From 41332a0a9897f2ba5724566ec35e5e08344d7647 Mon Sep 17 00:00:00 2001 From: Crowdin Bot Date: Thu, 11 Sep 2025 15:35:10 +0000 Subject: [PATCH] New Crowdin translations by GitHub Action --- i18n/ar/about/donation-acceptance-policy.md | 2 +- i18n/ar/ai-chat.md | 2 +- i18n/ar/android/obtaining-apps.md | 28 ++-- i18n/ar/device-integrity.md | 2 +- i18n/ar/dns.md | 57 ++------ i18n/ar/os/windows/group-policies.md | 18 +-- i18n/ar/passwords.md | 10 +- i18n/ar/self-hosting/dns-filtering.md | 49 +++++++ i18n/ar/self-hosting/email-servers.md | 4 +- i18n/ar/self-hosting/index.md | 125 +++++++++++------- i18n/ar/social-networks.md | 6 +- i18n/ar/tools.md | 11 -- i18n/bn-IN/dns.md | 57 ++------ i18n/bn-IN/passwords.md | 10 +- i18n/bn-IN/self-hosting/dns-filtering.md | 49 +++++++ i18n/bn-IN/self-hosting/email-servers.md | 4 +- i18n/bn-IN/self-hosting/index.md | 125 +++++++++++------- i18n/bn-IN/tools.md | 11 -- i18n/bn/dns.md | 57 ++------ i18n/bn/passwords.md | 10 +- i18n/bn/self-hosting/dns-filtering.md | 49 +++++++ i18n/bn/self-hosting/email-servers.md | 4 +- i18n/bn/self-hosting/index.md | 125 +++++++++++------- i18n/bn/tools.md | 11 -- i18n/cs/dns.md | 57 ++------ i18n/cs/passwords.md | 10 +- i18n/cs/self-hosting/dns-filtering.md | 49 +++++++ i18n/cs/self-hosting/email-servers.md | 4 +- i18n/cs/self-hosting/index.md | 35 ++++- i18n/cs/tools.md | 11 -- i18n/de/dns.md | 57 ++------ i18n/de/passwords.md | 10 +- i18n/de/self-hosting/dns-filtering.md | 49 +++++++ i18n/de/self-hosting/email-servers.md | 4 +- i18n/de/self-hosting/index.md | 35 ++++- i18n/de/tools.md | 11 -- i18n/el/dns.md | 57 ++------ i18n/el/passwords.md | 10 +- i18n/el/self-hosting/dns-filtering.md | 49 +++++++ i18n/el/self-hosting/email-servers.md | 4 +- i18n/el/self-hosting/index.md | 35 ++++- i18n/el/tools.md | 11 -- i18n/eo/dns.md | 57 ++------ i18n/eo/passwords.md | 10 +- i18n/eo/self-hosting/dns-filtering.md | 49 +++++++ i18n/eo/self-hosting/email-servers.md | 4 +- i18n/eo/self-hosting/index.md | 125 +++++++++++------- i18n/eo/tools.md | 11 -- i18n/es/dns.md | 57 ++------ i18n/es/passwords.md | 10 +- i18n/es/self-hosting/dns-filtering.md | 49 +++++++ i18n/es/self-hosting/email-servers.md | 4 +- i18n/es/self-hosting/index.md | 35 ++++- i18n/es/tools.md | 11 -- i18n/fa/dns.md | 57 ++------ i18n/fa/passwords.md | 10 +- i18n/fa/self-hosting/dns-filtering.md | 49 +++++++ i18n/fa/self-hosting/email-servers.md | 4 +- i18n/fa/self-hosting/index.md | 125 +++++++++++------- i18n/fa/tools.md | 11 -- i18n/fr/dns.md | 57 ++------ i18n/fr/passwords.md | 10 +- i18n/fr/self-hosting/dns-filtering.md | 49 +++++++ i18n/fr/self-hosting/email-servers.md | 4 +- i18n/fr/self-hosting/index.md | 35 ++++- i18n/fr/tools.md | 11 -- i18n/he/about/donation-acceptance-policy.md | 2 +- i18n/he/about/jobs.md | 2 +- i18n/he/ai-chat.md | 4 +- i18n/he/alternative-networks.md | 2 +- i18n/he/android/distributions.md | 8 +- i18n/he/android/general-apps.md | 4 +- i18n/he/android/index.md | 8 +- i18n/he/android/obtaining-apps.md | 30 ++--- i18n/he/basics/hardware.md | 4 +- i18n/he/device-integrity.md | 4 +- i18n/he/dns.md | 57 ++------ i18n/he/document-collaboration.md | 2 +- i18n/he/email-aliasing.md | 2 +- i18n/he/language-tools.md | 2 +- i18n/he/mobile-phones.md | 4 +- i18n/he/office-suites.md | 8 +- i18n/he/os/windows/group-policies.md | 18 +-- i18n/he/passwords.md | 10 +- i18n/he/pastebins.md | 2 +- i18n/he/privacy.md | 6 +- i18n/he/self-hosting/dns-filtering.md | 49 +++++++ i18n/he/self-hosting/email-servers.md | 4 +- i18n/he/self-hosting/index.md | 125 +++++++++++------- i18n/he/social-networks.md | 6 +- i18n/he/tools.md | 11 -- i18n/hi/dns.md | 57 ++------ i18n/hi/passwords.md | 10 +- i18n/hi/self-hosting/dns-filtering.md | 49 +++++++ i18n/hi/self-hosting/email-servers.md | 4 +- i18n/hi/self-hosting/index.md | 125 +++++++++++------- i18n/hi/tools.md | 11 -- i18n/hu/about/donation-acceptance-policy.md | 2 +- i18n/hu/ai-chat.md | 2 +- i18n/hu/android/obtaining-apps.md | 28 ++-- i18n/hu/device-integrity.md | 2 +- i18n/hu/dns.md | 57 ++------ i18n/hu/os/windows/group-policies.md | 18 +-- i18n/hu/passwords.md | 10 +- i18n/hu/self-hosting/dns-filtering.md | 49 +++++++ i18n/hu/self-hosting/email-servers.md | 4 +- i18n/hu/self-hosting/index.md | 125 +++++++++++------- i18n/hu/social-networks.md | 6 +- i18n/hu/tools.md | 11 -- i18n/id/about/donation-acceptance-policy.md | 2 +- i18n/id/about/jobs.md | 2 +- i18n/id/ai-chat.md | 4 +- i18n/id/alternative-networks.md | 2 +- i18n/id/android/distributions.md | 8 +- i18n/id/android/general-apps.md | 4 +- i18n/id/android/index.md | 8 +- i18n/id/android/obtaining-apps.md | 30 ++--- i18n/id/basics/hardware.md | 4 +- i18n/id/device-integrity.md | 4 +- i18n/id/dns.md | 57 ++------ i18n/id/document-collaboration.md | 2 +- i18n/id/email-aliasing.md | 2 +- i18n/id/language-tools.md | 2 +- i18n/id/mobile-phones.md | 4 +- i18n/id/office-suites.md | 8 +- i18n/id/os/windows/group-policies.md | 18 +-- i18n/id/passwords.md | 10 +- i18n/id/pastebins.md | 2 +- i18n/id/privacy.md | 6 +- i18n/id/self-hosting/dns-filtering.md | 49 +++++++ i18n/id/self-hosting/email-servers.md | 4 +- i18n/id/self-hosting/index.md | 125 +++++++++++------- i18n/id/social-networks.md | 6 +- i18n/id/tools.md | 11 -- i18n/it/dns.md | 57 ++------ i18n/it/passwords.md | 10 +- i18n/it/self-hosting/dns-filtering.md | 49 +++++++ i18n/it/self-hosting/email-servers.md | 4 +- i18n/it/self-hosting/index.md | 35 ++++- i18n/it/tools.md | 11 -- i18n/ja/about/donation-acceptance-policy.md | 2 +- i18n/ja/ai-chat.md | 2 +- i18n/ja/android/obtaining-apps.md | 28 ++-- i18n/ja/device-integrity.md | 2 +- i18n/ja/dns.md | 57 ++------ i18n/ja/os/windows/group-policies.md | 18 +-- i18n/ja/passwords.md | 10 +- i18n/ja/self-hosting/dns-filtering.md | 49 +++++++ i18n/ja/self-hosting/email-servers.md | 4 +- i18n/ja/self-hosting/index.md | 125 +++++++++++------- i18n/ja/social-networks.md | 6 +- i18n/ja/tools.md | 11 -- i18n/ko/about/donation-acceptance-policy.md | 2 +- i18n/ko/about/jobs.md | 2 +- i18n/ko/ai-chat.md | 4 +- i18n/ko/alternative-networks.md | 2 +- i18n/ko/android/distributions.md | 8 +- i18n/ko/android/general-apps.md | 4 +- i18n/ko/android/index.md | 8 +- i18n/ko/android/obtaining-apps.md | 30 ++--- i18n/ko/basics/hardware.md | 4 +- i18n/ko/device-integrity.md | 4 +- i18n/ko/dns.md | 57 ++------ i18n/ko/document-collaboration.md | 2 +- i18n/ko/email-aliasing.md | 2 +- i18n/ko/language-tools.md | 2 +- i18n/ko/mobile-phones.md | 4 +- i18n/ko/office-suites.md | 8 +- i18n/ko/os/windows/group-policies.md | 18 +-- i18n/ko/passwords.md | 10 +- i18n/ko/pastebins.md | 2 +- i18n/ko/privacy.md | 6 +- i18n/ko/self-hosting/dns-filtering.md | 49 +++++++ i18n/ko/self-hosting/email-servers.md | 4 +- i18n/ko/self-hosting/index.md | 125 +++++++++++------- i18n/ko/social-networks.md | 6 +- i18n/ko/tools.md | 11 -- .../ku-IQ/about/donation-acceptance-policy.md | 2 +- i18n/ku-IQ/about/jobs.md | 2 +- i18n/ku-IQ/ai-chat.md | 4 +- i18n/ku-IQ/alternative-networks.md | 2 +- i18n/ku-IQ/android/distributions.md | 8 +- i18n/ku-IQ/android/general-apps.md | 4 +- i18n/ku-IQ/android/index.md | 8 +- i18n/ku-IQ/android/obtaining-apps.md | 30 ++--- i18n/ku-IQ/basics/hardware.md | 4 +- i18n/ku-IQ/device-integrity.md | 4 +- i18n/ku-IQ/dns.md | 57 ++------ i18n/ku-IQ/document-collaboration.md | 2 +- i18n/ku-IQ/email-aliasing.md | 2 +- i18n/ku-IQ/language-tools.md | 2 +- i18n/ku-IQ/mobile-phones.md | 4 +- i18n/ku-IQ/office-suites.md | 4 +- i18n/ku-IQ/passwords.md | 10 +- i18n/ku-IQ/pastebins.md | 2 +- i18n/ku-IQ/privacy.md | 6 +- i18n/ku-IQ/self-hosting/dns-filtering.md | 49 +++++++ i18n/ku-IQ/self-hosting/email-servers.md | 4 +- i18n/ku-IQ/self-hosting/index.md | 125 +++++++++++------- i18n/ku-IQ/social-networks.md | 6 +- i18n/ku-IQ/tools.md | 11 -- i18n/nl/about/donation-acceptance-policy.md | 2 +- i18n/nl/about/jobs.md | 2 +- i18n/nl/ai-chat.md | 4 +- i18n/nl/alternative-networks.md | 2 +- i18n/nl/android/distributions.md | 8 +- i18n/nl/android/general-apps.md | 4 +- i18n/nl/android/index.md | 8 +- i18n/nl/android/obtaining-apps.md | 30 ++--- i18n/nl/basics/hardware.md | 4 +- i18n/nl/device-integrity.md | 4 +- i18n/nl/dns.md | 57 ++------ i18n/nl/document-collaboration.md | 2 +- i18n/nl/email-aliasing.md | 2 +- i18n/nl/language-tools.md | 2 +- i18n/nl/mobile-phones.md | 4 +- i18n/nl/office-suites.md | 8 +- i18n/nl/os/windows/group-policies.md | 18 +-- i18n/nl/passwords.md | 10 +- i18n/nl/pastebins.md | 2 +- i18n/nl/privacy.md | 6 +- i18n/nl/self-hosting/dns-filtering.md | 49 +++++++ i18n/nl/self-hosting/email-servers.md | 4 +- i18n/nl/self-hosting/index.md | 125 +++++++++++------- i18n/nl/social-networks.md | 6 +- i18n/nl/tools.md | 11 -- i18n/pl/dns.md | 57 ++------ i18n/pl/passwords.md | 10 +- i18n/pl/self-hosting/dns-filtering.md | 49 +++++++ i18n/pl/self-hosting/email-servers.md | 4 +- i18n/pl/self-hosting/index.md | 35 ++++- i18n/pl/tools.md | 11 -- .../pt-BR/about/donation-acceptance-policy.md | 2 +- i18n/pt-BR/ai-chat.md | 2 +- i18n/pt-BR/android/obtaining-apps.md | 28 ++-- i18n/pt-BR/device-integrity.md | 2 +- i18n/pt-BR/dns.md | 57 ++------ i18n/pt-BR/os/windows/group-policies.md | 18 +-- i18n/pt-BR/passwords.md | 10 +- i18n/pt-BR/self-hosting/dns-filtering.md | 49 +++++++ i18n/pt-BR/self-hosting/email-servers.md | 4 +- i18n/pt-BR/self-hosting/index.md | 125 +++++++++++------- i18n/pt-BR/social-networks.md | 6 +- i18n/pt-BR/tools.md | 11 -- i18n/pt/dns.md | 57 ++------ i18n/pt/passwords.md | 10 +- i18n/pt/self-hosting/dns-filtering.md | 49 +++++++ i18n/pt/self-hosting/email-servers.md | 4 +- i18n/pt/self-hosting/index.md | 125 +++++++++++------- i18n/pt/tools.md | 11 -- i18n/ru/dns.md | 57 ++------ i18n/ru/passwords.md | 10 +- i18n/ru/self-hosting/dns-filtering.md | 49 +++++++ i18n/ru/self-hosting/email-servers.md | 4 +- i18n/ru/self-hosting/index.md | 35 ++++- i18n/ru/tools.md | 11 -- i18n/sv/dns.md | 57 ++------ i18n/sv/passwords.md | 10 +- i18n/sv/self-hosting/dns-filtering.md | 49 +++++++ i18n/sv/self-hosting/email-servers.md | 4 +- i18n/sv/self-hosting/index.md | 125 +++++++++++------- i18n/sv/tools.md | 11 -- i18n/tr/dns.md | 57 ++------ i18n/tr/passwords.md | 10 +- i18n/tr/self-hosting/dns-filtering.md | 49 +++++++ i18n/tr/self-hosting/email-servers.md | 4 +- i18n/tr/self-hosting/index.md | 125 +++++++++++------- i18n/tr/tools.md | 13 +- i18n/uk/about/donation-acceptance-policy.md | 2 +- i18n/uk/ai-chat.md | 2 +- i18n/uk/dns.md | 57 ++------ i18n/uk/os/windows/group-policies.md | 18 +-- i18n/uk/passwords.md | 10 +- i18n/uk/self-hosting/dns-filtering.md | 49 +++++++ i18n/uk/self-hosting/email-servers.md | 4 +- i18n/uk/self-hosting/index.md | 125 +++++++++++------- i18n/uk/social-networks.md | 2 +- i18n/uk/tools.md | 11 -- i18n/vi/dns.md | 57 ++------ i18n/vi/passwords.md | 10 +- i18n/vi/self-hosting/dns-filtering.md | 49 +++++++ i18n/vi/self-hosting/email-servers.md | 4 +- i18n/vi/self-hosting/index.md | 125 +++++++++++------- i18n/vi/tools.md | 11 -- .../about/donation-acceptance-policy.md | 2 +- i18n/zh-Hant/ai-chat.md | 2 +- i18n/zh-Hant/android/obtaining-apps.md | 28 ++-- i18n/zh-Hant/device-integrity.md | 2 +- i18n/zh-Hant/dns.md | 57 ++------ i18n/zh-Hant/os/windows/group-policies.md | 18 +-- i18n/zh-Hant/passwords.md | 10 +- i18n/zh-Hant/self-hosting/dns-filtering.md | 49 +++++++ i18n/zh-Hant/self-hosting/email-servers.md | 4 +- i18n/zh-Hant/self-hosting/index.md | 125 +++++++++++------- i18n/zh-Hant/social-networks.md | 6 +- i18n/zh-Hant/tools.md | 11 -- .../zh-TW/about/donation-acceptance-policy.md | 2 +- i18n/zh-TW/ai-chat.md | 2 +- i18n/zh-TW/android/obtaining-apps.md | 28 ++-- i18n/zh-TW/device-integrity.md | 2 +- i18n/zh-TW/dns.md | 57 ++------ i18n/zh-TW/os/windows/group-policies.md | 18 +-- i18n/zh-TW/passwords.md | 10 +- i18n/zh-TW/self-hosting/dns-filtering.md | 49 +++++++ i18n/zh-TW/self-hosting/email-servers.md | 4 +- i18n/zh-TW/self-hosting/index.md | 125 +++++++++++------- i18n/zh-TW/social-networks.md | 6 +- i18n/zh-TW/tools.md | 11 -- i18n/zh/about/donation-acceptance-policy.md | 2 +- i18n/zh/about/jobs.md | 2 +- i18n/zh/ai-chat.md | 4 +- i18n/zh/alternative-networks.md | 2 +- i18n/zh/android/distributions.md | 8 +- i18n/zh/android/general-apps.md | 4 +- i18n/zh/android/index.md | 8 +- i18n/zh/android/obtaining-apps.md | 30 ++--- i18n/zh/basics/hardware.md | 4 +- i18n/zh/device-integrity.md | 4 +- i18n/zh/dns.md | 57 ++------ i18n/zh/document-collaboration.md | 2 +- i18n/zh/email-aliasing.md | 2 +- i18n/zh/language-tools.md | 2 +- i18n/zh/mobile-phones.md | 4 +- i18n/zh/office-suites.md | 8 +- i18n/zh/os/windows/group-policies.md | 18 +-- i18n/zh/passwords.md | 10 +- i18n/zh/pastebins.md | 2 +- i18n/zh/privacy.md | 6 +- i18n/zh/self-hosting/dns-filtering.md | 49 +++++++ i18n/zh/self-hosting/email-servers.md | 4 +- i18n/zh/self-hosting/index.md | 125 +++++++++++------- i18n/zh/social-networks.md | 6 +- i18n/zh/tools.md | 11 -- 333 files changed, 4340 insertions(+), 3680 deletions(-) create mode 100644 i18n/ar/self-hosting/dns-filtering.md create mode 100644 i18n/bn-IN/self-hosting/dns-filtering.md create mode 100644 i18n/bn/self-hosting/dns-filtering.md create mode 100644 i18n/cs/self-hosting/dns-filtering.md create mode 100644 i18n/de/self-hosting/dns-filtering.md create mode 100644 i18n/el/self-hosting/dns-filtering.md create mode 100644 i18n/eo/self-hosting/dns-filtering.md create mode 100644 i18n/es/self-hosting/dns-filtering.md create mode 100644 i18n/fa/self-hosting/dns-filtering.md create mode 100644 i18n/fr/self-hosting/dns-filtering.md create mode 100644 i18n/he/self-hosting/dns-filtering.md create mode 100644 i18n/hi/self-hosting/dns-filtering.md create mode 100644 i18n/hu/self-hosting/dns-filtering.md create mode 100644 i18n/id/self-hosting/dns-filtering.md create mode 100644 i18n/it/self-hosting/dns-filtering.md create mode 100644 i18n/ja/self-hosting/dns-filtering.md create mode 100644 i18n/ko/self-hosting/dns-filtering.md create mode 100644 i18n/ku-IQ/self-hosting/dns-filtering.md create mode 100644 i18n/nl/self-hosting/dns-filtering.md create mode 100644 i18n/pl/self-hosting/dns-filtering.md create mode 100644 i18n/pt-BR/self-hosting/dns-filtering.md create mode 100644 i18n/pt/self-hosting/dns-filtering.md create mode 100644 i18n/ru/self-hosting/dns-filtering.md create mode 100644 i18n/sv/self-hosting/dns-filtering.md create mode 100644 i18n/tr/self-hosting/dns-filtering.md create mode 100644 i18n/uk/self-hosting/dns-filtering.md create mode 100644 i18n/vi/self-hosting/dns-filtering.md create mode 100644 i18n/zh-Hant/self-hosting/dns-filtering.md create mode 100644 i18n/zh-TW/self-hosting/dns-filtering.md create mode 100644 i18n/zh/self-hosting/dns-filtering.md diff --git a/i18n/ar/about/donation-acceptance-policy.md b/i18n/ar/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/ar/about/donation-acceptance-policy.md +++ b/i18n/ar/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/ar/ai-chat.md b/i18n/ar/ai-chat.md index 618d5bb3..056b7cda 100644 --- a/i18n/ar/ai-chat.md +++ b/i18n/ar/ai-chat.md @@ -163,7 +163,7 @@ To check the authenticity and safety of the model, look for: - Community reviews and usage statistics - A "Safe" badge next to the model file (Hugging Face only) - Matching checksums[^1] - - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. + - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/ar/android/obtaining-apps.md b/i18n/ar/android/obtaining-apps.md index 0a0b83cd..1ea08bbe 100644 --- a/i18n/ar/android/obtaining-apps.md +++ b/i18n/ar/android/obtaining-apps.md @@ -86,26 +86,26 @@ If you download APK files to install manually, you can verify their signature wi 3. Extract the downloaded archive: - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. Run the signature verification command: - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. The resulting hashes can then be compared with another source. Some developers such as Signal [show the fingerprints](https://signal.org/android/apk) on their website. - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/ar/device-integrity.md b/i18n/ar/device-integrity.md index c3d2a96b..75bacb23 100644 --- a/i18n/ar/device-integrity.md +++ b/i18n/ar/device-integrity.md @@ -102,7 +102,7 @@ If you use iOS and are at high-risk, we have three additional suggestions for yo 2. Trigger _sysdiagnose_ logs often and back them up externally. These logs can provide invaluable data to future forensic investigators if need be. - The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. + The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. 3. Enable [Lockdown Mode](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode). diff --git a/i18n/ar/dns.md b/i18n/ar/dns.md index 76c0b525..65b0dbd1 100644 --- a/i18n/ar/dns.md +++ b/i18n/ar/dns.md @@ -1,5 +1,5 @@ --- -title: "محلِّلات أنظمة أسماء النطاقات (DNS)" +title: محلِّلات أنظمة أسماء النطاقات (DNS) icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -ينبغي استخدام أنظمة أسماء النطاقات المعمَّاة الموجودة في خوادم جهات خارجية فقط لتجاوز [حظرها](https://en.wikipedia.org/wiki/DNS_blocking)، وذلك إن تيقَّنت من أن ذلك ليست له عواقب. لن يخفي استخدام نظام أسماء نطاق معمًّى ما تتصفَّح. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. لن يخفي استخدام نظام أسماء نطاق معمًّى ما تتصفَّح. [استزد علمًا عن أنظمة أسماء النطاقات :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**ملفاد**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | لا يوجد | Based on server choice. لك العثور على قائمة التصفيات المستخدمة هنا. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**كواد٩**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | اختياري | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -تتيح الاستضافة الذاتية لنظام تسمية نطاقات التصفية في المنصَّات المتحكَّم بها، مثل أجهزة التلفاز الذكية وغيرها من أجهزة إنترنت الأشياء، وذلك لأن جهة العميل لا تحتاج لأي برمجيات. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -صُمِّم باي-هول ليستضاف في جهاز راسبيري باي، ولكنَّه ليس محدودًا به. لهذه البرمجية واجهة وِب سهلة الاستخدام ترى فيها المعلومات وتدير ما حُظر. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -لدى آدجارد هوم واجهة وِب متقنة الصنع ترى فيها المعلومات وتدير ما حُظر. - -[:octicons-home-16: الصفحة الرئيسة](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="سياسة الخصوصية" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=التوثيق} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="رمز المصدر" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### كنترول دي @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/ar/os/windows/group-policies.md b/i18n/ar/os/windows/group-policies.md index fa60afdb..211917e3 100644 --- a/i18n/ar/os/windows/group-policies.md +++ b/i18n/ar/os/windows/group-policies.md @@ -20,8 +20,8 @@ description: دليل سريع لتهيئة إعدادات Group Policy لج #### Device Guard - يجب ضبط إعداد “Turn On Virtualization Based Security” على **Enabled** - - اضبط خيار Platform Security Level على **Secure Boot and DMA Protection** - - اضبط إعداد Secure Launch Configuration على **Enabled** + - اضبط خيار Platform Security Level على **Secure Boot and DMA Protection** + - اضبط إعداد Secure Launch Configuration على **Enabled** #### Internet Communication Management @@ -53,14 +53,14 @@ description: دليل سريع لتهيئة إعدادات Group Policy لج - اضبط إعداد Turn off AutoPlay على **Enabled** - اضبط إعداد Disallow Autoplay for nonvolume devices على **Enabled** - اضبط إعداد Set the default behavior for AutoRun على **Enabled** - - اضبط خيار Default AutoRun Behavior على **Do not execute any AutoRun commands** + - اضبط خيار Default AutoRun Behavior على **Do not execute any AutoRun commands** #### BitLocker Drive Encryption قد ترغب في إعادة تشفير الـ operating system drive بعد تغيير هذه الإعدادات. - اضبط إعداد Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7) على **Enabled** - - اضبط خيار Select the encryption method على **AES-256** + - اضبط خيار Select the encryption method على **AES-256** تحديدك لـ Aes-256 في سياسة Windows 7 سيجعل النظام يستخدم Aes-256 حتى في النسخ الأحدث. @@ -87,12 +87,12 @@ description: دليل سريع لتهيئة إعدادات Group Policy لج #### Data Collection and Preview Builds - Allow Diagnostic Data: **Enabled** - - خيار الـ: **Send required diagnostic data** (في إصدار Pro)؛ أو - - خيار الـ: Diagnostic data off (في إصدار Enterprise أو Education) + - خيار الـ: **Send required diagnostic data** (في إصدار Pro)؛ أو + - خيار الـ: Diagnostic data off (في إصدار Enterprise أو Education) - اضبط إعداد Limit Diagnostic Log Collection على **Enabled** - اضبط إعداد Limit Dump Collection على **Enabled** - اضبط إعداد Limit optional diagnostic data for Desktop Analytics على **Enabled** - - الخيار: **Disable Desktop Analytics collection** + - الخيار: **Disable Desktop Analytics collection** - اضبط إعداد Do not show feedback notifications على **Enabled** #### File Explorer @@ -120,7 +120,7 @@ description: دليل سريع لتهيئة إعدادات Group Policy لج - اضبط إعداد Allow Cortana على **Disabled** - اضبط إعداد Don't search the web or display web results in Search على **Enabled** - اضبط إعداد Set what information is shared in Search على **Enabled** - - اضبط خيار Type of information على **Anonymous info** + - اضبط خيار Type of information على **Anonymous info** #### Sync your settings @@ -134,4 +134,4 @@ description: دليل سريع لتهيئة إعدادات Group Policy لج - اضبط إعداد Do not send additional data على **Enabled** - اضبط الإعداد Consent > Configure Default consent على **Enabled** - - اضبط خيار Consent level على **Always ask before sending data** + - اضبط خيار Consent level على **Always ask before sending data** diff --git a/i18n/ar/passwords.md b/i18n/ar/passwords.md index ba58acd0..095b4e37 100644 --- a/i18n/ar/passwords.md +++ b/i18n/ar/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Password Managers" +title: Password Managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/ar/self-hosting/dns-filtering.md b/i18n/ar/self-hosting/dns-filtering.md new file mode 100644 index 00000000..97cc7f8b --- /dev/null +++ b/i18n/ar/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. صُمِّم باي-هول ليستضاف في جهاز راسبيري باي، ولكنَّه ليس محدودًا به. