2.5 years ago, I migrated all my services hosted on a cloud provider to a homeserver.
This homeserver is also my workstation/gaming/dev/everything. I use QubesOS (an operating system based on the Xen hypervisor), and wrote some document about it: https://neowutran.ovh/qubes/articles/homeserver.pdf
Basically, I am hosting:
- DNS
- Matrix
- Jitsi
- Mumble
- Peertube
- Screego
- Nextcloud
- Searxng
- Tor
- Wireguard VPN
- Copy of wikipedia
- Personal website And others.
And for TLS, to have better security, and to avoid relying on third party company/providers, I am using DANE.
https://en.wikipedia.org/wiki/DNS-based_Authentication_of_Named_Entities
https://sr.ht/~yukikoo/dane_without_root/
https://github.com/buffrr/letsdane
The “dane_without_root” is one of my projects and I am welcoming review / feedback on it
( I also posted about it on the QubesOS forum: https://forum.qubes-os.org/t/highlighting-neowutrans-technical-doc-about-qubes )
you are probably aware, but with DNS you are still dependent on a third party, namely the whims of the united states. check what happened with autistici.org recently
Ultimatly, there are still some dependencies on third party, but I reduced them to the minimum (If you know / have idea on how to remove even more third party, please tell). And about, autistici.org, the united states were able to do that because they own the “.org” tld. My tld is “.ovh”, so under the control of OVH and french state.
I remember reading about some kind of an alternate DNS root servers. they have some unique TLDs (sounds risky though, the possibility of future name clashes). not too popular, but it is being used. I think this is it: https://opennic.org/
but there are more: https://icannwiki.org/Alternative_Roots
though, it will not salvage the .org TLD. such a shame it got to that…