old laptop and try to self host a few things like immich and looking at syncthing. I set up KeePass yesterday and it works great, but without a server I’ve just been replacing the file per device as I make changes.

        If I understand, with syncthing installed on each device I can point KeePass from each of my PCs/laptops/phone to the directory on my laptop server? This will also work remotely?

        • LewdLemon@sh.itjust.works
          3·
          4 days ago

          I set up KeePass yesterday and it works great, but without a server I’ve just been replacing the file per device as I make changes.

          If I understand, with syncthing installed on each device I can point KeePass from each of my PCs/laptops/phone to the directory on my laptop server? This will also work remotely?

          There are several misunderstandings here. Let me clear this up:

          While there is a server-based version of Syncthing, you need no server to get all the syncthing goodness! Syncthing is designed to work peer-to-peer. Just hook up, say, your mobile phone and your PC and the folder(s) you’ve shared will be in sync - no server needed.

          As for “working remotely”: while Syncthing can do that, I’d advise sticking to the default configuration, which means “LAN only”. As soon as both devices are on the same network and “see” each other, they’ll sync. This will cover most use cases anyhow. If you’re out and about, make changes to your database on your phone and then return home, your phone will talk to your stationary PC in the background and update the DB. For the odd case where changes are made on both devices, Syncthing will create a conflict file, i.e. you’ll have both changed databases and can merge them so you won’t lose either change. (Syncthing even supports versioning files, but that is for later.)