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/ar/self-hosting/email-servers.md b/i18n/ar/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/ar/self-hosting/email-servers.md +++ b/i18n/ar/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/ar/self-hosting/index.md b/i18n/ar/self-hosting/index.md index fda8adcc..6ea1c081 100644 --- a/i18n/ar/self-hosting/index.md +++ b/i18n/ar/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/ar/social-networks.md b/i18n/ar/social-networks.md index def5299a..e9be7104 100644 --- a/i18n/ar/social-networks.md +++ b/i18n/ar/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/ar/tools.md b/i18n/ar/tools.md index 56172e5f..7e8422d8 100644 --- a/i18n/ar/tools.md +++ b/i18n/ar/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/bn-IN/dns.md b/i18n/bn-IN/dns.md index 9081bfff..02a2d9ea 100644 --- a/i18n/bn-IN/dns.md +++ b/i18n/bn-IN/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS Resolvers" +title: DNS Resolvers icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | No | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/bn-IN/passwords.md b/i18n/bn-IN/passwords.md index ba58acd0..095b4e37 100644 --- a/i18n/bn-IN/passwords.md +++ b/i18n/bn-IN/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Password Managers" +title: Password Managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/bn-IN/self-hosting/dns-filtering.md b/i18n/bn-IN/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/bn-IN/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/bn-IN/self-hosting/email-servers.md b/i18n/bn-IN/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/bn-IN/self-hosting/email-servers.md +++ b/i18n/bn-IN/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/bn-IN/self-hosting/index.md b/i18n/bn-IN/self-hosting/index.md index 25260650..6ea1c081 100644 --- a/i18n/bn-IN/self-hosting/index.md +++ b/i18n/bn-IN/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/bn-IN/tools.md b/i18n/bn-IN/tools.md index 12c83c32..a8b9671c 100644 --- a/i18n/bn-IN/tools.md +++ b/i18n/bn-IN/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/bn/dns.md b/i18n/bn/dns.md index 9081bfff..02a2d9ea 100644 --- a/i18n/bn/dns.md +++ b/i18n/bn/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS Resolvers" +title: DNS Resolvers icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | No | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/bn/passwords.md b/i18n/bn/passwords.md index ba58acd0..095b4e37 100644 --- a/i18n/bn/passwords.md +++ b/i18n/bn/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Password Managers" +title: Password Managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/bn/self-hosting/dns-filtering.md b/i18n/bn/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/bn/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/bn/self-hosting/email-servers.md b/i18n/bn/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/bn/self-hosting/email-servers.md +++ b/i18n/bn/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/bn/self-hosting/index.md b/i18n/bn/self-hosting/index.md index 25260650..6ea1c081 100644 --- a/i18n/bn/self-hosting/index.md +++ b/i18n/bn/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/bn/tools.md b/i18n/bn/tools.md index 12c83c32..a8b9671c 100644 --- a/i18n/bn/tools.md +++ b/i18n/bn/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/cs/dns.md b/i18n/cs/dns.md index b47a1d0f..06bac0e7 100644 --- a/i18n/cs/dns.md +++ b/i18n/cs/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS Resolvers" +title: DNS Resolvers icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Kapitalismus dohledu](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | Ne | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/cs/passwords.md b/i18n/cs/passwords.md index b2519458..f7b75fa2 100644 --- a/i18n/cs/passwords.md +++ b/i18n/cs/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Password Managers" +title: Password Managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/cs/self-hosting/dns-filtering.md b/i18n/cs/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/cs/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/cs/self-hosting/email-servers.md b/i18n/cs/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/cs/self-hosting/email-servers.md +++ b/i18n/cs/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/cs/self-hosting/index.md b/i18n/cs/self-hosting/index.md index ac94ce5b..6ea1c081 100644 --- a/i18n/cs/self-hosting/index.md +++ b/i18n/cs/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. diff --git a/i18n/cs/tools.md b/i18n/cs/tools.md index c4403bf7..e5f5a0aa 100644 --- a/i18n/cs/tools.md +++ b/i18n/cs/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/de/dns.md b/i18n/de/dns.md index 279372db..5f5f6d6f 100644 --- a/i18n/de/dns.md +++ b/i18n/de/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS-Resolver" +title: DNS-Resolver icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Überwachungskapitalismus](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Verschlüsseltes DNS hilft dir nicht dabei, deine Browsing-Aktivitäten zu verbergen. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Verschlüsseltes DNS hilft dir nicht dabei, deine Browsing-Aktivitäten zu verbergen. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | Nein | Based on server choice. Die verwendete Filterliste findest du hier. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -Eine selbst gehostete DNS-Lösung ist nützlich für die Filterung auf kontrollierten Plattformen wie Smart-TVs und anderen IoT-Geräten, da keine clientseitige Software erforderlich ist. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole ist für den Betrieb auf einem Raspberry Pi konzipiert, ist aber nicht auf diese Hardware beschränkt. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home bietet eine ausgefeilte Weboberfläche, über die Einblicke erhalten und blockierte Inhalte verwalten werden können. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/de/passwords.md b/i18n/de/passwords.md index 26866b44..e320bdfb 100644 --- a/i18n/de/passwords.md +++ b/i18n/de/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "Die besten Passwort-Manager zum Schutz deiner Privatsphäre und Sicherheit - Privacy Guides" -title: "Passwort-Manager" +title: Passwort-Manager icon: material/form-textbox-password description: Mit Passwortmanagern kannst du Passwörter und andere Anmeldeinformationen sicher speichern und verwalten. cover: passwords.webp @@ -177,16 +177,10 @@ Diese Passwort-Manager synchronisieren deine Passwörter mit einem Cloud-Server, Bitwarden verwendet standardmäßig [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) als Schlüsselableitungsalgorithmus (KDF). Als Alternative bietet es auch das sicherere [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id) an. You can change your account's KDF algorithm in the web vault: -- [x] Wähle **Einstellungen > Sicherheit > Schlüssel > KDF-Algorithmus > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Der serverseitige Code von Bitwarden ist [quelloffen](https://github.com/bitwarden/server). Wenn du also nicht die Bitwarden-Cloud nutzen möchtest, kannst du problemlos deinen eigenen Bitwarden-Synchronisierungsserver hosten. -**Vaultwarden** ist eine alternative Implementierung des Sync-Servers von Bitwarden, die in Rust geschrieben wurde und mit den offiziellen Bitwarden-Clients kompatibel ist. Sie eignet sich perfekt für den selbstgehosteten Einsatz, wenn der ressourcenintensive offizielle Dienst nicht ideal ist. Wenn du Bitwarden auf deinem eigenen Server hosten willst, wirst du mit ziemlicher Sicherheit lieber Vaultwarden als den offiziellen Servercode von Bitwarden verwenden wollen. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Dokumentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Quellcode" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Spenden" } - ### Proton Pass
diff --git a/i18n/de/self-hosting/dns-filtering.md b/i18n/de/self-hosting/dns-filtering.md new file mode 100644 index 00000000..1da71a31 --- /dev/null +++ b/i18n/de/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole ist für den Betrieb auf einem Raspberry Pi konzipiert, ist aber nicht auf diese Hardware beschränkt. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/de/self-hosting/email-servers.md b/i18n/de/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/de/self-hosting/email-servers.md +++ b/i18n/de/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/de/self-hosting/index.md b/i18n/de/self-hosting/index.md index ac94ce5b..6ea1c081 100644 --- a/i18n/de/self-hosting/index.md +++ b/i18n/de/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. diff --git a/i18n/de/tools.md b/i18n/de/tools.md index 2fb78245..dbc0da54 100644 --- a/i18n/de/tools.md +++ b/i18n/de/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/el/dns.md b/i18n/el/dns.md index 9081bfff..02a2d9ea 100644 --- a/i18n/el/dns.md +++ b/i18n/el/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS Resolvers" +title: DNS Resolvers icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | No | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/el/passwords.md b/i18n/el/passwords.md index 050a253b..a86bffd0 100644 --- a/i18n/el/passwords.md +++ b/i18n/el/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "Οι Καλύτεροι Διαχειριστές Κωδικών για την προστασία της Ιδιωτικότητας και της Ασφάλειάς σου - Privacy Guides" -title: "Διαχειριστές Κωδικών" +title: Διαχειριστές Κωδικών icon: material/form-textbox-password description: Οι διαχειριστές κωδικών σου επιτρέπουν να αποθηκεύσεις και να διαχειριστείς με ασφάλεια κωδικούς και άλλα διαπιστευτήρια. cover: passwords.webp @@ -177,16 +177,10 @@ For example, the password manager in Microsoft Edge doesn't offer end-to-end enc Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/el/self-hosting/dns-filtering.md b/i18n/el/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/el/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/el/self-hosting/email-servers.md b/i18n/el/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/el/self-hosting/email-servers.md +++ b/i18n/el/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/el/self-hosting/index.md b/i18n/el/self-hosting/index.md index ac94ce5b..6ea1c081 100644 --- a/i18n/el/self-hosting/index.md +++ b/i18n/el/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. diff --git a/i18n/el/tools.md b/i18n/el/tools.md index c556d495..215cceda 100644 --- a/i18n/el/tools.md +++ b/i18n/el/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/eo/dns.md b/i18n/eo/dns.md index 9081bfff..02a2d9ea 100644 --- a/i18n/eo/dns.md +++ b/i18n/eo/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS Resolvers" +title: DNS Resolvers icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | No | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/eo/passwords.md b/i18n/eo/passwords.md index a1f88313..66f8cb49 100644 --- a/i18n/eo/passwords.md +++ b/i18n/eo/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Password Managers" +title: Password Managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/eo/self-hosting/dns-filtering.md b/i18n/eo/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/eo/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/eo/self-hosting/email-servers.md b/i18n/eo/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/eo/self-hosting/email-servers.md +++ b/i18n/eo/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/eo/self-hosting/index.md b/i18n/eo/self-hosting/index.md index 25260650..6ea1c081 100644 --- a/i18n/eo/self-hosting/index.md +++ b/i18n/eo/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" }
diff --git a/i18n/eo/tools.md b/i18n/eo/tools.md index 12c83c32..a8b9671c 100644 --- a/i18n/eo/tools.md +++ b/i18n/eo/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/es/dns.md b/i18n/es/dns.md index 067e78b3..457ebc28 100644 --- a/i18n/es/dns.md +++ b/i18n/es/dns.md @@ -1,5 +1,5 @@ --- -title: "Solucionadores DNS" +title: Solucionadores DNS icon: material/dns description: Te recomendamos que elijas estos proveedores de DNS cifrado para sustituir la configuración predeterminada de tu ISP. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Capitalismo de Vigilancia](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Un DNS cifrado con servidores de terceros solo debe utilizarse para evitar el [bloqueo de DNS básico](https://en.wikipedia.org/wiki/DNS_blocking) cuándo puedas estar seguro de que no habrá ningunas consecuencias. Un DNS cifrado no te ayudará a esconder ninguna de tu actividad en línea. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Un DNS cifrado no te ayudará a esconder ninguna de tu actividad en línea. [Aprende más sobre DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ Estos son nuestros solucionadores de DNS públicos favoritos en función de sus | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | No | Basado en la elección del servidor. La lista de filtros utilizada se puede encontrar aquí. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Sí [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Texto en claro
DoH
DoT
DNSCrypt | Anónimo[^6] | Opcional | Basado en la elección del servidor. El bloqueo de malware está incluido por defecto. | Sí
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Servidor DNS autoalojado - -Una solución DNS autoalojada es útil para proporcionar filtrado en plataformas controladas, como Smart TV y otros dispositivos IoT, ya que no se necesita software del lado del cliente. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** es un [DNS-sinkhole](https://es.wikipedia.org/wiki/DNS_sinkhole) de código abierto que utiliza [filtrado DNS](https://cloudflare.com/learning/access-management/what-is-dns-filtering) para bloquear contenidos web no deseados, como la publicidad. - -Pi-hole está diseñado para alojarse en una Raspberry Pi, pero no se limita a dicho hardware. El software cuenta con una interfaz web fácil de usar para ver los datos y gestionar los contenidos bloqueados. - -[:octicons-home-16: Página Principal](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Política de Privacidad" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentación} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Código Fuente" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribuir } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** es un [DNS-sinkhole](https://es.wikipedia.org/wiki/DNS_sinkhole) de código abierto que utiliza [filtrado DNS](https://cloudflare.com/learning/access-management/what-is-dns-filtering) para bloquear contenidos web no deseados, como la publicidad. - -AdGuard Home cuenta con una interfaz web pulida para ver información y gestionar el contenido bloqueado. - -[:octicons-home-16: Página Principal](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Política de privacidad" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentación} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Código fuente" }inicio - - - -
- ## Filtrado DNS basado en la nube -Estas soluciones de filtrado DNS ofrecen un panel web en el que puedes personalizar las listas de bloqueo según tus necesidades exactas, de forma similar a un Pi-hole. Estos servicios suelen ser más fáciles de instalar y configurar que los autoalojados, como los anterioriores, y pueden utilizarse más fácilmente en múltiples redes (las soluciones autoalojadas suelen estar restringidas a su red doméstica/local, a menos que se establezca una configuración más avanzada). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ Estas soluciones de filtrado DNS ofrecen un panel web en el que puedes personali ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** es un servicio DNS personalizable que permite bloquear amenazas de seguridad, contenidos no deseados y publicidad a nivel de DNS. Además de sus planes de pago, ofrecen una serie de solucionadores DNS preconfigurados que puedes utilizar gratuitamente. +**Control D** es un servicio DNS personalizable que permite bloquear amenazas de seguridad, contenidos no deseados y publicidad a nivel de DNS. + +Además de sus planes de pago, ofrecen una serie de solucionadores DNS preconfigurados que puedes utilizar gratuitamente. [:octicons-home-16: Página Principal](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Política de Privacidad" } @@ -110,7 +69,9 @@ Estas soluciones de filtrado DNS ofrecen un panel web en el que puedes personali ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } - **NextDNS** es un servicio DNS personalizable que te permite bloquear amenazas de seguridad, contenidos no deseados y publicidad a nivel DNS. Ofrecen un plan gratuito totalmente funcional para uso limitado. + **NextDNS** es un servicio DNS personalizable que te permite bloquear amenazas de seguridad, contenidos no deseados y publicidad a nivel DNS. + +Ofrecen un plan gratuito totalmente funcional para uso limitado. [:octicons-home-16: Página Principal](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Política de Privacidad" } diff --git a/i18n/es/passwords.md b/i18n/es/passwords.md index cef0f8d3..963d0a92 100644 --- a/i18n/es/passwords.md +++ b/i18n/es/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "Los Mejores Administradores de Contraseñas para Proteger Tu Privacidad y Seguridad - Privacy Guides" -title: "Administradores de Contraseñas" +title: Administradores de Contraseñas icon: material/form-textbox-password description: Los administradores de contraseñas te permiten almacenar y administrar de forma segura contraseñas y otras credenciales. cover: passwords.webp @@ -177,16 +177,10 @@ Estos administradores de contraseñas sincronizan sus contraseñas con un servid Bitwarden utiliza [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) como algoritmo de función de derivación de claves (KDF) por defecto. También ofrece como alternativa [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), que es más seguro. Puede cambiar el algoritmo KDF de su cuenta en el almacén web: -- [x] Seleccione **Configuración > Seguridad > Claves > Algoritmo KDF > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** El código del lado del servidor de Bitwarden es de [código abierto](https://github.com/bitwarden/server), por lo que si no desea utilizar la nube de Bitwarden, puede alojar fácilmente su propio servidor de sincronización Bitwarden. -**Vaultwarden** es una implementación alternativa del servidor de sincronización de Bitwarden escrito en Rust y compatible con los clientes oficiales de Bitwarden, perfecto para el despliegue autoalojado donde la ejecución del servicio oficial de recursos pesados podría no ser ideal. Si usted está buscando autoalojar Bitwarden en su propio servidor, es casi seguro que desee utilizar Vaultwarden en lugar del código del servidor oficial de Bitwarden. - -[:octicons-repo-16: Repositorio Vaultwarden](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentación" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Código Fuente" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribuir" } - ### Proton Pass
diff --git a/i18n/es/self-hosting/dns-filtering.md b/i18n/es/self-hosting/dns-filtering.md new file mode 100644 index 00000000..8fd53b10 --- /dev/null +++ b/i18n/es/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protege contra la(s) siguiente(s) amenaza(s): + +- [:material-server-network: Proveedores de Servicios](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole está diseñado para alojarse en una Raspberry Pi, pero no se limita a dicho hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/es/self-hosting/email-servers.md b/i18n/es/self-hosting/email-servers.md index d8a03aee..6558344f 100644 --- a/i18n/es/self-hosting/email-servers.md +++ b/i18n/es/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Servidores de Correo Electrónico -meta_title: "Correo Electrónico Autoalojado - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: Para nuestros lectores más técnicos, el autoalojamiento de tu propio correo electrónico puede proporcionar garantías adicionales de privacidad al tener el máximo control sobre tus datos. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Proveedores de Servicios](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Los administradores de sistemas avanzados pueden plantearse crear su propio servidor de correo electrónico. Los servidores de correo requieren atención y un mantenimiento continuo para mantener la seguridad y la fiabilidad de la entrega del correo. Además de las soluciones «todo en uno» que aparecen a continuación, hemos seleccionado algunos artículos que cubren un enfoque más manual: +Advanced system administrators may consider setting up their own **email server**. Los servidores de correo requieren atención y un mantenimiento continuo para mantener la seguridad y la fiabilidad de la entrega del correo. Además de las soluciones «todo en uno» que aparecen a continuación, hemos seleccionado algunos artículos que cubren un enfoque más manual: - [Configurando un servidor de correo con OpenSMTPD, Dovecot y Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [Cómo Ejecutar Tu Propio Servidor de Correo](https://www.c0ffee.net/blog/mail-server-guide) (Agosto 2017) diff --git a/i18n/es/self-hosting/index.md b/i18n/es/self-hosting/index.md index 7d35f7cd..43705bf0 100644 --- a/i18n/es/self-hosting/index.md +++ b/i18n/es/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Autoalojamiento -meta_title: "Software y Servicios Autoalojados - Privacy Guides" -description: Para nuestros lectores más técnicos, el software y los servicios autoalojados pueden proporcionar garantías adicionales de privacidad, ya que tienes el máximo control sobre tus datos. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Proveedores de Servicios](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -El uso de **software y servicios autoalojados** puede ser una forma de lograr un mayor nivel de privacidad a través de la soberanía digital, en particular la independencia de los servidores en la nube controlados por desarrolladores o vendedores de productos. Por autoalojamiento, nos referimos al alojamiento de aplicaciones y datos en tu propio hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. Por autoalojamiento, nos referimos al alojamiento de aplicaciones y datos en tu propio hardware. El autoalojamiento de tus propias soluciones requiere conocimientos técnicos avanzados y una profunda comprensión de los riesgos asociados. Al convertirte en anfitrión de ti mismo y, posiblemente, de otros, asumes responsabilidades que de otro modo no tendrías. El autoalojamiento inadecuado de software de privacidad puede dejarte en peor situación que, por ejemplo, el uso de un proveedor de servicios cifrados de extremo a extremo, por lo que es mejor evitarlo si aún no te sientes cómodo haciéndolo. @@ -25,6 +25,35 @@ El autoalojamiento de tus propias soluciones requiere conocimientos técnicos av [Más información :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Redes Sociales El autoalojamiento de tu propia instancia de un software de red social puede ayudarte a eludir la posible [censura a nivel de servidor](../social-networks.md#censorship-resistance) por parte del administrador o el equipo de administración de un servidor público. diff --git a/i18n/es/tools.md b/i18n/es/tools.md index 26f3385a..6afed337 100644 --- a/i18n/es/tools.md +++ b/i18n/es/tools.md @@ -300,17 +300,6 @@ Si busca más **seguridad**, asegúrese siempre de conectarse a sitios web que u [Más información :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Soluciones Autoalojadas - -
- -- ![logo de AdGuard Home](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![logo de Pi-hole](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Más información :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Servicios Financieros #### Servicios de Enmascaramiento de Pagos diff --git a/i18n/fa/dns.md b/i18n/fa/dns.md index f3fb61c4..98210e2b 100644 --- a/i18n/fa/dns.md +++ b/i18n/fa/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS Resolvers" +title: DNS Resolvers icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: سرمایه‌داری نظارتی](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | No | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/fa/passwords.md b/i18n/fa/passwords.md index 928c213b..059ccfad 100644 --- a/i18n/fa/passwords.md +++ b/i18n/fa/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Password Managers" +title: Password Managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/fa/self-hosting/dns-filtering.md b/i18n/fa/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/fa/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/fa/self-hosting/email-servers.md b/i18n/fa/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/fa/self-hosting/email-servers.md +++ b/i18n/fa/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/fa/self-hosting/index.md b/i18n/fa/self-hosting/index.md index fda8adcc..6ea1c081 100644 --- a/i18n/fa/self-hosting/index.md +++ b/i18n/fa/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" }
