• 1 Post
  • 61 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle









  • As someone who has done e-commerce development and supports FLOSS and self-hosting, this is something I would outsource.

    It’s complex, and you can’t really handle payments yourself anyway. That requires certification.

    And people really don’t like it when their e-commerce is down and may able to quantify lost business due to an outage or bug in dollars or sense. It doesn’t feel great to realize something on your end resulted in hundreds of dollars of lost business.

    If the business is very small, places like Shopify have cheap starter tiers.






  • As someone who has had a career in hosting: good luck.

    Don’t forget backups, logging, monitoring, alerting on top of security updates, hardware failure, power outages, OS updates, app updates, and tech being deprecated and obsolete at a rapid pace.

    I’m in favor of a decentralized net with more self-hosting, but that requires more education and skill. You can’t automate away all the unpleasant and technical bits.



  • If you use the AWS load balancer product or their certificates, they have access to the private key, regardless of whether you forward traffic from the LB to the container over HTTPS or not.

    If you terminate the SSL with your own certificate yourself, Amazon still installs the SSM agent by default on Linux boxes. That runs as root and they control it.

    If you disable the SSM agent and terminate SSL within Linux boxes you control at AWS, then I don’t think they can access inside your host as long as you are using encrypted EBS volumes encrypted with your key.