Hello,

I took the degoogle boat in 2024 when I saw shit like gulf of murika.

So far I have no regrets, and if I have to do it again, I’ll do it again.

My actual setup : Phone : Pixel with GrapheneOS.

Mail : Proton Drive : Proton VPN : Proton Password Vault : Proton

Calendars/Contacts : radicale (selfhosted) Photo : Immich (selfhosted) Home : Home Assistant (selfhosted)

Notes : Standard notes YouTube : Newpipe/Grayjay/SmartTube Maps : CoMaps Authenticator : Aegis Wallet : Catima & (Mybank app)

Now with the last declarations from CEO of Proton, I’m seriously thinking to change some of my setup.

Did someone have recommandations for mail provider, with a private domain name? I want to be more resilient in case my mail provider turn on the dark side.

Actually I’m thinking about mailo services. 1,5€/months for 20Go with drive. If someone have some experience with them and coule advise me.

Also I need a solution for my aliases. I was thinking of Addy.io or duck.

VPN, I need a solution for Android with split tunneling, and also for linux. Maybe Amnezia, but there website don’t inspire me confidence.

And also I need a new password vault, easy to sync between my devices. Lots of articles talk about BitWarden and VaultWarden, but from US, and I don’t wan’t to feed the beast even if it’s a geniune editor focused on privacy.

  • LewdLemon@sh.itjust.works
    4·
    1 day ago

    +1 for a lot of the things you said. Adding to that:

    Vaultwarden may be open source, but it puts the onus of hosting it securely on you. Whenever you think about putting something on the internet (self-hosted or not): always assess the potential fallout in case of compromise. And having your password manager breached could easily be catastrophic, costing you a lot of time, nerves and potentially even money. That’s why, in my opinion, password managers do not belong on the internet, neither commercial nor self-hosted.

    Thus I’d strongly advise to go the KeePassXD (PC) / KeePassDX (Android) + Syncthing route. Points speaking in favour of this solution:

    • entirely offline - all of your keys are in an encrypted database file on your device, and thus inaccessible to any online attacker.
    • simple, yet feature rich: KeePassXC can do a lot of what the “big guys” can - TOTP, Passkeys, built-in SSH agent, auto-fill, etc.
    • independence: unlike Bitwarden (which keeps you reliant on a subscription with a for-profit company) and Vaultwarden (which is maintained by only a handful of guys on Github), KeePass is a reasonably large project that is both impossible to enshittify and maintained by a large base of contributors.
    • Syncthing still allows you to keep all of your devices in sync, in spite of the data being “offline” technically.

    +1 for Nextcloud with calDAV and cardDAV for contact sync. Bonus points for self-hosting it (but again, think carefully which files you put on there).

    As for the VPN, I’m currently still on Mullvad, but considering the switch to IVPN or Nym.

    • imminent_nebula@lemmy.ca
      2·
      1 day ago

      I’m looking into self hosting but I’m pretty new to all of this networking stuff. I’m going to be setting up an old laptop and try to self host a few things like immich and looking at syncthing. I set up KeePass yesterday and it works great, but without a server I’ve just been replacing the file per device as I make changes.

      If I understand, with syncthing installed on each device I can point KeePass from each of my PCs/laptops/phone to the directory on my laptop server? This will also work remotely?

      • LewdLemon@sh.itjust.works
        3·
        1 day ago

        I set up KeePass yesterday and it works great, but without a server I’ve just been replacing the file per device as I make changes.

        If I understand, with syncthing installed on each device I can point KeePass from each of my PCs/laptops/phone to the directory on my laptop server? This will also work remotely?

        There are several misunderstandings here. Let me clear this up:

        While there is a server-based version of Syncthing, you need no server to get all the syncthing goodness! Syncthing is designed to work peer-to-peer. Just hook up, say, your mobile phone and your PC and the folder(s) you’ve shared will be in sync - no server needed.

        As for “working remotely”: while Syncthing can do that, I’d advise sticking to the default configuration, which means “LAN only”. As soon as both devices are on the same network and “see” each other, they’ll sync. This will cover most use cases anyhow. If you’re out and about, make changes to your database on your phone and then return home, your phone will talk to your stationary PC in the background and update the DB. For the odd case where changes are made on both devices, Syncthing will create a conflict file, i.e. you’ll have both changed databases and can merge them so you won’t lose either change. (Syncthing even supports versioning files, but that is for later.)