diff --git a/i18n/fa/tools.md b/i18n/fa/tools.md index 8fe0b168..b32c2788 100644 --- a/i18n/fa/tools.md +++ b/i18n/fa/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/fr/dns.md b/i18n/fr/dns.md index c56b5df9..c748ea51 100644 --- a/i18n/fr/dns.md +++ b/i18n/fr/dns.md @@ -1,5 +1,5 @@ --- -title: "Résolveurs DNS" +title: Résolveurs DNS icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Capitalisme de surveillance](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Les DNS chiffrés avec des serveurs tiers ne doivent être utilisés que pour contourner le [blocage DNS](https://en.wikipedia.org/wiki/DNS_blocking) de base lorsque vous pouvez être sûr qu'il n'y aura pas de conséquences. Le DNS chiffré ne vous aidera pas à dissimuler vos activités de navigation. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Le DNS chiffré ne vous aidera pas à dissimuler vos activités de navigation. [En savoir plus sur les DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | Non | Based on server choice. La liste des filtres utilisés peut être consultée ici. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optionnel | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -Une solution DNS auto-hébergée est utile pour assurer le filtrage sur les plateformes contrôlées, telles que les téléviseurs intelligents et autres appareils IoT, car aucun logiciel côté client n'est nécessaire. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole est conçu pour être hébergé sur un Raspberry Pi, mais il n'est pas limité à ce type de matériel. Le logiciel est doté d'une interface web conviviale permettant de visualiser et de gérer les contenus bloqués. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home est doté d'une interface web conviviale qui permet de visualiser et de gérer le contenu bloqué. - -[:octicons-home-16: Page d'accueil](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Politique de confidentialité" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Code source" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/fr/passwords.md b/i18n/fr/passwords.md index 88d45300..bdfcaf13 100644 --- a/i18n/fr/passwords.md +++ b/i18n/fr/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "Les meilleurs gestionnaires de mots de passe pour protéger votre vie privée et votre sécurité - Privacy Guides" -title: "Gestionnaires de mots de passe" +title: Gestionnaires de mots de passe icon: material/form-textbox-password description: Les gestionnaires de mots de passe vous permettent de stocker et gérer en toute sécurité vos mots de passe et autres identifiants. cover: passwords.webp @@ -177,16 +177,10 @@ Ces gestionnaires de mots de passe synchronisent vos mots de passe sur un serveu Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Le code côté serveur de Bitwarden est [open source](https://github.com/bitwarden/server), donc si vous ne voulez pas utiliser le cloud Bitwarden, vous pouvez facilement héberger votre propre serveur de synchronisation Bitwarden. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. Si vous cherchez à héberger Bitwarden sur votre propre serveur, vous voudrez certainement utiliser Vaultwarden plutôt que le code serveur officiel de Bitwarden. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/fr/self-hosting/dns-filtering.md b/i18n/fr/self-hosting/dns-filtering.md new file mode 100644 index 00000000..1bcbc3c8 --- /dev/null +++ b/i18n/fr/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Fournisseurs de services](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole est conçu pour être hébergé sur un Raspberry Pi, mais il n'est pas limité à ce type de matériel. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/fr/self-hosting/email-servers.md b/i18n/fr/self-hosting/email-servers.md index 454945cc..9f33e1dc 100644 --- a/i18n/fr/self-hosting/email-servers.md +++ b/i18n/fr/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Serveurs de messagerie -meta_title: "Email auto-hébergé - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: Pour nos lecteurs plus avancés, l'auto-hébergement de votre propre courrier électronique peut fournir des garanties supplémentaires en matière de confidentalité en vous permettant de contrôler au maximum vos données. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Fournisseurs de services](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Configurer son propre serveur mail est une option intéressante pour les administateur sytème avancés. Les serveurs mail requière de une attention particulière et une maintenance continue pour garantir leur fiabilité et leur sécurité. En plus des solutions "tout-en-un" présentées ci-dessous, nous avons sélectionné quelques articles qui traitent d'une approche plus manuelle : +Advanced system administrators may consider setting up their own **email server**. Les serveurs mail requière de une attention particulière et une maintenance continue pour garantir leur fiabilité et leur sécurité. En plus des solutions "tout-en-un" présentées ci-dessous, nous avons sélectionné quelques articles qui traitent d'une approche plus manuelle : - [Mise en place d'un serveur de messagerie avec OpenSMTPD, Dovecot et Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (eng) (2019) - [Comment gérer son propre serveur de messagerie](https://www.c0ffee.net/blog/mail-server-guide) (eng) (août 2017) diff --git a/i18n/fr/self-hosting/index.md b/i18n/fr/self-hosting/index.md index 101b6b90..48b0ba02 100644 --- a/i18n/fr/self-hosting/index.md +++ b/i18n/fr/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Auto-Hébergement -meta_title: "Logiciels et Services Auto-Hébergés - Privacy Guides" -description: Pour nos lecteurs les plus expérimentés, les logiciels et les services auto-hébergés permettent de contrôler au maximum vos données afin d'avoir les meilleures garanties en termes de confidentialité. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Fournisseurs de services](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Les **logiciels et services auto-hébergés** peuvent être un bon moyen d'atteindre un plus haut niveau de souveraineté numérique, en particulier en remplaçant les clouds contrôlés par des entreprises ou des développeurs. L'auto-hébergement désigne le fait d'héberger vos applications et vos données sur votre propre hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. L'auto-hébergement désigne le fait d'héberger vos applications et vos données sur votre propre hardware. L'auto-hébergement nécessite des connaissances techniques avancées et une bonne compréhension des risques associés. En devanant votre propre hébergeur, et potentiellement celui d'autres personnes, vous acceptez de prendre certaines responsabilités spécifiques. Mal utiliser des logiciels dédiés à la confidentialité en auto-hébergement implique parfois des risques plus grands qu'utiliser les services d'un tiers chiffrés de bout en bout par exemple. Il peut donc être préférable de n'y avoir recours que si vous êtes vraiment à l'aise. @@ -25,6 +25,35 @@ L'auto-hébergement nécessite des connaissances techniques avancées et une bon [En savoir plus :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Réseaux sociaux L'auto-hébergement de vos propres instances de réseaux sociaux peut être un bon moyen de contourner une potentielle [censure au niveau serveur](../social-networks.md#censorship-resistance) d'un administrateur ou d'une équipe d'administration de serveur public. diff --git a/i18n/fr/tools.md b/i18n/fr/tools.md index e74ba6b4..ce58fde2 100644 --- a/i18n/fr/tools.md +++ b/i18n/fr/tools.md @@ -293,17 +293,6 @@ Nous [recommandons](dns.md#recommended-providers) un certain nombre de serveurs [En savoir plus :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Solutions auto-hébergées - -
- -- ![Logo d'AdGuard Home](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Logo de Pi-hole](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[En savoir plus :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Services financiers #### Services de masquage des paiements diff --git a/i18n/he/about/donation-acceptance-policy.md b/i18n/he/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/he/about/donation-acceptance-policy.md +++ b/i18n/he/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/he/about/jobs.md b/i18n/he/about/jobs.md index 6a5909b3..598c21d2 100644 --- a/i18n/he/about/jobs.md +++ b/i18n/he/about/jobs.md @@ -3,7 +3,7 @@ title: Job Openings description: Privacy Guides has a small, remote team of privacy researchers and advocates. Any open positions we may have in the future will be posted here. --- -Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed here. Please consider donating to support our cause. +Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed [here](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Please consider [donating](https://donate.magicgrants.org/privacyguides) to support our cause. We are occasionally looking for strong journalistic writers, product reviewers, and privacy experts to help us out, and any open positions will be posted below. diff --git a/i18n/he/ai-chat.md b/i18n/he/ai-chat.md index e507d1ab..0719cf8b 100644 --- a/i18n/he/ai-chat.md +++ b/i18n/he/ai-chat.md @@ -1,6 +1,6 @@ --- meta_title: "Recommended AI Chat: Private ChatGPT Alternatives - Privacy Guides" -title: AI Chat +title: "AI Chat" icon: material/assistant description: Unlike OpenAI's ChatGPT and its Big Tech competitors, these AI tools run locally so your data never leaves your desktop device. cover: ai-chatbots.webp @@ -163,7 +163,7 @@ To check the authenticity and safety of the model, look for: - Community reviews and usage statistics - A "Safe" badge next to the model file (Hugging Face only) - Matching checksums[^1] - - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. + - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/he/alternative-networks.md b/i18n/he/alternative-networks.md index a8b53073..e0d06290 100644 --- a/i18n/he/alternative-networks.md +++ b/i18n/he/alternative-networks.md @@ -1,5 +1,5 @@ --- -title: Alternative Networks +title: "Alternative Networks" icon: material/vector-polygon description: These tools allow you to access networks other than the World Wide Web. cover: alternative-networks.webp diff --git a/i18n/he/android/distributions.md b/i18n/he/android/distributions.md index 8fb2de0f..20c8b3e8 100644 --- a/i18n/he/android/distributions.md +++ b/i18n/he/android/distributions.md @@ -1,12 +1,12 @@ --- -meta_title: מערכות ההפעלה הטובות ביותר של אנדרואיד - Privacy Guides -title: הפצות אלטרנטיביות +meta_title: "מערכות ההפעלה הטובות ביותר של אנדרואיד - Privacy Guides" +title: "הפצות אלטרנטיביות" description: אתה יכול להחליף את מערכת ההפעלה בטלפון האנדרואיד שלך בחלופות מאובטחות ומכבדות פרטיות. schema: - "@context": http://schema.org "@type": WebPage name: מערכות הפעלה פרטיות לאנדרואיד - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: GrapheneOS @@ -16,7 +16,7 @@ schema: subjectOf: "@context": http://schema.org "@type": WebPage - url: ./ + url: "./" robots: nofollow, max-snippet:-1, max-image-preview:large --- diff --git a/i18n/he/android/general-apps.md b/i18n/he/android/general-apps.md index 3c02426a..65a407eb 100644 --- a/i18n/he/android/general-apps.md +++ b/i18n/he/android/general-apps.md @@ -1,11 +1,11 @@ --- -title: General Apps +title: "General Apps" description: The apps listed here are Android-exclusive and specifically enhance or replace key system functionality. schema: - "@context": http://schema.org "@type": WebPage name: General Android Apps - url: ./ + url: "./" - "@context": http://schema.org "@type": MobileApplication name: Shelter diff --git a/i18n/he/android/index.md b/i18n/he/android/index.md index dc9a9ec9..368a6604 100644 --- a/i18n/he/android/index.md +++ b/i18n/he/android/index.md @@ -1,13 +1,13 @@ --- -title: Android +title: "Android" description: Our advice for replacing privacy-invasive default Android features with private and secure alternatives. -icon: simple/android +icon: 'simple/android' cover: android.webp schema: - "@context": http://schema.org "@type": WebPage name: Android Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: Android @@ -38,7 +38,7 @@ There are also many private alternatives to the apps that come pre-installed on When you buy an Android phone, the default operating system comes bundled with apps and functionality that are not part of the Android Open Source Project. Many of these apps—even apps like the dialer which provide basic system functionality—require invasive integrations with Google Play Services, which in turn asks for privileges to access your files, contacts storage, call logs, SMS messages, location, camera, microphone, and numerous other things on your device in order for those basic system apps and many other apps to function in the first place. Frameworks like Google Play Services increase the attack surface of your device and are the source of various privacy concerns with Android. -This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. לרוע המזל, הפצות רבות של אנדרואיד מותאמות אישית מפרות לעתים קרובות את מודל האבטחה של אנדרואיד בכך שאינן תומכות בתכונות אבטחה קריטיות כגון AVB, הגנה לאחור, עדכוני קושחה וכן הלאה. Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require more permissive SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. +This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. לרוע המזל, הפצות רבות של אנדרואיד מותאמות אישית מפרות לעתים קרובות את מודל האבטחה של אנדרואיד בכך שאינן תומכות בתכונות אבטחה קריטיות כגון AVB, הגנה לאחור, עדכוני קושחה וכן הלאה. Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require [more permissive](https://github.com/LineageOS/android_system_sepolicy/search?q=userdebug&type=code) SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. באופן אידיאלי, בעת בחירת הפצת אנדרואיד מותאמת אישית, עליך לוודא שהיא מקיימת את מודל האבטחה של אנדרואיד. At the very least, the distribution should have production builds, support for AVB, rollback protection, timely firmware and operating system updates, and SELinux in [enforcing mode](https://source.android.com/security/selinux/concepts#enforcement_levels). All of our recommended Android distributions satisfy these criteria: diff --git a/i18n/he/android/obtaining-apps.md b/i18n/he/android/obtaining-apps.md index f5c0987a..ad9776ac 100644 --- a/i18n/he/android/obtaining-apps.md +++ b/i18n/he/android/obtaining-apps.md @@ -1,5 +1,5 @@ --- -title: השגת יישומים +title: "השגת יישומים" description: אנו ממליצים על שיטות אלה להשגת יישומים באנדרואיד מבלי לקיים אינטראקציה עם שירותי גוגל משחקים. --- @@ -86,26 +86,26 @@ If you download APK files to install manually, you can verify their signature wi 3. Extract the downloaded archive: - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. Run the signature verification command: - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. The resulting hashes can then be compared with another source. Some developers such as Signal [show the fingerprints](https://signal.org/android/apk) on their website. - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/he/basics/hardware.md b/i18n/he/basics/hardware.md index 11779322..086481af 100644 --- a/i18n/he/basics/hardware.md +++ b/i18n/he/basics/hardware.md @@ -1,6 +1,6 @@ --- -title: Choosing Your Hardware -icon: material/chip +title: "Choosing Your Hardware" +icon: 'material/chip' description: Software isn't all that matters; learn about the hardware tools you use every day to protect your privacy. --- diff --git a/i18n/he/device-integrity.md b/i18n/he/device-integrity.md index 19cfcad4..c93ec43c 100644 --- a/i18n/he/device-integrity.md +++ b/i18n/he/device-integrity.md @@ -1,5 +1,5 @@ --- -title: תקינות המכשיר +title: "תקינות המכשיר" icon: material/security description: ניתן להשתמש בכלים אלה כדי לבדוק אם המכשירים שלך נפגעו. cover: device-integrity.webp @@ -102,7 +102,7 @@ If you use iOS and are at high-risk, we have three additional suggestions for yo 2. Trigger _sysdiagnose_ logs often and back them up externally. These logs can provide invaluable data to future forensic investigators if need be. - The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. + The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. 3. Enable [Lockdown Mode](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode). diff --git a/i18n/he/dns.md b/i18n/he/dns.md index 6a882c65..f1abf8a1 100644 --- a/i18n/he/dns.md +++ b/i18n/he/dns.md @@ -1,5 +1,5 @@ --- -title: "ספקי DNS" +title: ספקי DNS icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: קפיטליזם מעקב](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -יש להשתמש ב-DNS מוצפן עם שרתי צד שלישי רק כדי לעקוף [חסימת DNS](https://en.wikipedia.org/wiki/DNS_blocking) בסיסית כאשר אתה יכול להיות בטוח שלא יהיו השלכות. DNS מוצפן לא יעזור לך להסתיר את פעילות הגלישה שלך. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. DNS מוצפן לא יעזור לך להסתיר את פעילות הגלישה שלך. [למד עוד :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | לא | Based on server choice. רשימת סינון בשימוש ניתן למצוא כאן. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | אופציונאלי | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -פתרון DNS שמתארח בעצמו שימושי לאספקת סינון בפלטפורמות מבוקרות, כגון טלוויזיות חכמות והתקני IoT אחרים, מכיוון שאין צורך בתוכנה בצד הלקוח. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole מיועד להתארח ב-Raspberry Pi, אך הוא אינו מוגבל לחומרה כזו. התוכנה כוללת ממשק אינטרנט ידידותי כדי להציג תובנות ולנהל תוכן חסום. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home כולל ממשק אינטרנט משופשף כדי להציג תובנות ולנהל תוכן חסום. - -[:octicons-home-16: דף הבית](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="מדיניות פרטיות" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=תיעוד} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="קוד מקור" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/he/document-collaboration.md b/i18n/he/document-collaboration.md index 5619b7d9..ef95c90b 100644 --- a/i18n/he/document-collaboration.md +++ b/i18n/he/document-collaboration.md @@ -1,5 +1,5 @@ --- -title: Document Collaboration +title: "Document Collaboration" icon: material/account-group description: Most online office suites do not support E2EE, meaning the cloud provider has access to everything you do. cover: document-collaboration.webp diff --git a/i18n/he/email-aliasing.md b/i18n/he/email-aliasing.md index 258fb2e5..359c1f0e 100644 --- a/i18n/he/email-aliasing.md +++ b/i18n/he/email-aliasing.md @@ -1,5 +1,5 @@ --- -title: Email Aliasing +title: "Email Aliasing" icon: material/email-lock description: An email aliasing service allows you to easily generate a new email address for every website you register for. cover: email-aliasing.webp diff --git a/i18n/he/language-tools.md b/i18n/he/language-tools.md index aec09ff1..398f701d 100644 --- a/i18n/he/language-tools.md +++ b/i18n/he/language-tools.md @@ -1,5 +1,5 @@ --- -title: Language Tools +title: "Language Tools" icon: material/alphabetical-variant description: These language tools do not send your input text to a server and can be used offline and self-hosted. cover: language-tools.webp diff --git a/i18n/he/mobile-phones.md b/i18n/he/mobile-phones.md index 310a5502..f2bda9b9 100644 --- a/i18n/he/mobile-phones.md +++ b/i18n/he/mobile-phones.md @@ -1,5 +1,5 @@ --- -title: Mobile Phones +title: "Mobile Phones" icon: material/cellphone-check description: These mobile devices provide the best hardware security support for custom Android operating systems. cover: android.webp @@ -7,7 +7,7 @@ schema: - "@context": http://schema.org "@type": WebPage name: Mobile Phone Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": Product name: Pixel diff --git a/i18n/he/office-suites.md b/i18n/he/office-suites.md index d0fc9e51..5ee0d819 100644 --- a/i18n/he/office-suites.md +++ b/i18n/he/office-suites.md @@ -1,5 +1,5 @@ --- -title: Office Suites +title: "Office Suites" icon: material/file-edit-outline description: These office suites offer their full functionality without an account and can be used offline. cover: office-suites.webp @@ -48,9 +48,9 @@ Choose an **office suite** that does not require logging in to an account to acc **OnlyOffice** is a cloud-based free and open-source office suite with extensive functionality, including integration with Nextcloud. [:octicons-home-16: Homepage](https://onlyoffice.com){ .md-button .md-button--primary } -:octicons-eye-16:{ .card-link title="Privacy Policy" } -:octicons-info-16:{ .card-link title=Documentation} -:octicons-code-16:{ .card-link title="Source Code" } +[:octicons-eye-16:](https://help.onlyoffice.com/products/files/doceditor.aspx?fileid=5048502&doc=SXhWMEVzSEYxNlVVaXJJeUVtS0kyYk14YWdXTEFUQmRWL250NllHNUFGbz0_IjUwNDg1MDIi0){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://helpcenter.onlyoffice.com/userguides.aspx){ .card-link title=Documentation} +[:octicons-code-16:](https://github.com/ONLYOFFICE){ .card-link title="Source Code" }
Downloads diff --git a/i18n/he/os/windows/group-policies.md b/i18n/he/os/windows/group-policies.md index 2dea5f33..f866d4d5 100644 --- a/i18n/he/os/windows/group-policies.md +++ b/i18n/he/os/windows/group-policies.md @@ -20,8 +20,8 @@ To change any group policy, double click it and select Enabled or Disabled at th #### Device Guard - Turn On Virtualization Based Security: **Enabled** - - Platform Security Level: **Secure Boot and DMA Protection** - - Secure Launch Configuration: **Enabled** + - Platform Security Level: **Secure Boot and DMA Protection** + - Secure Launch Configuration: **Enabled** #### Internet Communication Management @@ -52,14 +52,14 @@ AutoRun and AutoPlay are features which allow Windows to run a script or perform - Turn off AutoPlay: **Enabled** - Disallow Autoplay for nonvolume devices: **Enabled** - Set the default behavior for AutoRun: **Enabled** - - Default AutoRun Behavior: **Do not execute any AutoRun commands** + - Default AutoRun Behavior: **Do not execute any AutoRun commands** #### BitLocker Drive Encryption You may wish to re-encrypt your operating system drive after changing these settings. - Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7): **Enabled** - - Select the encryption method: **AES-256** + - Select the encryption method: **AES-256** Setting the cipher strength for the Windows 7 policy still applies that strength to newer versions of Windows. @@ -85,12 +85,12 @@ Despite the names of these policies, this doesn't _require_ you to do anything b #### Data Collection and Preview Builds - Allow Diagnostic Data: **Enabled** - - Options: **Send required diagnostic data** (Pro Edition); or - - Options: **Diagnostic data off** (Enterprise or Education Edition) + - Options: **Send required diagnostic data** (Pro Edition); or + - Options: **Diagnostic data off** (Enterprise or Education Edition) - Limit Diagnostic Log Collection: **Enabled** - Limit Dump Collection: **Enabled** - Limit optional diagnostic data for Desktop Analytics: **Enabled** - - Options: **Disable Desktop Analytics collection** + - Options: **Disable Desktop Analytics collection** - Do not show feedback notifications: **Enabled** #### File Explorer @@ -118,7 +118,7 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Allow Cortana: **Disabled** - Don't search the web or display web results in Search: **Enabled** - Set what information is shared in Search: **Enabled** - - Type of information: **Anonymous info** + - Type of information: **Anonymous info** #### Sync your settings @@ -132,4 +132,4 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Do not send additional data: **Enabled** - Consent > Configure Default consent: **Enabled** - - Consent level: **Always ask before sending data** + - Consent level: **Always ask before sending data** diff --git a/i18n/he/passwords.md b/i18n/he/passwords.md index dc95b432..cf858b35 100644 --- a/i18n/he/passwords.md +++ b/i18n/he/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "מנהלי סיסמאות" +title: מנהלי סיסמאות icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ For example, the password manager in Microsoft Edge doesn't offer end-to-end enc Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. אם אתם מחפשים לארח את Bitwarden באופן עצמאי בשרת שלכם, קרוב לוודאי שתרצו להשתמש ב-Vaultwarden על פני קוד השרת הרשמי של Bitwarden. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/he/pastebins.md b/i18n/he/pastebins.md index fcf10a50..0afc92f2 100644 --- a/i18n/he/pastebins.md +++ b/i18n/he/pastebins.md @@ -1,5 +1,5 @@ --- -title: Pastebins +title: "Pastebins" icon: material/content-paste description: These tools allow you to have full control of any pasted data you share to other parties. cover: pastebins.webp diff --git a/i18n/he/privacy.md b/i18n/he/privacy.md index 27a9fc14..75ae6718 100644 --- a/i18n/he/privacy.md +++ b/i18n/he/privacy.md @@ -1,11 +1,11 @@ --- -title: Privacy Policy +title: "Privacy Policy" description: We do not sell or share your data with any third-parties. --- ## What is Privacy Guides? -Privacy Guides is a community project operated by a number of active contributors. The public list of team members can be found on our forum. Privacy Guides is legally administered by MAGIC Grants, a 501(c)(3) public charity acting as our fiscal host. +Privacy Guides is a community project operated by a number of active contributors. The public list of team members [can be found on our forum](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Privacy Guides is legally administered by [MAGIC Grants](https://magicgrants.org), a 501(c)(3) public charity acting as our fiscal host. As a project, we make available to the public: @@ -230,7 +230,7 @@ Currently: - Privacy Guides [processes personal data on servers outside the European Union](#where-does-privacy-guides-store-data-about-me). - Privacy Guides uses [subprocessors](#subprocessors-used-by-privacy-guides) with personnel and computers outside the European Union. -- Privacy Guides has personnel in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. +- Privacy Guides has [personnel](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all) in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. - Privacy Guides is very likely subject to section 702 of the Foreign Intelligence Surveillance Act in the United States, a law that the European Court of Justice has found inadequately protects the rights and freedoms of data subjects. - Privacy Guides has never received any order or request for personal data under FISA 702 or any similar national security or surveillance law of any other country. Privacy Guides is not subject to any court order or legal obligation that would prevent it from disclosing the existence or non-existence of such an order or request. - Privacy Guides has a policy for how we will respond to those orders and requests, in case we ever receive one. Privacy Guides will suspend processing, notify any affected user, minimize disclosure, and resist disclosure of personal data, all as the law allows. diff --git a/i18n/he/self-hosting/dns-filtering.md b/i18n/he/self-hosting/dns-filtering.md new file mode 100644 index 00000000..343b482a --- /dev/null +++ b/i18n/he/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole מיועד להתארח ב-Raspberry Pi, אך הוא אינו מוגבל לחומרה כזו. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/he/self-hosting/email-servers.md b/i18n/he/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/he/self-hosting/email-servers.md +++ b/i18n/he/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/he/self-hosting/index.md b/i18n/he/self-hosting/index.md index e9e44adc..4724cb24 100644 --- a/i18n/he/self-hosting/index.md +++ b/i18n/he/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" }
diff --git a/i18n/he/social-networks.md b/i18n/he/social-networks.md index b5784ee3..6998d099 100644 --- a/i18n/he/social-networks.md +++ b/i18n/he/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/he/tools.md b/i18n/he/tools.md index 38fce460..88bd2327 100644 --- a/i18n/he/tools.md +++ b/i18n/he/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [למד עוד :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### פתרונות אירוח עצמי - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[למד עוד :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### שירותים פיננסיים #### שירותי מיסוך תשלומים diff --git a/i18n/hi/dns.md b/i18n/hi/dns.md index 9081bfff..02a2d9ea 100644 --- a/i18n/hi/dns.md +++ b/i18n/hi/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS Resolvers" +title: DNS Resolvers icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | No | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/hi/passwords.md b/i18n/hi/passwords.md index ba58acd0..095b4e37 100644 --- a/i18n/hi/passwords.md +++ b/i18n/hi/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Password Managers" +title: Password Managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/hi/self-hosting/dns-filtering.md b/i18n/hi/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/hi/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/hi/self-hosting/email-servers.md b/i18n/hi/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/hi/self-hosting/email-servers.md +++ b/i18n/hi/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/hi/self-hosting/index.md b/i18n/hi/self-hosting/index.md index fda8adcc..6ea1c081 100644 --- a/i18n/hi/self-hosting/index.md +++ b/i18n/hi/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" }
diff --git a/i18n/hi/tools.md b/i18n/hi/tools.md index 12c83c32..a8b9671c 100644 --- a/i18n/hi/tools.md +++ b/i18n/hi/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/hu/about/donation-acceptance-policy.md b/i18n/hu/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/hu/about/donation-acceptance-policy.md +++ b/i18n/hu/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/hu/ai-chat.md b/i18n/hu/ai-chat.md index 4c6b8716..6e76b372 100644 --- a/i18n/hu/ai-chat.md +++ b/i18n/hu/ai-chat.md @@ -163,7 +163,7 @@ To check the authenticity and safety of the model, look for: - Community reviews and usage statistics - A "Safe" badge next to the model file (Hugging Face only) - Matching checksums[^1] - - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. + - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/hu/android/obtaining-apps.md b/i18n/hu/android/obtaining-apps.md index 0a0b83cd..1ea08bbe 100644 --- a/i18n/hu/android/obtaining-apps.md +++ b/i18n/hu/android/obtaining-apps.md @@ -86,26 +86,26 @@ If you download APK files to install manually, you can verify their signature wi 3. Extract the downloaded archive: - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. Run the signature verification command: - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. The resulting hashes can then be compared with another source. Some developers such as Signal [show the fingerprints](https://signal.org/android/apk) on their website. - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/hu/device-integrity.md b/i18n/hu/device-integrity.md index 89d03995..0dbe45f1 100644 --- a/i18n/hu/device-integrity.md +++ b/i18n/hu/device-integrity.md @@ -102,7 +102,7 @@ If you use iOS and are at high-risk, we have three additional suggestions for yo 2. Trigger _sysdiagnose_ logs often and back them up externally. These logs can provide invaluable data to future forensic investigators if need be. - The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. + The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. 3. Enable [Lockdown Mode](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode). diff --git a/i18n/hu/dns.md b/i18n/hu/dns.md index 26d4dee1..a7d705ca 100644 --- a/i18n/hu/dns.md +++ b/i18n/hu/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS Resolverek" +title: DNS Resolverek icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Titkosított DNS-t harmadik féltől származó szerverekkel csak alapvető [DNS-blokkolás](https://en.wikipedia.org/wiki/DNS_blocking) megkerülésére kellene használni, ha biztos vagy benne, hogy annak nem lesz semmilyen következménye. A titkosított DNS nem fog segíteni elrejteni a böngészési tevékenységedet. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. A titkosított DNS nem fog segíteni elrejteni a böngészési tevékenységedet. [További Információk a DNS-ről :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | Nem | Based on server choice. A használt szűrőlista itt található. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Választható | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -Egy saját üzemeltetésű DNS-megoldás hasznos ellenőrzött platformokon, például Smart TV-ken és más IoT-eszközökön történő szűrés biztosításához, mivel nincs szükség kliensoldali szoftverre. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -A Pi-hole-t úgy tervezték, hogy egy Raspberry Pi-n lehessen üzemeltetni, de az nem korlátozott erre a hardverre. Az szoftver egy kifinomult webes felületet kínál az betekintések megtekintéséhez és blokkolt tartalmak kezeléséhez. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Az AdGuard Home egy kifinomult webes felületet kínál az betekintések megtekintéséhez és blokkolt tartalmak kezeléséhez. - -[:octicons-home-16: Honlap](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Adatvédelmi Tájékoztató" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Dokumentáció} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Forráskód" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/hu/os/windows/group-policies.md b/i18n/hu/os/windows/group-policies.md index 332429a1..0daf63fc 100644 --- a/i18n/hu/os/windows/group-policies.md +++ b/i18n/hu/os/windows/group-policies.md @@ -20,8 +20,8 @@ To change any group policy, double click it and select Enabled or Disabled at th #### Device Guard - Turn On Virtualization Based Security: **Enabled** - - Platform Security Level: **Secure Boot and DMA Protection** - - Secure Launch Configuration: **Enabled** + - Platform Security Level: **Secure Boot and DMA Protection** + - Secure Launch Configuration: **Enabled** #### Internet Communication Management @@ -52,14 +52,14 @@ AutoRun and AutoPlay are features which allow Windows to run a script or perform - Turn off AutoPlay: **Enabled** - Disallow Autoplay for nonvolume devices: **Enabled** - Set the default behavior for AutoRun: **Enabled** - - Default AutoRun Behavior: **Do not execute any AutoRun commands** + - Default AutoRun Behavior: **Do not execute any AutoRun commands** #### BitLocker Drive Encryption You may wish to re-encrypt your operating system drive after changing these settings. - Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7): **Enabled** - - Select the encryption method: **AES-256** + - Select the encryption method: **AES-256** Setting the cipher strength for the Windows 7 policy still applies that strength to newer versions of Windows. @@ -85,12 +85,12 @@ Despite the names of these policies, this doesn't _require_ you to do anything b #### Data Collection and Preview Builds - Allow Diagnostic Data: **Enabled** - - Options: **Send required diagnostic data** (Pro Edition); or - - Options: **Diagnostic data off** (Enterprise or Education Edition) + - Options: **Send required diagnostic data** (Pro Edition); or + - Options: **Diagnostic data off** (Enterprise or Education Edition) - Limit Diagnostic Log Collection: **Enabled** - Limit Dump Collection: **Enabled** - Limit optional diagnostic data for Desktop Analytics: **Enabled** - - Options: **Disable Desktop Analytics collection** + - Options: **Disable Desktop Analytics collection** - Do not show feedback notifications: **Enabled** #### File Explorer @@ -118,7 +118,7 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Allow Cortana: **Disabled** - Don't search the web or display web results in Search: **Enabled** - Set what information is shared in Search: **Enabled** - - Type of information: **Anonymous info** + - Type of information: **Anonymous info** #### Sync your settings @@ -132,4 +132,4 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Do not send additional data: **Enabled** - Consent > Configure Default consent: **Enabled** - - Consent level: **Always ask before sending data** + - Consent level: **Always ask before sending data** diff --git a/i18n/hu/passwords.md b/i18n/hu/passwords.md index 9b7e4b2f..44b31a3e 100644 --- a/i18n/hu/passwords.md +++ b/i18n/hu/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Jelszókezelők" +title: Jelszókezelők icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/hu/self-hosting/dns-filtering.md b/i18n/hu/self-hosting/dns-filtering.md new file mode 100644 index 00000000..16ba1d4b --- /dev/null +++ b/i18n/hu/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. A Pi-hole-t úgy tervezték, hogy egy Raspberry Pi-n lehessen üzemeltetni, de az nem korlátozott erre a hardverre. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/hu/self-hosting/email-servers.md b/i18n/hu/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/hu/self-hosting/email-servers.md +++ b/i18n/hu/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/hu/self-hosting/index.md b/i18n/hu/self-hosting/index.md index fda8adcc..6ea1c081 100644 --- a/i18n/hu/self-hosting/index.md +++ b/i18n/hu/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" }
diff --git a/i18n/hu/social-networks.md b/i18n/hu/social-networks.md index 14bcd86f..b2bfc609 100644 --- a/i18n/hu/social-networks.md +++ b/i18n/hu/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/hu/tools.md b/i18n/hu/tools.md index 517b481b..21ff4ac5 100644 --- a/i18n/hu/tools.md +++ b/i18n/hu/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [További információ :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Saját Üzemeltetésű Megoldások - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[További információ :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Pénzügyi Szolgáltatások #### Payment Masking Services diff --git a/i18n/id/about/donation-acceptance-policy.md b/i18n/id/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/id/about/donation-acceptance-policy.md +++ b/i18n/id/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/id/about/jobs.md b/i18n/id/about/jobs.md index 6a5909b3..598c21d2 100644 --- a/i18n/id/about/jobs.md +++ b/i18n/id/about/jobs.md @@ -3,7 +3,7 @@ title: Job Openings description: Privacy Guides has a small, remote team of privacy researchers and advocates. Any open positions we may have in the future will be posted here. --- -Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed here. Please consider donating to support our cause. +Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed [here](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Please consider [donating](https://donate.magicgrants.org/privacyguides) to support our cause. We are occasionally looking for strong journalistic writers, product reviewers, and privacy experts to help us out, and any open positions will be posted below. diff --git a/i18n/id/ai-chat.md b/i18n/id/ai-chat.md index e0c74d89..114c6533 100644 --- a/i18n/id/ai-chat.md +++ b/i18n/id/ai-chat.md @@ -1,6 +1,6 @@ --- meta_title: "Recommended AI Chat: Private ChatGPT Alternatives - Privacy Guides" -title: AI Chat +title: "AI Chat" icon: material/assistant description: Unlike OpenAI's ChatGPT and its Big Tech competitors, these AI tools run locally so your data never leaves your desktop device. cover: ai-chatbots.webp @@ -163,7 +163,7 @@ To check the authenticity and safety of the model, look for: - Community reviews and usage statistics - A "Safe" badge next to the model file (Hugging Face only) - Matching checksums[^1] - - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. + - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/id/alternative-networks.md b/i18n/id/alternative-networks.md index 7aa1c645..1c5edc30 100644 --- a/i18n/id/alternative-networks.md +++ b/i18n/id/alternative-networks.md @@ -1,5 +1,5 @@ --- -title: Alternative Networks +title: "Alternative Networks" icon: material/vector-polygon description: These tools allow you to access networks other than the World Wide Web. cover: alternative-networks.webp diff --git a/i18n/id/android/distributions.md b/i18n/id/android/distributions.md index ed00965f..286739a5 100644 --- a/i18n/id/android/distributions.md +++ b/i18n/id/android/distributions.md @@ -1,12 +1,12 @@ --- -meta_title: The Best Android Operating Systems - Privacy Guides -title: Alternative Distributions +meta_title: "The Best Android Operating Systems - Privacy Guides" +title: "Alternative Distributions" description: You can replace the operating system on your Android phone with these secure and privacy-respecting alternatives. schema: - "@context": http://schema.org "@type": WebPage name: Private Android Operating Systems - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: GrapheneOS @@ -16,7 +16,7 @@ schema: subjectOf: "@context": http://schema.org "@type": WebPage - url: ./ + url: "./" robots: nofollow, max-snippet:-1, max-image-preview:large --- diff --git a/i18n/id/android/general-apps.md b/i18n/id/android/general-apps.md index 21d6097f..22ba2cbc 100644 --- a/i18n/id/android/general-apps.md +++ b/i18n/id/android/general-apps.md @@ -1,11 +1,11 @@ --- -title: General Apps +title: "General Apps" description: The apps listed here are Android-exclusive and specifically enhance or replace key system functionality. schema: - "@context": http://schema.org "@type": WebPage name: General Android Apps - url: ./ + url: "./" - "@context": http://schema.org "@type": MobileApplication name: Shelter diff --git a/i18n/id/android/index.md b/i18n/id/android/index.md index 3811c8a3..6af9f3f0 100644 --- a/i18n/id/android/index.md +++ b/i18n/id/android/index.md @@ -1,13 +1,13 @@ --- -title: Android +title: "Android" description: Our advice for replacing privacy-invasive default Android features with private and secure alternatives. -icon: simple/android +icon: 'simple/android' cover: android.webp schema: - "@context": http://schema.org "@type": WebPage name: Android Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: Android @@ -38,7 +38,7 @@ There are also many private alternatives to the apps that come pre-installed on When you buy an Android phone, the default operating system comes bundled with apps and functionality that are not part of the Android Open Source Project. Many of these apps—even apps like the dialer which provide basic system functionality—require invasive integrations with Google Play Services, which in turn asks for privileges to access your files, contacts storage, call logs, SMS messages, location, camera, microphone, and numerous other things on your device in order for those basic system apps and many other apps to function in the first place. Frameworks like Google Play Services increase the attack surface of your device and are the source of various privacy concerns with Android. -This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. Unfortunately, many custom Android distributions often violate the Android security model by not supporting critical security features such as AVB, rollback protection, firmware updates, and so on. Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require more permissive SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. +This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. Unfortunately, many custom Android distributions often violate the Android security model by not supporting critical security features such as AVB, rollback protection, firmware updates, and so on. Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require [more permissive](https://github.com/LineageOS/android_system_sepolicy/search?q=userdebug&type=code) SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. Idealnya, ketika memilih distribusi Android kustom, Anda harus memastikan bahwa distribusi tersebut menjunjung tinggi model keamanan Android. At the very least, the distribution should have production builds, support for AVB, rollback protection, timely firmware and operating system updates, and SELinux in [enforcing mode](https://source.android.com/security/selinux/concepts#enforcement_levels). All of our recommended Android distributions satisfy these criteria: diff --git a/i18n/id/android/obtaining-apps.md b/i18n/id/android/obtaining-apps.md index acad1d72..1ea08bbe 100644 --- a/i18n/id/android/obtaining-apps.md +++ b/i18n/id/android/obtaining-apps.md @@ -1,5 +1,5 @@ --- -title: Obtaining Applications +title: "Obtaining Applications" description: We recommend these methods for obtaining applications on Android without interacting with Google Play Services. --- @@ -86,26 +86,26 @@ If you download APK files to install manually, you can verify their signature wi 3. Extract the downloaded archive: - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. Run the signature verification command: - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. The resulting hashes can then be compared with another source. Some developers such as Signal [show the fingerprints](https://signal.org/android/apk) on their website. - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/id/basics/hardware.md b/i18n/id/basics/hardware.md index 124ef1db..148e9435 100644 --- a/i18n/id/basics/hardware.md +++ b/i18n/id/basics/hardware.md @@ -1,6 +1,6 @@ --- -title: Choosing Your Hardware -icon: material/chip +title: "Choosing Your Hardware" +icon: 'material/chip' description: Software isn't all that matters; learn about the hardware tools you use every day to protect your privacy. --- diff --git a/i18n/id/device-integrity.md b/i18n/id/device-integrity.md index 99cb3aa2..acac6e57 100644 --- a/i18n/id/device-integrity.md +++ b/i18n/id/device-integrity.md @@ -1,5 +1,5 @@ --- -title: Device Integrity +title: "Device Integrity" icon: material/security description: These tools can be used to check your devices for compromise. cover: device-integrity.webp @@ -102,7 +102,7 @@ If you use iOS and are at high-risk, we have three additional suggestions for yo 2. Trigger _sysdiagnose_ logs often and back them up externally. These logs can provide invaluable data to future forensic investigators if need be. - The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. + The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. 3. Enable [Lockdown Mode](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode). diff --git a/i18n/id/dns.md b/i18n/id/dns.md index 3a6c1180..a475f1e6 100644 --- a/i18n/id/dns.md +++ b/i18n/id/dns.md @@ -1,5 +1,5 @@ --- -title: "Penyelesai DNS" +title: Penyelesai DNS icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Kapitalisme Pengawasan](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -DNS terenkripsi dengan server pihak ketiga sebaiknya hanya digunakan untuk mengatasi pemblokiran [DNS dasar](https://en.wikipedia.org/wiki/DNS_blocking) ketika Anda yakin tidak akan ada konsekuensi apa pun. DNS yang terenkripsi tidak akan membantu menyembunyikan aktivitas penjelajahan Anda. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. DNS yang terenkripsi tidak akan membantu menyembunyikan aktivitas penjelajahan Anda. [Pelajari lebih lanjut tentang DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | Tidak | Based on server choice. Daftar filter yang digunakan dapat ditemukan di sini. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Opsional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -Solusi DNS yang dihosting sendiri berguna untuk menyediakan penyaringan pada platform terkontrol, seperti Smart TV dan perangkat IoT lainnya, karena tidak ada perangkat lunak di sisi klien yang diperlukan. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole dirancang untuk dihosting di Raspberry Pi, tetapi tidak terbatas pada perangkat keras tersebut. Perangkat lunak ini memiliki antarmuka web yang ramah untuk melihat analisis dan mengelola konten yang diblokir. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home memiliki antarmuka web yang dipoles untuk melihat wawasan dan mengelola konten yang diblokir. - -[:octicons-home-16: Beranda](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Kebijakan Privasi" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Dokumentasi} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Kode Sumber" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/id/document-collaboration.md b/i18n/id/document-collaboration.md index 2e6dea70..31fcb1f6 100644 --- a/i18n/id/document-collaboration.md +++ b/i18n/id/document-collaboration.md @@ -1,5 +1,5 @@ --- -title: Document Collaboration +title: "Document Collaboration" icon: material/account-group description: Most online office suites do not support E2EE, meaning the cloud provider has access to everything you do. cover: document-collaboration.webp diff --git a/i18n/id/email-aliasing.md b/i18n/id/email-aliasing.md index 1de2e0de..3a4605d4 100644 --- a/i18n/id/email-aliasing.md +++ b/i18n/id/email-aliasing.md @@ -1,5 +1,5 @@ --- -title: Email Aliasing +title: "Email Aliasing" icon: material/email-lock description: An email aliasing service allows you to easily generate a new email address for every website you register for. cover: email-aliasing.webp diff --git a/i18n/id/language-tools.md b/i18n/id/language-tools.md index 10a688b1..a2d4d026 100644 --- a/i18n/id/language-tools.md +++ b/i18n/id/language-tools.md @@ -1,5 +1,5 @@ --- -title: Language Tools +title: "Language Tools" icon: material/alphabetical-variant description: These language tools do not send your input text to a server and can be used offline and self-hosted. cover: language-tools.webp diff --git a/i18n/id/mobile-phones.md b/i18n/id/mobile-phones.md index ffac1334..ead35a9e 100644 --- a/i18n/id/mobile-phones.md +++ b/i18n/id/mobile-phones.md @@ -1,5 +1,5 @@ --- -title: Mobile Phones +title: "Mobile Phones" icon: material/cellphone-check description: These mobile devices provide the best hardware security support for custom Android operating systems. cover: android.webp @@ -7,7 +7,7 @@ schema: - "@context": http://schema.org "@type": WebPage name: Mobile Phone Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": Product name: Pixel diff --git a/i18n/id/office-suites.md b/i18n/id/office-suites.md index fe1547c1..47b57d5a 100644 --- a/i18n/id/office-suites.md +++ b/i18n/id/office-suites.md @@ -1,5 +1,5 @@ --- -title: Office Suites +title: "Office Suites" icon: material/file-edit-outline description: These office suites offer their full functionality without an account and can be used offline. cover: office-suites.webp @@ -48,9 +48,9 @@ Choose an **office suite** that does not require logging in to an account to acc **OnlyOffice** is a cloud-based free and open-source office suite with extensive functionality, including integration with Nextcloud. [:octicons-home-16: Homepage](https://onlyoffice.com){ .md-button .md-button--primary } -:octicons-eye-16:{ .card-link title="Privacy Policy" } -:octicons-info-16:{ .card-link title=Documentation} -:octicons-code-16:{ .card-link title="Source Code" } +[:octicons-eye-16:](https://help.onlyoffice.com/products/files/doceditor.aspx?fileid=5048502&doc=SXhWMEVzSEYxNlVVaXJJeUVtS0kyYk14YWdXTEFUQmRWL250NllHNUFGbz0_IjUwNDg1MDIi0){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://helpcenter.onlyoffice.com/userguides.aspx){ .card-link title=Documentation} +[:octicons-code-16:](https://github.com/ONLYOFFICE){ .card-link title="Source Code" }
Downloads diff --git a/i18n/id/os/windows/group-policies.md b/i18n/id/os/windows/group-policies.md index e0dda15c..423b19d7 100644 --- a/i18n/id/os/windows/group-policies.md +++ b/i18n/id/os/windows/group-policies.md @@ -20,8 +20,8 @@ To change any group policy, double click it and select Enabled or Disabled at th #### Device Guard - Turn On Virtualization Based Security: **Enabled** - - Platform Security Level: **Secure Boot and DMA Protection** - - Secure Launch Configuration: **Enabled** + - Platform Security Level: **Secure Boot and DMA Protection** + - Secure Launch Configuration: **Enabled** #### Internet Communication Management @@ -52,14 +52,14 @@ AutoRun and AutoPlay are features which allow Windows to run a script or perform - Turn off AutoPlay: **Enabled** - Disallow Autoplay for nonvolume devices: **Enabled** - Set the default behavior for AutoRun: **Enabled** - - Default AutoRun Behavior: **Do not execute any AutoRun commands** + - Default AutoRun Behavior: **Do not execute any AutoRun commands** #### BitLocker Drive Encryption You may wish to re-encrypt your operating system drive after changing these settings. - Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7): **Enabled** - - Select the encryption method: **AES-256** + - Select the encryption method: **AES-256** Setting the cipher strength for the Windows 7 policy still applies that strength to newer versions of Windows. @@ -85,12 +85,12 @@ Despite the names of these policies, this doesn't _require_ you to do anything b #### Data Collection and Preview Builds - Allow Diagnostic Data: **Enabled** - - Options: **Send required diagnostic data** (Pro Edition); or - - Options: **Diagnostic data off** (Enterprise or Education Edition) + - Options: **Send required diagnostic data** (Pro Edition); or + - Options: **Diagnostic data off** (Enterprise or Education Edition) - Limit Diagnostic Log Collection: **Enabled** - Limit Dump Collection: **Enabled** - Limit optional diagnostic data for Desktop Analytics: **Enabled** - - Options: **Disable Desktop Analytics collection** + - Options: **Disable Desktop Analytics collection** - Do not show feedback notifications: **Enabled** #### File Explorer @@ -118,7 +118,7 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Allow Cortana: **Disabled** - Don't search the web or display web results in Search: **Enabled** - Set what information is shared in Search: **Enabled** - - Type of information: **Anonymous info** + - Type of information: **Anonymous info** #### Sync your settings @@ -132,4 +132,4 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Do not send additional data: **Enabled** - Consent > Configure Default consent: **Enabled** - - Consent level: **Always ask before sending data** + - Consent level: **Always ask before sending data** diff --git a/i18n/id/passwords.md b/i18n/id/passwords.md index 15111d8e..f6685410 100644 --- a/i18n/id/passwords.md +++ b/i18n/id/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Pengelola Kata Sandi" +title: Pengelola Kata Sandi icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ Pengelola kata sandi ini menyinkronkan kata sandi Anda ke server cloud untuk kem Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Kode sisi server Bitwarden [bersumber terbuka](https://github.com/bitwarden/server), jadi jika Anda tidak ingin menggunakan "awan" Bitwarden, Anda dapat dengan mudah meng-hos server sinkronisasi Bitwarden Anda sendiri. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. Jika Anda ingin meng-host Bitwarden di server Anda sendiri, Gunakanlah Vaultwarden dan bukan kode server resmi Bitwarden. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/id/pastebins.md b/i18n/id/pastebins.md index 318f2b30..d0e8b70c 100644 --- a/i18n/id/pastebins.md +++ b/i18n/id/pastebins.md @@ -1,5 +1,5 @@ --- -title: Pastebins +title: "Pastebins" icon: material/content-paste description: These tools allow you to have full control of any pasted data you share to other parties. cover: pastebins.webp diff --git a/i18n/id/privacy.md b/i18n/id/privacy.md index c629b8b2..38422c32 100644 --- a/i18n/id/privacy.md +++ b/i18n/id/privacy.md @@ -1,11 +1,11 @@ --- -title: Privacy Policy +title: "Privacy Policy" description: We do not sell or share your data with any third-parties. --- ## What is Privacy Guides? -Privacy Guides is a community project operated by a number of active contributors. The public list of team members can be found on our forum. Privacy Guides is legally administered by MAGIC Grants, a 501(c)(3) public charity acting as our fiscal host. +Privacy Guides is a community project operated by a number of active contributors. The public list of team members [can be found on our forum](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Privacy Guides is legally administered by [MAGIC Grants](https://magicgrants.org), a 501(c)(3) public charity acting as our fiscal host. As a project, we make available to the public: @@ -230,7 +230,7 @@ Currently: - Privacy Guides [processes personal data on servers outside the European Union](#where-does-privacy-guides-store-data-about-me). - Privacy Guides uses [subprocessors](#subprocessors-used-by-privacy-guides) with personnel and computers outside the European Union. -- Privacy Guides has personnel in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. +- Privacy Guides has [personnel](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all) in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. - Privacy Guides is very likely subject to section 702 of the Foreign Intelligence Surveillance Act in the United States, a law that the European Court of Justice has found inadequately protects the rights and freedoms of data subjects. - Privacy Guides has never received any order or request for personal data under FISA 702 or any similar national security or surveillance law of any other country. Privacy Guides is not subject to any court order or legal obligation that would prevent it from disclosing the existence or non-existence of such an order or request. - Privacy Guides has a policy for how we will respond to those orders and requests, in case we ever receive one. Privacy Guides will suspend processing, notify any affected user, minimize disclosure, and resist disclosure of personal data, all as the law allows. diff --git a/i18n/id/self-hosting/dns-filtering.md b/i18n/id/self-hosting/dns-filtering.md new file mode 100644 index 00000000..65150148 --- /dev/null +++ b/i18n/id/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole dirancang untuk dihosting di Raspberry Pi, tetapi tidak terbatas pada perangkat keras tersebut. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/id/self-hosting/email-servers.md b/i18n/id/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/id/self-hosting/email-servers.md +++ b/i18n/id/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/id/self-hosting/index.md b/i18n/id/self-hosting/index.md index 25260650..6ea1c081 100644 --- a/i18n/id/self-hosting/index.md +++ b/i18n/id/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/id/social-networks.md b/i18n/id/social-networks.md index 99a05ba0..fc0e90ec 100644 --- a/i18n/id/social-networks.md +++ b/i18n/id/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/id/tools.md b/i18n/id/tools.md index 44aeab20..f0803ed7 100644 --- a/i18n/id/tools.md +++ b/i18n/id/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Pelajari lebih lanjut :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Solusi Self-hosting - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Pelajari lebih lanjut :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Jasa Keuangan #### Layanan Penyamaran Pembayaran diff --git a/i18n/it/dns.md b/i18n/it/dns.md index 238bdc30..44a9211b 100644 --- a/i18n/it/dns.md +++ b/i18n/it/dns.md @@ -1,5 +1,5 @@ --- -title: "Risolutori DNS" +title: Risolutori DNS icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Capitalismo di sorveglianza](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -I DNS crittografati con server di terze parti dovrebbero essere utilizzati soltanto per aggirare il [blocco DNS](https://en.wikipedia.org/wiki/DNS_blocking) di base, quando si può esser certi che non vi sarà alcuna conseguenza. Il DNS crittografato non ti aiuterà a nascondere alcuna tua attività di navigazione. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Il DNS crittografato non ti aiuterà a nascondere alcuna tua attività di navigazione. [Scopri di più sul DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | No | Based on server choice. L'elenco dei filtri utilizzati è disponibile qui. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Facoltativa | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -Una soluzione DNS self-hosted è utile per fornire il filtraggio su piattaforme controllate, come Smart TV e altri dispositivi IoT, poiché non è necessario alcun software lato client. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole è stato progettato per essere ospitato su un Raspberry Pi, ma non si limita a tale hardware. Il software dispone di un'interfaccia web intuitiva per visualizzare i dettagli e gestire i contenuti bloccati. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - -
- - - -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home dispone di un'interfaccia web raffinata per visualizzare i dettagli e gestire i contenuti bloccati. - -[:octicons-home-16: Home](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Politica sulla Privacy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentazione} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Codice Sorgente" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/it/passwords.md b/i18n/it/passwords.md index c0c7373d..7ab16011 100644 --- a/i18n/it/passwords.md +++ b/i18n/it/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "I migliori Gestori di Password per proteggere la tua privacy e sicurezza - Privacy Guides" -title: "Gestori di password" +title: Gestori di password icon: material/form-textbox-password description: I gestori di password ti consentono di proteggere e gestire in sicurezza password e altre credenziali. cover: passwords.webp @@ -177,16 +177,10 @@ Questi gestori di password, le sincronizzano su un server su cloud per una facil Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Il codice utilizzato dai server di Bitwarden è [open-source](https://github.com/bitwarden/server), quindi se non vuoi utilizzare il loro servizio di cloud, puoi tranquillamente utilizzare un tuo server per la sincronizzazione. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. Se desideri ospitare autonomamente il tuo server di Bitwarden, desidererai quasi sicuramente utilizzare Vaultwarden, rispetto al codice del server ufficiale di Bitwarden. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/it/self-hosting/dns-filtering.md b/i18n/it/self-hosting/dns-filtering.md new file mode 100644 index 00000000..8ced04ad --- /dev/null +++ b/i18n/it/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole è stato progettato per essere ospitato su un Raspberry Pi, ma non si limita a tale hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/it/self-hosting/email-servers.md b/i18n/it/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/it/self-hosting/email-servers.md +++ b/i18n/it/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/it/self-hosting/index.md b/i18n/it/self-hosting/index.md index 74174bd8..1c77f0f7 100644 --- a/i18n/it/self-hosting/index.md +++ b/i18n/it/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. diff --git a/i18n/it/tools.md b/i18n/it/tools.md index bef5537b..84d82780 100644 --- a/i18n/it/tools.md +++ b/i18n/it/tools.md @@ -299,17 +299,6 @@ Se stai cercando maggiore **sicurezza**, dovresti sempre assicurarti di connette [Scopri di più :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Soluzioni ospitate autonomamente - -
- -- ![Logo di AdGuard Home](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Logo di Pi-hole](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Scopri di più :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Servizi finanziari #### Servizi di mascheramento dei pagamenti diff --git a/i18n/ja/about/donation-acceptance-policy.md b/i18n/ja/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/ja/about/donation-acceptance-policy.md +++ b/i18n/ja/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/ja/ai-chat.md b/i18n/ja/ai-chat.md index 3d7f5137..607068cc 100644 --- a/i18n/ja/ai-chat.md +++ b/i18n/ja/ai-chat.md @@ -163,7 +163,7 @@ To check the authenticity and safety of the model, look for: - Community reviews and usage statistics - A "Safe" badge next to the model file (Hugging Face only) - Matching checksums[^1] - - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. + - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/ja/android/obtaining-apps.md b/i18n/ja/android/obtaining-apps.md index 0a0b83cd..1ea08bbe 100644 --- a/i18n/ja/android/obtaining-apps.md +++ b/i18n/ja/android/obtaining-apps.md @@ -86,26 +86,26 @@ If you download APK files to install manually, you can verify their signature wi 3. Extract the downloaded archive: - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. Run the signature verification command: - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. The resulting hashes can then be compared with another source. Some developers such as Signal [show the fingerprints](https://signal.org/android/apk) on their website. - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/ja/device-integrity.md b/i18n/ja/device-integrity.md index 8a78add7..2c49babe 100644 --- a/i18n/ja/device-integrity.md +++ b/i18n/ja/device-integrity.md @@ -102,7 +102,7 @@ If you use iOS and are at high-risk, we have three additional suggestions for yo 2. Trigger _sysdiagnose_ logs often and back them up externally. These logs can provide invaluable data to future forensic investigators if need be. - The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. + The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. 3. Enable [Lockdown Mode](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode). diff --git a/i18n/ja/dns.md b/i18n/ja/dns.md index 4c539c9f..f355a596 100644 --- a/i18n/ja/dns.md +++ b/i18n/ja/dns.md @@ -1,5 +1,5 @@ --- -title: "DNSリゾルバ" +title: DNSリゾルバ icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: 監視資本主義](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. [DNSの詳細 :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | いいえ | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | 任意 | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/ja/os/windows/group-policies.md b/i18n/ja/os/windows/group-policies.md index 2ac0849d..4a4a1b7f 100644 --- a/i18n/ja/os/windows/group-policies.md +++ b/i18n/ja/os/windows/group-policies.md @@ -20,8 +20,8 @@ To change any group policy, double click it and select Enabled or Disabled at th #### Device Guard - Turn On Virtualization Based Security: **Enabled** - - Platform Security Level: **Secure Boot and DMA Protection** - - Secure Launch Configuration: **Enabled** + - Platform Security Level: **Secure Boot and DMA Protection** + - Secure Launch Configuration: **Enabled** #### Internet Communication Management @@ -52,14 +52,14 @@ AutoRun and AutoPlay are features which allow Windows to run a script or perform - Turn off AutoPlay: **Enabled** - Disallow Autoplay for nonvolume devices: **Enabled** - Set the default behavior for AutoRun: **Enabled** - - Default AutoRun Behavior: **Do not execute any AutoRun commands** + - Default AutoRun Behavior: **Do not execute any AutoRun commands** #### BitLocker Drive Encryption You may wish to re-encrypt your operating system drive after changing these settings. - Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7): **Enabled** - - Select the encryption method: **AES-256** + - Select the encryption method: **AES-256** Setting the cipher strength for the Windows 7 policy still applies that strength to newer versions of Windows. @@ -85,12 +85,12 @@ Despite the names of these policies, this doesn't _require_ you to do anything b #### Data Collection and Preview Builds - Allow Diagnostic Data: **Enabled** - - Options: **Send required diagnostic data** (Pro Edition); or - - Options: **Diagnostic data off** (Enterprise or Education Edition) + - Options: **Send required diagnostic data** (Pro Edition); or + - Options: **Diagnostic data off** (Enterprise or Education Edition) - Limit Diagnostic Log Collection: **Enabled** - Limit Dump Collection: **Enabled** - Limit optional diagnostic data for Desktop Analytics: **Enabled** - - Options: **Disable Desktop Analytics collection** + - Options: **Disable Desktop Analytics collection** - Do not show feedback notifications: **Enabled** #### File Explorer @@ -118,7 +118,7 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Allow Cortana: **Disabled** - Don't search the web or display web results in Search: **Enabled** - Set what information is shared in Search: **Enabled** - - Type of information: **Anonymous info** + - Type of information: **Anonymous info** #### Sync your settings @@ -132,4 +132,4 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Do not send additional data: **Enabled** - Consent > Configure Default consent: **Enabled** - - Consent level: **Always ask before sending data** + - Consent level: **Always ask before sending data** diff --git a/i18n/ja/passwords.md b/i18n/ja/passwords.md index 29852644..937d4fea 100644 --- a/i18n/ja/passwords.md +++ b/i18n/ja/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "パスワードマネージャー" +title: パスワードマネージャー icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/ja/self-hosting/dns-filtering.md b/i18n/ja/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/ja/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/ja/self-hosting/email-servers.md b/i18n/ja/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/ja/self-hosting/email-servers.md +++ b/i18n/ja/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/ja/self-hosting/index.md b/i18n/ja/self-hosting/index.md index fda8adcc..6ea1c081 100644 --- a/i18n/ja/self-hosting/index.md +++ b/i18n/ja/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" }
diff --git a/i18n/ja/social-networks.md b/i18n/ja/social-networks.md index 06613e6a..bc3629ef 100644 --- a/i18n/ja/social-networks.md +++ b/i18n/ja/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/ja/tools.md b/i18n/ja/tools.md index f5557adf..e85f9a74 100644 --- a/i18n/ja/tools.md +++ b/i18n/ja/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [詳細 :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### セルフホストソリューション - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[詳細 :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### 金融サービス #### 支払いマスキングサービス diff --git a/i18n/ko/about/donation-acceptance-policy.md b/i18n/ko/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/ko/about/donation-acceptance-policy.md +++ b/i18n/ko/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/ko/about/jobs.md b/i18n/ko/about/jobs.md index 6a5909b3..598c21d2 100644 --- a/i18n/ko/about/jobs.md +++ b/i18n/ko/about/jobs.md @@ -3,7 +3,7 @@ title: Job Openings description: Privacy Guides has a small, remote team of privacy researchers and advocates. Any open positions we may have in the future will be posted here. --- -Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed here. Please consider donating to support our cause. +Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed [here](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Please consider [donating](https://donate.magicgrants.org/privacyguides) to support our cause. We are occasionally looking for strong journalistic writers, product reviewers, and privacy experts to help us out, and any open positions will be posted below. diff --git a/i18n/ko/ai-chat.md b/i18n/ko/ai-chat.md index 92dbafa7..aec6607c 100644 --- a/i18n/ko/ai-chat.md +++ b/i18n/ko/ai-chat.md @@ -1,6 +1,6 @@ --- meta_title: "Recommended AI Chat: Private ChatGPT Alternatives - Privacy Guides" -title: AI Chat +title: "AI Chat" icon: material/assistant description: Unlike OpenAI's ChatGPT and its Big Tech competitors, these AI tools run locally so your data never leaves your desktop device. cover: ai-chatbots.webp @@ -163,7 +163,7 @@ To check the authenticity and safety of the model, look for: - Community reviews and usage statistics - A "Safe" badge next to the model file (Hugging Face only) - Matching checksums[^1] - - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. + - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/ko/alternative-networks.md b/i18n/ko/alternative-networks.md index a5cdd50d..e82501f8 100644 --- a/i18n/ko/alternative-networks.md +++ b/i18n/ko/alternative-networks.md @@ -1,5 +1,5 @@ --- -title: Alternative Networks +title: "Alternative Networks" icon: material/vector-polygon description: These tools allow you to access networks other than the World Wide Web. cover: alternative-networks.webp diff --git a/i18n/ko/android/distributions.md b/i18n/ko/android/distributions.md index 6ae3d25c..51253dd7 100644 --- a/i18n/ko/android/distributions.md +++ b/i18n/ko/android/distributions.md @@ -1,12 +1,12 @@ --- -meta_title: The Best Android Operating Systems - Privacy Guides -title: Alternative Distributions +meta_title: "The Best Android Operating Systems - Privacy Guides" +title: "Alternative Distributions" description: You can replace the operating system on your Android phone with these secure and privacy-respecting alternatives. schema: - "@context": http://schema.org "@type": WebPage name: Private Android Operating Systems - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: GrapheneOS @@ -16,7 +16,7 @@ schema: subjectOf: "@context": http://schema.org "@type": WebPage - url: ./ + url: "./" robots: nofollow, max-snippet:-1, max-image-preview:large --- diff --git a/i18n/ko/android/general-apps.md b/i18n/ko/android/general-apps.md index 606dc32f..4cb1a3bd 100644 --- a/i18n/ko/android/general-apps.md +++ b/i18n/ko/android/general-apps.md @@ -1,11 +1,11 @@ --- -title: General Apps +title: "General Apps" description: The apps listed here are Android-exclusive and specifically enhance or replace key system functionality. schema: - "@context": http://schema.org "@type": WebPage name: General Android Apps - url: ./ + url: "./" - "@context": http://schema.org "@type": MobileApplication name: Shelter diff --git a/i18n/ko/android/index.md b/i18n/ko/android/index.md index 7e5f88be..b55454ca 100644 --- a/i18n/ko/android/index.md +++ b/i18n/ko/android/index.md @@ -1,13 +1,13 @@ --- -title: Android +title: "Android" description: Our advice for replacing privacy-invasive default Android features with private and secure alternatives. -icon: simple/android +icon: 'simple/android' cover: android.webp schema: - "@context": http://schema.org "@type": WebPage name: Android Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: Android @@ -38,7 +38,7 @@ There are also many private alternatives to the apps that come pre-installed on When you buy an Android phone, the default operating system comes bundled with apps and functionality that are not part of the Android Open Source Project. Many of these apps—even apps like the dialer which provide basic system functionality—require invasive integrations with Google Play Services, which in turn asks for privileges to access your files, contacts storage, call logs, SMS messages, location, camera, microphone, and numerous other things on your device in order for those basic system apps and many other apps to function in the first place. Frameworks like Google Play Services increase the attack surface of your device and are the source of various privacy concerns with Android. -This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. 다만 안타깝게도, 대부분의 커스텀 Android 배포판은 AVB, 롤백 보호, 펌웨어 업데이트 등의 중요한 보안 기능을 지원하지 않음으로써 Android 보안 모델을 위반하는 경우가 많습니다. Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require more permissive SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. +This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. 다만 안타깝게도, 대부분의 커스텀 Android 배포판은 AVB, 롤백 보호, 펌웨어 업데이트 등의 중요한 보안 기능을 지원하지 않음으로써 Android 보안 모델을 위반하는 경우가 많습니다. Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require [more permissive](https://github.com/LineageOS/android_system_sepolicy/search?q=userdebug&type=code) SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. 커스텀 Android 배포판을 선택할 때는 해당 배포판이 Android 보안 모델을 준수하는지 확인하는 것이 이상적입니다. At the very least, the distribution should have production builds, support for AVB, rollback protection, timely firmware and operating system updates, and SELinux in [enforcing mode](https://source.android.com/security/selinux/concepts#enforcement_levels). All of our recommended Android distributions satisfy these criteria: diff --git a/i18n/ko/android/obtaining-apps.md b/i18n/ko/android/obtaining-apps.md index acad1d72..1ea08bbe 100644 --- a/i18n/ko/android/obtaining-apps.md +++ b/i18n/ko/android/obtaining-apps.md @@ -1,5 +1,5 @@ --- -title: Obtaining Applications +title: "Obtaining Applications" description: We recommend these methods for obtaining applications on Android without interacting with Google Play Services. --- @@ -86,26 +86,26 @@ If you download APK files to install manually, you can verify their signature wi 3. Extract the downloaded archive: - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. Run the signature verification command: - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. The resulting hashes can then be compared with another source. Some developers such as Signal [show the fingerprints](https://signal.org/android/apk) on their website. - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/ko/basics/hardware.md b/i18n/ko/basics/hardware.md index cb3560fa..207cd086 100644 --- a/i18n/ko/basics/hardware.md +++ b/i18n/ko/basics/hardware.md @@ -1,6 +1,6 @@ --- -title: Choosing Your Hardware -icon: material/chip +title: "Choosing Your Hardware" +icon: 'material/chip' description: Software isn't all that matters; learn about the hardware tools you use every day to protect your privacy. --- diff --git a/i18n/ko/device-integrity.md b/i18n/ko/device-integrity.md index 99cb3aa2..acac6e57 100644 --- a/i18n/ko/device-integrity.md +++ b/i18n/ko/device-integrity.md @@ -1,5 +1,5 @@ --- -title: Device Integrity +title: "Device Integrity" icon: material/security description: These tools can be used to check your devices for compromise. cover: device-integrity.webp @@ -102,7 +102,7 @@ If you use iOS and are at high-risk, we have three additional suggestions for yo 2. Trigger _sysdiagnose_ logs often and back them up externally. These logs can provide invaluable data to future forensic investigators if need be. - The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. + The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. 3. Enable [Lockdown Mode](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode). diff --git a/i18n/ko/dns.md b/i18n/ko/dns.md index 8e8c7cf3..77c5f01d 100644 --- a/i18n/ko/dns.md +++ b/i18n/ko/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS 리졸버" +title: DNS 리졸버 icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: 감시 자본주의(Surveillance Capitalism)](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -제3자 서버를 사용하는 암호화 DNS는 기본적인 [DNS 차단](https://en.wikipedia.org/wiki/DNS_blocking)을 우회하는 용도로만, 그리고 아무런 문제가 발생하지 않을 것이라고 확신할 수 있는 경우에만 사용해야 합니다. 암호화 DNS는 여러분의 브라우저 탐색 활동을 숨기는 데에 전혀 도움이 되지 않습니다. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. 암호화 DNS는 여러분의 브라우저 탐색 활동을 숨기는 데에 전혀 도움이 되지 않습니다. [DNS 자세히 알아보기 :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | 비활성화 | Based on server choice. 필터 목록은 여기에서 확인할 수 있습니다. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | 선택 사항 | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -자체 호스팅 DNS 솔루션은 클라이언트 측 소프트웨어가 필요하지 않기 때문에, 스마트 TV 및 기타 IoT 기기처럼 통제된 플랫폼에서 필터링을 적용하기에 유용합니다. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole은 라즈베리 파이에서 호스팅되도록 설계되었지만, 그 외 하드웨어에서도 사용할 수 있습니다. 친절한 웹 인터페이스를 통해 쉽고 빠른 분석 및 차단 콘텐츠 관리가 가능합니다. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -세련된 웹 인터페이스를 통해 쉽고 빠른 분석 및 차단 콘텐츠 관리가 가능합니다. - -[:octicons-home-16: 홈페이지](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="프라이버시 정책" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=문서} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="소스 코드" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/ko/document-collaboration.md b/i18n/ko/document-collaboration.md index 04cf7760..478f53aa 100644 --- a/i18n/ko/document-collaboration.md +++ b/i18n/ko/document-collaboration.md @@ -1,5 +1,5 @@ --- -title: Document Collaboration +title: "Document Collaboration" icon: material/account-group description: Most online office suites do not support E2EE, meaning the cloud provider has access to everything you do. cover: document-collaboration.webp diff --git a/i18n/ko/email-aliasing.md b/i18n/ko/email-aliasing.md index 0883b08b..04e241ad 100644 --- a/i18n/ko/email-aliasing.md +++ b/i18n/ko/email-aliasing.md @@ -1,5 +1,5 @@ --- -title: Email Aliasing +title: "Email Aliasing" icon: material/email-lock description: An email aliasing service allows you to easily generate a new email address for every website you register for. cover: email-aliasing.webp diff --git a/i18n/ko/language-tools.md b/i18n/ko/language-tools.md index 9c3d5f9c..e7a48546 100644 --- a/i18n/ko/language-tools.md +++ b/i18n/ko/language-tools.md @@ -1,5 +1,5 @@ --- -title: Language Tools +title: "Language Tools" icon: material/alphabetical-variant description: These language tools do not send your input text to a server and can be used offline and self-hosted. cover: language-tools.webp diff --git a/i18n/ko/mobile-phones.md b/i18n/ko/mobile-phones.md index 63f2075c..510cb337 100644 --- a/i18n/ko/mobile-phones.md +++ b/i18n/ko/mobile-phones.md @@ -1,5 +1,5 @@ --- -title: Mobile Phones +title: "Mobile Phones" icon: material/cellphone-check description: These mobile devices provide the best hardware security support for custom Android operating systems. cover: android.webp @@ -7,7 +7,7 @@ schema: - "@context": http://schema.org "@type": WebPage name: Mobile Phone Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": Product name: Pixel diff --git a/i18n/ko/office-suites.md b/i18n/ko/office-suites.md index a87793ed..9a9232b2 100644 --- a/i18n/ko/office-suites.md +++ b/i18n/ko/office-suites.md @@ -1,5 +1,5 @@ --- -title: Office Suites +title: "Office Suites" icon: material/file-edit-outline description: These office suites offer their full functionality without an account and can be used offline. cover: office-suites.webp @@ -48,9 +48,9 @@ Choose an **office suite** that does not require logging in to an account to acc **OnlyOffice** is a cloud-based free and open-source office suite with extensive functionality, including integration with Nextcloud. [:octicons-home-16: Homepage](https://onlyoffice.com){ .md-button .md-button--primary } -:octicons-eye-16:{ .card-link title="Privacy Policy" } -:octicons-info-16:{ .card-link title=Documentation} -:octicons-code-16:{ .card-link title="Source Code" } +[:octicons-eye-16:](https://help.onlyoffice.com/products/files/doceditor.aspx?fileid=5048502&doc=SXhWMEVzSEYxNlVVaXJJeUVtS0kyYk14YWdXTEFUQmRWL250NllHNUFGbz0_IjUwNDg1MDIi0){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://helpcenter.onlyoffice.com/userguides.aspx){ .card-link title=Documentation} +[:octicons-code-16:](https://github.com/ONLYOFFICE){ .card-link title="Source Code" }
Downloads diff --git a/i18n/ko/os/windows/group-policies.md b/i18n/ko/os/windows/group-policies.md index 38507e33..4e63fab6 100644 --- a/i18n/ko/os/windows/group-policies.md +++ b/i18n/ko/os/windows/group-policies.md @@ -20,8 +20,8 @@ To change any group policy, double click it and select Enabled or Disabled at th #### Device Guard - Turn On Virtualization Based Security: **Enabled** - - Platform Security Level: **Secure Boot and DMA Protection** - - Secure Launch Configuration: **Enabled** + - Platform Security Level: **Secure Boot and DMA Protection** + - Secure Launch Configuration: **Enabled** #### Internet Communication Management @@ -52,14 +52,14 @@ AutoRun and AutoPlay are features which allow Windows to run a script or perform - Turn off AutoPlay: **Enabled** - Disallow Autoplay for nonvolume devices: **Enabled** - Set the default behavior for AutoRun: **Enabled** - - Default AutoRun Behavior: **Do not execute any AutoRun commands** + - Default AutoRun Behavior: **Do not execute any AutoRun commands** #### BitLocker Drive Encryption You may wish to re-encrypt your operating system drive after changing these settings. - Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7): **Enabled** - - Select the encryption method: **AES-256** + - Select the encryption method: **AES-256** Setting the cipher strength for the Windows 7 policy still applies that strength to newer versions of Windows. @@ -85,12 +85,12 @@ Despite the names of these policies, this doesn't _require_ you to do anything b #### Data Collection and Preview Builds - Allow Diagnostic Data: **Enabled** - - Options: **Send required diagnostic data** (Pro Edition); or - - Options: **Diagnostic data off** (Enterprise or Education Edition) + - Options: **Send required diagnostic data** (Pro Edition); or + - Options: **Diagnostic data off** (Enterprise or Education Edition) - Limit Diagnostic Log Collection: **Enabled** - Limit Dump Collection: **Enabled** - Limit optional diagnostic data for Desktop Analytics: **Enabled** - - Options: **Disable Desktop Analytics collection** + - Options: **Disable Desktop Analytics collection** - Do not show feedback notifications: **Enabled** #### File Explorer @@ -118,7 +118,7 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Allow Cortana: **Disabled** - Don't search the web or display web results in Search: **Enabled** - Set what information is shared in Search: **Enabled** - - Type of information: **Anonymous info** + - Type of information: **Anonymous info** #### Sync your settings @@ -132,4 +132,4 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Do not send additional data: **Enabled** - Consent > Configure Default consent: **Enabled** - - Consent level: **Always ask before sending data** + - Consent level: **Always ask before sending data** diff --git a/i18n/ko/passwords.md b/i18n/ko/passwords.md index a4eb028d..1a6668d7 100644 --- a/i18n/ko/passwords.md +++ b/i18n/ko/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "비밀번호 관리자" +title: 비밀번호 관리자 icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ For example, the password manager in Microsoft Edge doesn't offer end-to-end enc Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. Vaultwarden은 개인 서버에서 Bitwarden을 자체 호스팅하는 경우 공식 Bitwarden 서버 코드보다 선호됩니다. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/ko/pastebins.md b/i18n/ko/pastebins.md index cf55ed41..a8cd7477 100644 --- a/i18n/ko/pastebins.md +++ b/i18n/ko/pastebins.md @@ -1,5 +1,5 @@ --- -title: Pastebins +title: "Pastebins" icon: material/content-paste description: These tools allow you to have full control of any pasted data you share to other parties. cover: pastebins.webp diff --git a/i18n/ko/privacy.md b/i18n/ko/privacy.md index 79002465..0efc0b1e 100644 --- a/i18n/ko/privacy.md +++ b/i18n/ko/privacy.md @@ -1,11 +1,11 @@ --- -title: Privacy Policy +title: "Privacy Policy" description: We do not sell or share your data with any third-parties. --- ## What is Privacy Guides? -Privacy Guides is a community project operated by a number of active contributors. The public list of team members can be found on our forum. Privacy Guides is legally administered by MAGIC Grants, a 501(c)(3) public charity acting as our fiscal host. +Privacy Guides is a community project operated by a number of active contributors. The public list of team members [can be found on our forum](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Privacy Guides is legally administered by [MAGIC Grants](https://magicgrants.org), a 501(c)(3) public charity acting as our fiscal host. As a project, we make available to the public: @@ -230,7 +230,7 @@ Currently: - Privacy Guides [processes personal data on servers outside the European Union](#where-does-privacy-guides-store-data-about-me). - Privacy Guides uses [subprocessors](#subprocessors-used-by-privacy-guides) with personnel and computers outside the European Union. -- Privacy Guides has personnel in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. +- Privacy Guides has [personnel](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all) in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. - Privacy Guides is very likely subject to section 702 of the Foreign Intelligence Surveillance Act in the United States, a law that the European Court of Justice has found inadequately protects the rights and freedoms of data subjects. - Privacy Guides has never received any order or request for personal data under FISA 702 or any similar national security or surveillance law of any other country. Privacy Guides is not subject to any court order or legal obligation that would prevent it from disclosing the existence or non-existence of such an order or request. - Privacy Guides has a policy for how we will respond to those orders and requests, in case we ever receive one. Privacy Guides will suspend processing, notify any affected user, minimize disclosure, and resist disclosure of personal data, all as the law allows. diff --git a/i18n/ko/self-hosting/dns-filtering.md b/i18n/ko/self-hosting/dns-filtering.md new file mode 100644 index 00000000..6e1c9bfb --- /dev/null +++ b/i18n/ko/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole은 라즈베리 파이에서 호스팅되도록 설계되었지만, 그 외 하드웨어에서도 사용할 수 있습니다. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/ko/self-hosting/email-servers.md b/i18n/ko/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/ko/self-hosting/email-servers.md +++ b/i18n/ko/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/ko/self-hosting/index.md b/i18n/ko/self-hosting/index.md index 25260650..6ea1c081 100644 --- a/i18n/ko/self-hosting/index.md +++ b/i18n/ko/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/ko/social-networks.md b/i18n/ko/social-networks.md index 112543d4..3db70551 100644 --- a/i18n/ko/social-networks.md +++ b/i18n/ko/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/ko/tools.md b/i18n/ko/tools.md index 3fda00a3..20d5fe0a 100644 --- a/i18n/ko/tools.md +++ b/i18n/ko/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [자세히 알아보기 :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### 자체 호스팅 솔루션 - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[자세히 알아보기 :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### 금융 서비스 #### Payment Masking Services diff --git a/i18n/ku-IQ/about/donation-acceptance-policy.md b/i18n/ku-IQ/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/ku-IQ/about/donation-acceptance-policy.md +++ b/i18n/ku-IQ/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/ku-IQ/about/jobs.md b/i18n/ku-IQ/about/jobs.md index 59b87273..598c21d2 100644 --- a/i18n/ku-IQ/about/jobs.md +++ b/i18n/ku-IQ/about/jobs.md @@ -3,7 +3,7 @@ title: Job Openings description: Privacy Guides has a small, remote team of privacy researchers and advocates. Any open positions we may have in the future will be posted here. --- -Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed [here](https://discuss.privacyguides.net/u?group=team\&order=solutions\&period=all). Please consider [donating](https://donate.magicgrants.org/privacyguides) to support our cause. +Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed [here](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Please consider [donating](https://donate.magicgrants.org/privacyguides) to support our cause. We are occasionally looking for strong journalistic writers, product reviewers, and privacy experts to help us out, and any open positions will be posted below. diff --git a/i18n/ku-IQ/ai-chat.md b/i18n/ku-IQ/ai-chat.md index 2254bc8f..056b7cda 100644 --- a/i18n/ku-IQ/ai-chat.md +++ b/i18n/ku-IQ/ai-chat.md @@ -1,6 +1,6 @@ --- meta_title: "Recommended AI Chat: Private ChatGPT Alternatives - Privacy Guides" -title: AI Chat +title: "AI Chat" icon: material/assistant description: Unlike OpenAI's ChatGPT and its Big Tech competitors, these AI tools run locally so your data never leaves your desktop device. cover: ai-chatbots.webp @@ -163,7 +163,7 @@ To check the authenticity and safety of the model, look for: - Community reviews and usage statistics - A "Safe" badge next to the model file (Hugging Face only) - Matching checksums[^1] - - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. + - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/ku-IQ/alternative-networks.md b/i18n/ku-IQ/alternative-networks.md index 894aa869..7c646ae0 100644 --- a/i18n/ku-IQ/alternative-networks.md +++ b/i18n/ku-IQ/alternative-networks.md @@ -1,5 +1,5 @@ --- -title: Alternative Networks +title: "Alternative Networks" icon: material/vector-polygon description: These tools allow you to access networks other than the World Wide Web. cover: alternative-networks.webp diff --git a/i18n/ku-IQ/android/distributions.md b/i18n/ku-IQ/android/distributions.md index 1600780c..3b96a33f 100644 --- a/i18n/ku-IQ/android/distributions.md +++ b/i18n/ku-IQ/android/distributions.md @@ -1,12 +1,12 @@ --- -meta_title: The Best Android Operating Systems - Privacy Guides -title: Alternative Distributions +meta_title: "The Best Android Operating Systems - Privacy Guides" +title: "Alternative Distributions" description: You can replace the operating system on your Android phone with these secure and privacy-respecting alternatives. schema: - "@context": http://schema.org "@type": WebPage name: Private Android Operating Systems - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: GrapheneOS @@ -16,7 +16,7 @@ schema: subjectOf: "@context": http://schema.org "@type": WebPage - url: ./ + url: "./" robots: nofollow, max-snippet:-1, max-image-preview:large --- diff --git a/i18n/ku-IQ/android/general-apps.md b/i18n/ku-IQ/android/general-apps.md index 92d3a9a7..800718b3 100644 --- a/i18n/ku-IQ/android/general-apps.md +++ b/i18n/ku-IQ/android/general-apps.md @@ -1,11 +1,11 @@ --- -title: General Apps +title: "General Apps" description: The apps listed here are Android-exclusive and specifically enhance or replace key system functionality. schema: - "@context": http://schema.org "@type": WebPage name: General Android Apps - url: ./ + url: "./" - "@context": http://schema.org "@type": MobileApplication name: Shelter diff --git a/i18n/ku-IQ/android/index.md b/i18n/ku-IQ/android/index.md index 75323d86..1432dbd0 100644 --- a/i18n/ku-IQ/android/index.md +++ b/i18n/ku-IQ/android/index.md @@ -1,13 +1,13 @@ --- -title: Android +title: "Android" description: Our advice for replacing privacy-invasive default Android features with private and secure alternatives. -icon: simple/android +icon: 'simple/android' cover: android.webp schema: - "@context": http://schema.org "@type": WebPage name: Android Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: Android @@ -38,7 +38,7 @@ There are also many private alternatives to the apps that come pre-installed on When you buy an Android phone, the default operating system comes bundled with apps and functionality that are not part of the Android Open Source Project. Many of these apps—even apps like the dialer which provide basic system functionality—require invasive integrations with Google Play Services, which in turn asks for privileges to access your files, contacts storage, call logs, SMS messages, location, camera, microphone, and numerous other things on your device in order for those basic system apps and many other apps to function in the first place. Frameworks like Google Play Services increase the attack surface of your device and are the source of various privacy concerns with Android. -This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. Unfortunately, many custom Android distributions often violate the Android security model by not supporting critical security features such as AVB, rollback protection, firmware updates, and so on. Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require more permissive SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. +This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. Unfortunately, many custom Android distributions often violate the Android security model by not supporting critical security features such as AVB, rollback protection, firmware updates, and so on. Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require [more permissive](https://github.com/LineageOS/android_system_sepolicy/search?q=userdebug&type=code) SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. Ideally, when choosing a custom Android distribution, you should make sure that it upholds the Android security model. At the very least, the distribution should have production builds, support for AVB, rollback protection, timely firmware and operating system updates, and SELinux in [enforcing mode](https://source.android.com/security/selinux/concepts#enforcement_levels). All of our recommended Android distributions satisfy these criteria: diff --git a/i18n/ku-IQ/android/obtaining-apps.md b/i18n/ku-IQ/android/obtaining-apps.md index acad1d72..1ea08bbe 100644 --- a/i18n/ku-IQ/android/obtaining-apps.md +++ b/i18n/ku-IQ/android/obtaining-apps.md @@ -1,5 +1,5 @@ --- -title: Obtaining Applications +title: "Obtaining Applications" description: We recommend these methods for obtaining applications on Android without interacting with Google Play Services. --- @@ -86,26 +86,26 @@ If you download APK files to install manually, you can verify their signature wi 3. Extract the downloaded archive: - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. Run the signature verification command: - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. The resulting hashes can then be compared with another source. Some developers such as Signal [show the fingerprints](https://signal.org/android/apk) on their website. - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/ku-IQ/basics/hardware.md b/i18n/ku-IQ/basics/hardware.md index 257624c3..293f58ba 100644 --- a/i18n/ku-IQ/basics/hardware.md +++ b/i18n/ku-IQ/basics/hardware.md @@ -1,6 +1,6 @@ --- -title: Choosing Your Hardware -icon: material/chip +title: "Choosing Your Hardware" +icon: 'material/chip' description: Software isn't all that matters; learn about the hardware tools you use every day to protect your privacy. --- diff --git a/i18n/ku-IQ/device-integrity.md b/i18n/ku-IQ/device-integrity.md index 99cb3aa2..acac6e57 100644 --- a/i18n/ku-IQ/device-integrity.md +++ b/i18n/ku-IQ/device-integrity.md @@ -1,5 +1,5 @@ --- -title: Device Integrity +title: "Device Integrity" icon: material/security description: These tools can be used to check your devices for compromise. cover: device-integrity.webp @@ -102,7 +102,7 @@ If you use iOS and are at high-risk, we have three additional suggestions for yo 2. Trigger _sysdiagnose_ logs often and back them up externally. These logs can provide invaluable data to future forensic investigators if need be. - The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. + The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. 3. Enable [Lockdown Mode](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode). diff --git a/i18n/ku-IQ/dns.md b/i18n/ku-IQ/dns.md index 8a80fe5d..13b58967 100644 --- a/i18n/ku-IQ/dns.md +++ b/i18n/ku-IQ/dns.md @@ -1,5 +1,5 @@ --- -title: "چارەسەرکەرانی DNS" +title: چارەسەرکەرانی DNS icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -DNSـی شفرکراو تەنها دەبێت بەکار بهێنرێت لەگەڵ ڕاژەکاری لایەنی سێیەم بۆ تێپەڕاندنی [قەدەغەکردنێکی DNSـی](https://en.wikipedia.org/wiki/DNS_blocking) سادە. کاتێک دڵنیا دەبیت کە هیچ دەرئەنجامێک نابێت. DNSـی شفرکراو یارمەتیت نادات لە شاردنەوەی هیچ یەکێک لە چالاکیەکانی گەڕانت. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. DNSـی شفرکراو یارمەتیت نادات لە شاردنەوەی هیچ یەکێک لە چالاکیەکانی گەڕانت. [دەربارەی DNS زیاتر فێربە:material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | نەخێر | Based on server choice. لیستی پاڵاوتنی بەکارهێنراو لێرە دەدۆزرێتەوە. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | ئارەزوومەندانە | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -سەرپەرشتیکردنی-خودی DNS چارەسەرێکی بەسوودە بۆ دابینکردنی پاڵاوتن بۆ ئامێرە سەرپەرشتی کراوەکانی وەک تەلەڤزیۆنی زیرەک و ئامێرە زیرەکەکانی تر، چونکە پێویستی بە هیچ نەرمەواڵەیەکی ڕاژەخواز نیە. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole وا دروست کراوە کە لەسەر Rasberry Pi سەرپەرشتی بکرێت ، بەڵام سنووردار نییە بۆ ئەم ڕەقەواڵەیە بە تەنها. نەرمەواڵەکە ڕووکارێکی ڕێک و پێک و ئاسان لە بەکارهێان دەبەخشێت بۆ بینینی تێگەیشتنەکان و بەڕێوەبردنی ناوەڕۆکە قەدەغەکراوەکان. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - -
- - - -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home ڕووکارێکی ڕێک و پێک دەبەخشێتە ماڵپەرەکەی بۆ بینینی تێگەیشتنەکان و بەڕێوەنردنی ناوەڕۆکە قەدەغەکراوەکان. - -[:octicons-home-16: پەڕەی سەرەکی](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="سیاسەتی تایبەتێتی" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=دۆکیمێنتەکان} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="سەرچاوەی کۆد" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/ku-IQ/document-collaboration.md b/i18n/ku-IQ/document-collaboration.md index 94ad1099..7f12072d 100644 --- a/i18n/ku-IQ/document-collaboration.md +++ b/i18n/ku-IQ/document-collaboration.md @@ -1,5 +1,5 @@ --- -title: Document Collaboration +title: "Document Collaboration" icon: material/account-group description: Most online office suites do not support E2EE, meaning the cloud provider has access to everything you do. cover: document-collaboration.webp diff --git a/i18n/ku-IQ/email-aliasing.md b/i18n/ku-IQ/email-aliasing.md index fbeaee7d..c544c2de 100644 --- a/i18n/ku-IQ/email-aliasing.md +++ b/i18n/ku-IQ/email-aliasing.md @@ -1,5 +1,5 @@ --- -title: Email Aliasing +title: "Email Aliasing" icon: material/email-lock description: An email aliasing service allows you to easily generate a new email address for every website you register for. cover: email-aliasing.webp diff --git a/i18n/ku-IQ/language-tools.md b/i18n/ku-IQ/language-tools.md index bd13e674..2fba8151 100644 --- a/i18n/ku-IQ/language-tools.md +++ b/i18n/ku-IQ/language-tools.md @@ -1,5 +1,5 @@ --- -title: Language Tools +title: "Language Tools" icon: material/alphabetical-variant description: These language tools do not send your input text to a server and can be used offline and self-hosted. cover: language-tools.webp diff --git a/i18n/ku-IQ/mobile-phones.md b/i18n/ku-IQ/mobile-phones.md index d7a849db..8713a4da 100644 --- a/i18n/ku-IQ/mobile-phones.md +++ b/i18n/ku-IQ/mobile-phones.md @@ -1,5 +1,5 @@ --- -title: Mobile Phones +title: "Mobile Phones" icon: material/cellphone-check description: These mobile devices provide the best hardware security support for custom Android operating systems. cover: android.webp @@ -7,7 +7,7 @@ schema: - "@context": http://schema.org "@type": WebPage name: Mobile Phone Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": Product name: Pixel diff --git a/i18n/ku-IQ/office-suites.md b/i18n/ku-IQ/office-suites.md index 43ba82c5..66244891 100644 --- a/i18n/ku-IQ/office-suites.md +++ b/i18n/ku-IQ/office-suites.md @@ -1,5 +1,5 @@ --- -title: Office Suites +title: "Office Suites" icon: material/file-edit-outline description: These office suites offer their full functionality without an account and can be used offline. cover: office-suites.webp @@ -48,7 +48,7 @@ Choose an **office suite** that does not require logging in to an account to acc **OnlyOffice** is a cloud-based free and open-source office suite with extensive functionality, including integration with Nextcloud. [:octicons-home-16: Homepage](https://onlyoffice.com){ .md-button .md-button--primary } -[:octicons-eye-16:](https://help.onlyoffice.com/products/files/doceditor.aspx?fileid=5048502\&doc=SXhWMEVzSEYxNlVVaXJJeUVtS0kyYk14YWdXTEFUQmRWL250NllHNUFGbz0_IjUwNDg1MDIi0){ .card-link title="Privacy Policy" } +[:octicons-eye-16:](https://help.onlyoffice.com/products/files/doceditor.aspx?fileid=5048502&doc=SXhWMEVzSEYxNlVVaXJJeUVtS0kyYk14YWdXTEFUQmRWL250NllHNUFGbz0_IjUwNDg1MDIi0){ .card-link title="Privacy Policy" } [:octicons-info-16:](https://helpcenter.onlyoffice.com/userguides.aspx){ .card-link title=Documentation} [:octicons-code-16:](https://github.com/ONLYOFFICE){ .card-link title="Source Code" } diff --git a/i18n/ku-IQ/passwords.md b/i18n/ku-IQ/passwords.md index ba58acd0..095b4e37 100644 --- a/i18n/ku-IQ/passwords.md +++ b/i18n/ku-IQ/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Password Managers" +title: Password Managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/ku-IQ/pastebins.md b/i18n/ku-IQ/pastebins.md index fd9f64b9..a53230ec 100644 --- a/i18n/ku-IQ/pastebins.md +++ b/i18n/ku-IQ/pastebins.md @@ -1,5 +1,5 @@ --- -title: Pastebins +title: "Pastebins" icon: material/content-paste description: These tools allow you to have full control of any pasted data you share to other parties. cover: pastebins.webp diff --git a/i18n/ku-IQ/privacy.md b/i18n/ku-IQ/privacy.md index cd7a082f..3ed55953 100644 --- a/i18n/ku-IQ/privacy.md +++ b/i18n/ku-IQ/privacy.md @@ -1,11 +1,11 @@ --- -title: Privacy Policy +title: "Privacy Policy" description: We do not sell or share your data with any third-parties. --- ## What is Privacy Guides? -Privacy Guides is a community project operated by a number of active contributors. The public list of team members can be found on our forum. Privacy Guides is legally administered by MAGIC Grants, a 501(c)(3) public charity acting as our fiscal host. +Privacy Guides is a community project operated by a number of active contributors. The public list of team members [can be found on our forum](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Privacy Guides is legally administered by [MAGIC Grants](https://magicgrants.org), a 501(c)(3) public charity acting as our fiscal host. As a project, we make available to the public: @@ -230,7 +230,7 @@ Currently: - Privacy Guides [processes personal data on servers outside the European Union](#where-does-privacy-guides-store-data-about-me). - Privacy Guides uses [subprocessors](#subprocessors-used-by-privacy-guides) with personnel and computers outside the European Union. -- Privacy Guides has personnel in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. +- Privacy Guides has [personnel](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all) in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. - Privacy Guides is very likely subject to section 702 of the Foreign Intelligence Surveillance Act in the United States, a law that the European Court of Justice has found inadequately protects the rights and freedoms of data subjects. - Privacy Guides has never received any order or request for personal data under FISA 702 or any similar national security or surveillance law of any other country. Privacy Guides is not subject to any court order or legal obligation that would prevent it from disclosing the existence or non-existence of such an order or request. - Privacy Guides has a policy for how we will respond to those orders and requests, in case we ever receive one. Privacy Guides will suspend processing, notify any affected user, minimize disclosure, and resist disclosure of personal data, all as the law allows. diff --git a/i18n/ku-IQ/self-hosting/dns-filtering.md b/i18n/ku-IQ/self-hosting/dns-filtering.md new file mode 100644 index 00000000..c74abe4b --- /dev/null +++ b/i18n/ku-IQ/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole وا دروست کراوە کە لەسەر Rasberry Pi سەرپەرشتی بکرێت ، بەڵام سنووردار نییە بۆ ئەم ڕەقەواڵەیە بە تەنها. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/ku-IQ/self-hosting/email-servers.md b/i18n/ku-IQ/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/ku-IQ/self-hosting/email-servers.md +++ b/i18n/ku-IQ/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/ku-IQ/self-hosting/index.md b/i18n/ku-IQ/self-hosting/index.md index 25260650..6ea1c081 100644 --- a/i18n/ku-IQ/self-hosting/index.md +++ b/i18n/ku-IQ/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/ku-IQ/social-networks.md b/i18n/ku-IQ/social-networks.md index def5299a..e9be7104 100644 --- a/i18n/ku-IQ/social-networks.md +++ b/i18n/ku-IQ/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/ku-IQ/tools.md b/i18n/ku-IQ/tools.md index da9b2e6e..2f7b35a7 100644 --- a/i18n/ku-IQ/tools.md +++ b/i18n/ku-IQ/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/nl/about/donation-acceptance-policy.md b/i18n/nl/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/nl/about/donation-acceptance-policy.md +++ b/i18n/nl/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/nl/about/jobs.md b/i18n/nl/about/jobs.md index 6a5909b3..598c21d2 100644 --- a/i18n/nl/about/jobs.md +++ b/i18n/nl/about/jobs.md @@ -3,7 +3,7 @@ title: Job Openings description: Privacy Guides has a small, remote team of privacy researchers and advocates. Any open positions we may have in the future will be posted here. --- -Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed here. Please consider donating to support our cause. +Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed [here](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Please consider [donating](https://donate.magicgrants.org/privacyguides) to support our cause. We are occasionally looking for strong journalistic writers, product reviewers, and privacy experts to help us out, and any open positions will be posted below. diff --git a/i18n/nl/ai-chat.md b/i18n/nl/ai-chat.md index 23a0a8a6..bebf4b6a 100644 --- a/i18n/nl/ai-chat.md +++ b/i18n/nl/ai-chat.md @@ -1,6 +1,6 @@ --- meta_title: "Recommended AI Chat: Private ChatGPT Alternatives - Privacy Guides" -title: AI Chat +title: "AI Chat" icon: material/assistant description: Unlike OpenAI's ChatGPT and its Big Tech competitors, these AI tools run locally so your data never leaves your desktop device. cover: ai-chatbots.webp @@ -163,7 +163,7 @@ To check the authenticity and safety of the model, look for: - Community reviews and usage statistics - A "Safe" badge next to the model file (Hugging Face only) - Matching checksums[^1] - - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. + - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/nl/alternative-networks.md b/i18n/nl/alternative-networks.md index 10a608ba..512597a6 100644 --- a/i18n/nl/alternative-networks.md +++ b/i18n/nl/alternative-networks.md @@ -1,5 +1,5 @@ --- -title: Alternative Networks +title: "Alternative Networks" icon: material/vector-polygon description: These tools allow you to access networks other than the World Wide Web. cover: alternative-networks.webp diff --git a/i18n/nl/android/distributions.md b/i18n/nl/android/distributions.md index 193ff60c..f3766b0a 100644 --- a/i18n/nl/android/distributions.md +++ b/i18n/nl/android/distributions.md @@ -1,12 +1,12 @@ --- -meta_title: The Best Android Operating Systems - Privacy Guides -title: Alternatieve Distributions +meta_title: "The Best Android Operating Systems - Privacy Guides" +title: "Alternatieve Distributions" description: Je kunt het besturingssysteem op jouw Android-telefoon vervangen door deze veilige en privacy respecterende alternatieven. schema: - "@context": http://schema.org "@type": WebPage name: Privacyvriendelijke Android-besturingssystemen - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: GrapheneOS @@ -16,7 +16,7 @@ schema: subjectOf: "@context": http://schema.org "@type": WebPage - url: ./ + url: "./" robots: nofollow, max-snippet:-1, max-image-preview:large --- diff --git a/i18n/nl/android/general-apps.md b/i18n/nl/android/general-apps.md index 7ba4e4e7..0b02df58 100644 --- a/i18n/nl/android/general-apps.md +++ b/i18n/nl/android/general-apps.md @@ -1,11 +1,11 @@ --- -title: General Apps +title: "General Apps" description: The apps listed here are Android-exclusive and specifically enhance or replace key system functionality. schema: - "@context": http://schema.org "@type": WebPage name: General Android Apps - url: ./ + url: "./" - "@context": http://schema.org "@type": MobileApplication name: Shelter diff --git a/i18n/nl/android/index.md b/i18n/nl/android/index.md index 53488d96..bd35fae9 100644 --- a/i18n/nl/android/index.md +++ b/i18n/nl/android/index.md @@ -1,13 +1,13 @@ --- -title: Android +title: "Android" description: Our advice for replacing privacy-invasive default Android features with private and secure alternatives. -icon: simple/android +icon: 'simple/android' cover: android.webp schema: - "@context": http://schema.org "@type": WebPage name: Android Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: Android @@ -38,7 +38,7 @@ There are also many private alternatives to the apps that come pre-installed on When you buy an Android phone, the default operating system comes bundled with apps and functionality that are not part of the Android Open Source Project. Many of these apps—even apps like the dialer which provide basic system functionality—require invasive integrations with Google Play Services, which in turn asks for privileges to access your files, contacts storage, call logs, SMS messages, location, camera, microphone, and numerous other things on your device in order for those basic system apps and many other apps to function in the first place. Frameworks like Google Play Services increase the attack surface of your device and are the source of various privacy concerns with Android. -This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. Helaas schenden veel aangepaste Android-distributies vaak het Android-beveiligingsmodel door cruciale beveiligingsfuncties zoals AVB, terugdraaibeveiliging, firmware-updates, enzovoort, niet te ondersteunen. Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require more permissive SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. +This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. Helaas schenden veel aangepaste Android-distributies vaak het Android-beveiligingsmodel door cruciale beveiligingsfuncties zoals AVB, terugdraaibeveiliging, firmware-updates, enzovoort, niet te ondersteunen. Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require [more permissive](https://github.com/LineageOS/android_system_sepolicy/search?q=userdebug&type=code) SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. Idealiter, wanneer je een aangepaste Android distributie kiest, moet je ervoor zorgen dat het het Android beveiligingsmodel handhaaft. At the very least, the distribution should have production builds, support for AVB, rollback protection, timely firmware and operating system updates, and SELinux in [enforcing mode](https://source.android.com/security/selinux/concepts#enforcement_levels). All of our recommended Android distributions satisfy these criteria: diff --git a/i18n/nl/android/obtaining-apps.md b/i18n/nl/android/obtaining-apps.md index acad1d72..1ea08bbe 100644 --- a/i18n/nl/android/obtaining-apps.md +++ b/i18n/nl/android/obtaining-apps.md @@ -1,5 +1,5 @@ --- -title: Obtaining Applications +title: "Obtaining Applications" description: We recommend these methods for obtaining applications on Android without interacting with Google Play Services. --- @@ -86,26 +86,26 @@ If you download APK files to install manually, you can verify their signature wi 3. Extract the downloaded archive: - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. Run the signature verification command: - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. The resulting hashes can then be compared with another source. Some developers such as Signal [show the fingerprints](https://signal.org/android/apk) on their website. - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/nl/basics/hardware.md b/i18n/nl/basics/hardware.md index a4db9d83..7d6753c2 100644 --- a/i18n/nl/basics/hardware.md +++ b/i18n/nl/basics/hardware.md @@ -1,6 +1,6 @@ --- -title: Choosing Your Hardware -icon: material/chip +title: "Choosing Your Hardware" +icon: 'material/chip' description: Software isn't all that matters; learn about the hardware tools you use every day to protect your privacy. --- diff --git a/i18n/nl/device-integrity.md b/i18n/nl/device-integrity.md index 99cb3aa2..acac6e57 100644 --- a/i18n/nl/device-integrity.md +++ b/i18n/nl/device-integrity.md @@ -1,5 +1,5 @@ --- -title: Device Integrity +title: "Device Integrity" icon: material/security description: These tools can be used to check your devices for compromise. cover: device-integrity.webp @@ -102,7 +102,7 @@ If you use iOS and are at high-risk, we have three additional suggestions for yo 2. Trigger _sysdiagnose_ logs often and back them up externally. These logs can provide invaluable data to future forensic investigators if need be. - The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. + The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. 3. Enable [Lockdown Mode](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode). diff --git a/i18n/nl/dns.md b/i18n/nl/dns.md index 49b6eaac..3d1ddd94 100644 --- a/i18n/nl/dns.md +++ b/i18n/nl/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS-resolvers" +title: DNS-resolvers icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance kapitalisme](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Versleutelde DNS met servers van derden zou alleen moeten worden gebruikt om simpele [DNS-blokkering](https://en.wikipedia.org/wiki/DNS_blocking) te omzeilen en als je er zeker van bent dat er geen gevolgen zullen zijn. Versleutelde DNS zal je niet helpen jouw surfactiviteiten te verbergen. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Versleutelde DNS zal je niet helpen jouw surfactiviteiten te verbergen. [Meer informatie over DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | Nee | Based on server choice. De filterlijst die wordt gebruikt, is hier te vinden. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optioneel | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -Een zelf gehoste DNS-oplossing is handig voor het bieden van filtering op gecontroleerde platforms, zoals Smart TV's en andere IoT-apparaten, omdat er geen client-side software nodig is. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is ontworpen om te worden gehost op een Raspberry Pi, maar het is niet beperkt tot dergelijke hardware. De software beschikt over een vriendelijke webinterface om inzicht te krijgen en geblokkeerde inhoud te beheren. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home beschikt over een vriendelijke webinterface om inzicht te krijgen en geblokkeerde inhoud te beheren. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacybeleid" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentatie} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Broncode" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/nl/document-collaboration.md b/i18n/nl/document-collaboration.md index 2d7ecd25..ac55736d 100644 --- a/i18n/nl/document-collaboration.md +++ b/i18n/nl/document-collaboration.md @@ -1,5 +1,5 @@ --- -title: Document Collaboration +title: "Document Collaboration" icon: material/account-group description: Most online office suites do not support E2EE, meaning the cloud provider has access to everything you do. cover: document-collaboration.webp diff --git a/i18n/nl/email-aliasing.md b/i18n/nl/email-aliasing.md index 23dd12fb..5bab90d4 100644 --- a/i18n/nl/email-aliasing.md +++ b/i18n/nl/email-aliasing.md @@ -1,5 +1,5 @@ --- -title: Email Aliasing +title: "Email Aliasing" icon: material/email-lock description: An email aliasing service allows you to easily generate a new email address for every website you register for. cover: email-aliasing.webp diff --git a/i18n/nl/language-tools.md b/i18n/nl/language-tools.md index 0ee83706..1b23f53d 100644 --- a/i18n/nl/language-tools.md +++ b/i18n/nl/language-tools.md @@ -1,5 +1,5 @@ --- -title: Language Tools +title: "Language Tools" icon: material/alphabetical-variant description: These language tools do not send your input text to a server and can be used offline and self-hosted. cover: language-tools.webp diff --git a/i18n/nl/mobile-phones.md b/i18n/nl/mobile-phones.md index 26bf7d95..defd1fed 100644 --- a/i18n/nl/mobile-phones.md +++ b/i18n/nl/mobile-phones.md @@ -1,5 +1,5 @@ --- -title: Mobile Phones +title: "Mobile Phones" icon: material/cellphone-check description: These mobile devices provide the best hardware security support for custom Android operating systems. cover: android.webp @@ -7,7 +7,7 @@ schema: - "@context": http://schema.org "@type": WebPage name: Mobile Phone Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": Product name: Pixel diff --git a/i18n/nl/office-suites.md b/i18n/nl/office-suites.md index a7bf9efc..ca467517 100644 --- a/i18n/nl/office-suites.md +++ b/i18n/nl/office-suites.md @@ -1,5 +1,5 @@ --- -title: Office Suites +title: "Office Suites" icon: material/file-edit-outline description: These office suites offer their full functionality without an account and can be used offline. cover: office-suites.webp @@ -48,9 +48,9 @@ Choose an **office suite** that does not require logging in to an account to acc **OnlyOffice** is a cloud-based free and open-source office suite with extensive functionality, including integration with Nextcloud. [:octicons-home-16: Homepage](https://onlyoffice.com){ .md-button .md-button--primary } -:octicons-eye-16:{ .card-link title="Privacy Policy" } -:octicons-info-16:{ .card-link title=Documentation} -:octicons-code-16:{ .card-link title="Source Code" } +[:octicons-eye-16:](https://help.onlyoffice.com/products/files/doceditor.aspx?fileid=5048502&doc=SXhWMEVzSEYxNlVVaXJJeUVtS0kyYk14YWdXTEFUQmRWL250NllHNUFGbz0_IjUwNDg1MDIi0){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://helpcenter.onlyoffice.com/userguides.aspx){ .card-link title=Documentation} +[:octicons-code-16:](https://github.com/ONLYOFFICE){ .card-link title="Source Code" }
Downloads diff --git a/i18n/nl/os/windows/group-policies.md b/i18n/nl/os/windows/group-policies.md index 7113e42b..c139567f 100644 --- a/i18n/nl/os/windows/group-policies.md +++ b/i18n/nl/os/windows/group-policies.md @@ -20,8 +20,8 @@ To change any group policy, double click it and select Enabled or Disabled at th #### Device Guard - Turn On Virtualization Based Security: **Enabled** - - Platform Security Level: **Secure Boot and DMA Protection** - - Secure Launch Configuration: **Enabled** + - Platform Security Level: **Secure Boot and DMA Protection** + - Secure Launch Configuration: **Enabled** #### Internet Communication Management @@ -52,14 +52,14 @@ AutoRun and AutoPlay are features which allow Windows to run a script or perform - Turn off AutoPlay: **Enabled** - Disallow Autoplay for nonvolume devices: **Enabled** - Set the default behavior for AutoRun: **Enabled** - - Default AutoRun Behavior: **Do not execute any AutoRun commands** + - Default AutoRun Behavior: **Do not execute any AutoRun commands** #### BitLocker Drive Encryption You may wish to re-encrypt your operating system drive after changing these settings. - Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7): **Enabled** - - Select the encryption method: **AES-256** + - Select the encryption method: **AES-256** Setting the cipher strength for the Windows 7 policy still applies that strength to newer versions of Windows. @@ -85,12 +85,12 @@ Despite the names of these policies, this doesn't _require_ you to do anything b #### Data Collection and Preview Builds - Allow Diagnostic Data: **Enabled** - - Options: **Send required diagnostic data** (Pro Edition); or - - Options: **Diagnostic data off** (Enterprise or Education Edition) + - Options: **Send required diagnostic data** (Pro Edition); or + - Options: **Diagnostic data off** (Enterprise or Education Edition) - Limit Diagnostic Log Collection: **Enabled** - Limit Dump Collection: **Enabled** - Limit optional diagnostic data for Desktop Analytics: **Enabled** - - Options: **Disable Desktop Analytics collection** + - Options: **Disable Desktop Analytics collection** - Do not show feedback notifications: **Enabled** #### File Explorer @@ -118,7 +118,7 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Allow Cortana: **Disabled** - Don't search the web or display web results in Search: **Enabled** - Set what information is shared in Search: **Enabled** - - Type of information: **Anonymous info** + - Type of information: **Anonymous info** #### Sync your settings @@ -132,4 +132,4 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Do not send additional data: **Enabled** - Consent > Configure Default consent: **Enabled** - - Consent level: **Always ask before sending data** + - Consent level: **Always ask before sending data** diff --git a/i18n/nl/passwords.md b/i18n/nl/passwords.md index 9670ead8..51509feb 100644 --- a/i18n/nl/passwords.md +++ b/i18n/nl/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Wachtwoord managers" +title: Wachtwoord managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ Deze wachtwoordbeheerders synchroniseren jouw wachtwoorden met een cloudserver v Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. Als je Bitwarden zelf wilt hosten op jouw eigen server, wil je vrijwel zeker Vaultwarden gebruiken in plaats van de officiële servercode van Bitwarden. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/nl/pastebins.md b/i18n/nl/pastebins.md index 398e2fed..bb77c791 100644 --- a/i18n/nl/pastebins.md +++ b/i18n/nl/pastebins.md @@ -1,5 +1,5 @@ --- -title: Pastebins +title: "Pastebins" icon: material/content-paste description: These tools allow you to have full control of any pasted data you share to other parties. cover: pastebins.webp diff --git a/i18n/nl/privacy.md b/i18n/nl/privacy.md index 7fe00971..42972e83 100644 --- a/i18n/nl/privacy.md +++ b/i18n/nl/privacy.md @@ -1,11 +1,11 @@ --- -title: Privacy Policy +title: "Privacy Policy" description: We do not sell or share your data with any third-parties. --- ## What is Privacy Guides? -Privacy Guides is a community project operated by a number of active contributors. The public list of team members can be found on our forum. Privacy Guides is legally administered by MAGIC Grants, a 501(c)(3) public charity acting as our fiscal host. +Privacy Guides is a community project operated by a number of active contributors. The public list of team members [can be found on our forum](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Privacy Guides is legally administered by [MAGIC Grants](https://magicgrants.org), a 501(c)(3) public charity acting as our fiscal host. As a project, we make available to the public: @@ -230,7 +230,7 @@ Currently: - Privacy Guides [processes personal data on servers outside the European Union](#where-does-privacy-guides-store-data-about-me). - Privacy Guides uses [subprocessors](#subprocessors-used-by-privacy-guides) with personnel and computers outside the European Union. -- Privacy Guides has personnel in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. +- Privacy Guides has [personnel](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all) in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. - Privacy Guides is very likely subject to section 702 of the Foreign Intelligence Surveillance Act in the United States, a law that the European Court of Justice has found inadequately protects the rights and freedoms of data subjects. - Privacy Guides has never received any order or request for personal data under FISA 702 or any similar national security or surveillance law of any other country. Privacy Guides is not subject to any court order or legal obligation that would prevent it from disclosing the existence or non-existence of such an order or request. - Privacy Guides has a policy for how we will respond to those orders and requests, in case we ever receive one. Privacy Guides will suspend processing, notify any affected user, minimize disclosure, and resist disclosure of personal data, all as the law allows. diff --git a/i18n/nl/self-hosting/dns-filtering.md b/i18n/nl/self-hosting/dns-filtering.md new file mode 100644 index 00000000..65f08d05 --- /dev/null +++ b/i18n/nl/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is ontworpen om te worden gehost op een Raspberry Pi, maar het is niet beperkt tot dergelijke hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/nl/self-hosting/email-servers.md b/i18n/nl/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/nl/self-hosting/email-servers.md +++ b/i18n/nl/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/nl/self-hosting/index.md b/i18n/nl/self-hosting/index.md index 8f357923..035ed545 100644 --- a/i18n/nl/self-hosting/index.md +++ b/i18n/nl/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/nl/social-networks.md b/i18n/nl/social-networks.md index 5fe718df..d9c5bb71 100644 --- a/i18n/nl/social-networks.md +++ b/i18n/nl/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/nl/tools.md b/i18n/nl/tools.md index 37777da6..98894ff7 100644 --- a/i18n/nl/tools.md +++ b/i18n/nl/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Meer informatie :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Zelf gehoste oplossingen - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Meer informatie :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financiële diensten #### Maskerende betalingsdiensten diff --git a/i18n/pl/dns.md b/i18n/pl/dns.md index 2bd17d8f..cf06aead 100644 --- a/i18n/pl/dns.md +++ b/i18n/pl/dns.md @@ -1,5 +1,5 @@ --- -title: "Rekursywne serwery nazw" +title: Rekursywne serwery nazw icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Szyfrowany DNS nie pomoże Ci w ukryciu jakiejkolwiek aktywności w Internecie. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Szyfrowany DNS nie pomoże Ci w ukryciu jakiejkolwiek aktywności w Internecie. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | Nie | Based on server choice. Listę filtrowania możesz znaleźć tutaj: [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Do wyboru | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - -
- - - -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/pl/passwords.md b/i18n/pl/passwords.md index 5e59f086..2ff4dd43 100644 --- a/i18n/pl/passwords.md +++ b/i18n/pl/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Password Managers" +title: Password Managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/pl/self-hosting/dns-filtering.md b/i18n/pl/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/pl/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/pl/self-hosting/email-servers.md b/i18n/pl/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/pl/self-hosting/email-servers.md +++ b/i18n/pl/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/pl/self-hosting/index.md b/i18n/pl/self-hosting/index.md index ac94ce5b..6ea1c081 100644 --- a/i18n/pl/self-hosting/index.md +++ b/i18n/pl/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. diff --git a/i18n/pl/tools.md b/i18n/pl/tools.md index e46d4d54..88483c3d 100644 --- a/i18n/pl/tools.md +++ b/i18n/pl/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Dowiedz się więcej :hero-arrow-circle-right-fill:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Dowiedz się więcej :hero-arrow-circle-right-fill:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/pt-BR/about/donation-acceptance-policy.md b/i18n/pt-BR/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/pt-BR/about/donation-acceptance-policy.md +++ b/i18n/pt-BR/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/pt-BR/ai-chat.md b/i18n/pt-BR/ai-chat.md index dc0da421..ebd9fcd4 100644 --- a/i18n/pt-BR/ai-chat.md +++ b/i18n/pt-BR/ai-chat.md @@ -163,7 +163,7 @@ To check the authenticity and safety of the model, look for: - Community reviews and usage statistics - A "Safe" badge next to the model file (Hugging Face only) - Matching checksums[^1] - - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. + - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/pt-BR/android/obtaining-apps.md b/i18n/pt-BR/android/obtaining-apps.md index 0a0b83cd..1ea08bbe 100644 --- a/i18n/pt-BR/android/obtaining-apps.md +++ b/i18n/pt-BR/android/obtaining-apps.md @@ -86,26 +86,26 @@ If you download APK files to install manually, you can verify their signature wi 3. Extract the downloaded archive: - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. Run the signature verification command: - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. The resulting hashes can then be compared with another source. Some developers such as Signal [show the fingerprints](https://signal.org/android/apk) on their website. - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/pt-BR/device-integrity.md b/i18n/pt-BR/device-integrity.md index e395f223..781be7f5 100644 --- a/i18n/pt-BR/device-integrity.md +++ b/i18n/pt-BR/device-integrity.md @@ -102,7 +102,7 @@ If you use iOS and are at high-risk, we have three additional suggestions for yo 2. Trigger _sysdiagnose_ logs often and back them up externally. These logs can provide invaluable data to future forensic investigators if need be. - The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. + The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. 3. Enable [Lockdown Mode](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode). diff --git a/i18n/pt-BR/dns.md b/i18n/pt-BR/dns.md index 9d7d5da3..4835a71d 100644 --- a/i18n/pt-BR/dns.md +++ b/i18n/pt-BR/dns.md @@ -1,5 +1,5 @@ --- -title: "Introdução ao DNS" +title: Introdução ao DNS icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -DNS criptografado com servidores de terceiros só deve ser usado para contornar o [bloqueio básico de DNS](https://en.wikipedia.org/wiki/DNS_blocking) quando você pode ter certeza de que não haverá nenhuma consequência. DNS criptografado não ajudará você a esconder nenhuma de suas atividades de navegação. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. DNS criptografado não ajudará você a esconder nenhuma de suas atividades de navegação. [Saiba mais sobre DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | Não | Based on server choice. As listas de filtragem usadas podem ser encontradas aqui. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Opcional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -Uma solução de DNS auto-hospedada é útil para fornecer filtragem em plataformas limitadas como Smart TVs e outros dispositivos IoT, já que não é necessário nenhum “software” do lado do cliente. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -O Pi-hole foi projetado para ser hospedado em um Raspberry Pi, mas não se limita a esse "hardware". O “software” apresenta uma interface web amigável para visualizar informações e gerenciar conteúdo bloqueado. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home apresenta um painel web amigável para ver informações e gerenciar conteúdos bloqueados. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/pt-BR/os/windows/group-policies.md b/i18n/pt-BR/os/windows/group-policies.md index a28e1ba9..dcd7e598 100644 --- a/i18n/pt-BR/os/windows/group-policies.md +++ b/i18n/pt-BR/os/windows/group-policies.md @@ -20,8 +20,8 @@ To change any group policy, double click it and select Enabled or Disabled at th #### Device Guard - Turn On Virtualization Based Security: **Enabled** - - Platform Security Level: **Secure Boot and DMA Protection** - - Secure Launch Configuration: **Enabled** + - Platform Security Level: **Secure Boot and DMA Protection** + - Secure Launch Configuration: **Enabled** #### Internet Communication Management @@ -52,14 +52,14 @@ AutoRun and AutoPlay are features which allow Windows to run a script or perform - Turn off AutoPlay: **Enabled** - Disallow Autoplay for nonvolume devices: **Enabled** - Set the default behavior for AutoRun: **Enabled** - - Default AutoRun Behavior: **Do not execute any AutoRun commands** + - Default AutoRun Behavior: **Do not execute any AutoRun commands** #### BitLocker Drive Encryption You may wish to re-encrypt your operating system drive after changing these settings. - Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7): **Enabled** - - Select the encryption method: **AES-256** + - Select the encryption method: **AES-256** Setting the cipher strength for the Windows 7 policy still applies that strength to newer versions of Windows. @@ -85,12 +85,12 @@ Despite the names of these policies, this doesn't _require_ you to do anything b #### Data Collection and Preview Builds - Allow Diagnostic Data: **Enabled** - - Options: **Send required diagnostic data** (Pro Edition); or - - Options: **Diagnostic data off** (Enterprise or Education Edition) + - Options: **Send required diagnostic data** (Pro Edition); or + - Options: **Diagnostic data off** (Enterprise or Education Edition) - Limit Diagnostic Log Collection: **Enabled** - Limit Dump Collection: **Enabled** - Limit optional diagnostic data for Desktop Analytics: **Enabled** - - Options: **Disable Desktop Analytics collection** + - Options: **Disable Desktop Analytics collection** - Do not show feedback notifications: **Enabled** #### File Explorer @@ -118,7 +118,7 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Allow Cortana: **Disabled** - Don't search the web or display web results in Search: **Enabled** - Set what information is shared in Search: **Enabled** - - Type of information: **Anonymous info** + - Type of information: **Anonymous info** #### Sync your settings @@ -132,4 +132,4 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Do not send additional data: **Enabled** - Consent > Configure Default consent: **Enabled** - - Nível de consentimento: **Sempre pergunte antes de enviar dados** + - Nível de consentimento: **Sempre pergunte antes de enviar dados** diff --git a/i18n/pt-BR/passwords.md b/i18n/pt-BR/passwords.md index 768c4ff1..e243e74f 100644 --- a/i18n/pt-BR/passwords.md +++ b/i18n/pt-BR/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Gerenciadores de Senhas" +title: Gerenciadores de Senhas icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ Esses gerenciadores de senhas sincronizam suas senhas com um servidor em nuvem p Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. Se você deseja hospedar o Bitwarden em seu próprio servidor, é quase certo que queira usar o Vaultwarden em vez do código de servidor oficial do Bitwarden. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/pt-BR/self-hosting/dns-filtering.md b/i18n/pt-BR/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f82ae140 --- /dev/null +++ b/i18n/pt-BR/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. O Pi-hole foi projetado para ser hospedado em um Raspberry Pi, mas não se limita a esse "hardware". + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/pt-BR/self-hosting/email-servers.md b/i18n/pt-BR/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/pt-BR/self-hosting/email-servers.md +++ b/i18n/pt-BR/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/pt-BR/self-hosting/index.md b/i18n/pt-BR/self-hosting/index.md index fda8adcc..6ea1c081 100644 --- a/i18n/pt-BR/self-hosting/index.md +++ b/i18n/pt-BR/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" }
diff --git a/i18n/pt-BR/social-networks.md b/i18n/pt-BR/social-networks.md index ccce4abf..22e47dd8 100644 --- a/i18n/pt-BR/social-networks.md +++ b/i18n/pt-BR/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/pt-BR/tools.md b/i18n/pt-BR/tools.md index 49d9881d..d3e3fb25 100644 --- a/i18n/pt-BR/tools.md +++ b/i18n/pt-BR/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Saiba mais :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Soluções auto-hospedadas - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Saiba mais :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Serviços Financeiros #### Serviços de Disfarce de Pagamento diff --git a/i18n/pt/dns.md b/i18n/pt/dns.md index 749d2c86..394aa2b5 100644 --- a/i18n/pt/dns.md +++ b/i18n/pt/dns.md @@ -1,5 +1,5 @@ --- -title: "Introdução ao DNS" +title: Introdução ao DNS icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Capitalismo de vigilância](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. DNS criptografado não o ajudará a ocultar qualquer atividade de navegação. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. DNS criptografado não o ajudará a ocultar qualquer atividade de navegação. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**IVPN**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | 4 | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Opcional[^5] | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### ControlID @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/pt/passwords.md b/i18n/pt/passwords.md index d1296e45..126173e1 100644 --- a/i18n/pt/passwords.md +++ b/i18n/pt/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Gestores de palavras-passe" +title: Gestores de palavras-passe icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ Estes gestores de palavras-passe sincronizam as suas palavras-passe com um servi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. Se você está a pensar auto-hospedar o Bitwarden no seu próprio servidor, vai certamente querer usar o Vaultwarden sobre o código de servidor oficial do Bitwarden. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/pt/self-hosting/dns-filtering.md b/i18n/pt/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/pt/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/pt/self-hosting/email-servers.md b/i18n/pt/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/pt/self-hosting/email-servers.md +++ b/i18n/pt/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/pt/self-hosting/index.md b/i18n/pt/self-hosting/index.md index 9d3855ee..57a1068b 100644 --- a/i18n/pt/self-hosting/index.md +++ b/i18n/pt/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/pt/tools.md b/i18n/pt/tools.md index cb140a74..47ed9bf8 100644 --- a/i18n/pt/tools.md +++ b/i18n/pt/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Saiba mais :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Soluções auto-hospedadas - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Saiba mais :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Serviços financeiros #### Serviços de mascaramento de pagamentos diff --git a/i18n/ru/dns.md b/i18n/ru/dns.md index 411b9003..044945fc 100644 --- a/i18n/ru/dns.md +++ b/i18n/ru/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS-провайдеры" +title: DNS-провайдеры icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Капитализм слежки](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Зашифрованный DNS со сторонними серверами следует использовать только для обхода базовой [блокировки DNS](https://en.wikipedia.org/wiki/DNS_blocking), если вы уверены, что это не повлечет за собой никаких последствий. Зашифрованный DNS не поможет вам скрыть какую-либо активность в интернете. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Зашифрованный DNS не поможет вам скрыть какую-либо активность в интернете. [Узнайте больше о DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | Нет | Based on server choice. Используемый список фильтрации можно найти здесь. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Необязательное[^5] | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -DNS с самостоятельным хостингом полезно для обеспечения фильтрации на управляемых платформах, таких как телевизоры Smart TV и устройства IoT (Internet of Things - Интернет вещей), поскольку для этого не требуется клиентское ПО. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole создана для развертывания на Raspberry Pi, но она не требует именно такого специфичного оборудования. Решение предлагает дружелюбный веб-интерфейс для просмотра подробных отчетов и управления блокировкой контента. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home предлагает продуманный интерфейс для просмотра развёрнутых отчетов и управления блокировкой контента. - -[:octicons-home-16: Официальный сайт](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Политика конфиденциальности" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Документация} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Исходный код" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/ru/passwords.md b/i18n/ru/passwords.md index 5eeb3290..ac2666fb 100644 --- a/i18n/ru/passwords.md +++ b/i18n/ru/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Менеджеры паролей" +title: Менеджеры паролей icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ For example, the password manager in Microsoft Edge doesn't offer end-to-end enc Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. Если вы хотите самостоятельно развернуть Bitwarden на своем сервере, скорее всего, вам стоит использовать Vaultwarden вместо официального сервера Bitwarden. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/ru/self-hosting/dns-filtering.md b/i18n/ru/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f1fa6ddd --- /dev/null +++ b/i18n/ru/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole создана для развертывания на Raspberry Pi, но она не требует именно такого специфичного оборудования. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/ru/self-hosting/email-servers.md b/i18n/ru/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/ru/self-hosting/email-servers.md +++ b/i18n/ru/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/ru/self-hosting/index.md b/i18n/ru/self-hosting/index.md index 7ab68b26..2dbb31b6 100644 --- a/i18n/ru/self-hosting/index.md +++ b/i18n/ru/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. diff --git a/i18n/ru/tools.md b/i18n/ru/tools.md index 71bace20..fc663415 100644 --- a/i18n/ru/tools.md +++ b/i18n/ru/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Узнать больше :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Решения для самостоятельного хостинга - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Узнать больше :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Финансовые услуги #### Услуги по маскировке платежей diff --git a/i18n/sv/dns.md b/i18n/sv/dns.md index 9fce28a6..eddf347f 100644 --- a/i18n/sv/dns.md +++ b/i18n/sv/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS Resolvers" +title: DNS Resolvers icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Övervakningskapitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | No | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/sv/passwords.md b/i18n/sv/passwords.md index 35e816ab..f5a96624 100644 --- a/i18n/sv/passwords.md +++ b/i18n/sv/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Lösenordshanterare" +title: Lösenordshanterare icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ Dessa lösenordshanterare synkroniserar dina lösenord till en molnserver så at Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. Om du vill vara värd för Bitwarden på din egen server, vill du nästan säkert använda Vaultwarden över Bitwardens officiella serverkod. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/sv/self-hosting/dns-filtering.md b/i18n/sv/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/sv/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/sv/self-hosting/email-servers.md b/i18n/sv/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/sv/self-hosting/email-servers.md +++ b/i18n/sv/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/sv/self-hosting/index.md b/i18n/sv/self-hosting/index.md index 25260650..6ea1c081 100644 --- a/i18n/sv/self-hosting/index.md +++ b/i18n/sv/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" }
diff --git a/i18n/sv/tools.md b/i18n/sv/tools.md index 12a2da59..b35cf72a 100644 --- a/i18n/sv/tools.md +++ b/i18n/sv/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Läs mer :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Egenstyrda lösningar - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Läs mer :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/tr/dns.md b/i18n/tr/dns.md index 258434e6..c7602db6 100644 --- a/i18n/tr/dns.md +++ b/i18n/tr/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS Çözümleyicileri" +title: DNS Çözümleyicileri icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Üçüncü taraf sunucularla şifrelenmiş DNS, yalnızca herhangi bir sonucu olmayacağından emin olduğunuzda temel [DNS Engellemesini](https://en.wikipedia.org/wiki/DNS_blocking) aşmak için kullanılmalıdır. Şifrelenmiş DNS internet faaliyetlerinizi gizlemenize yardımcı olmaz. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Şifrelenmiş DNS internet faaliyetlerinizi gizlemenize yardımcı olmaz. [DNS hakkında daha fazla bilgi edinin :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | Hayır | Based on server choice. Kullanılan filtre listesine buradan ulaşabilirsiniz. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | İsteğe bağlı | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/tr/passwords.md b/i18n/tr/passwords.md index 16828eb3..3712ba1a 100644 --- a/i18n/tr/passwords.md +++ b/i18n/tr/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "Gizliliğinizi ve Güvenliğinizi Korumanız için En İyi Parola Yöneticileri - Privacy Guides" -title: "Parola yöneticileri" +title: Parola yöneticileri icon: material/form-textbox-password description: Parola yöneticileri, parolaları ve diğer kimlik bilgilerini güvenli bir şekilde saklayabilir ve yönetebilirsiniz. cover: passwords.webp @@ -177,16 +177,10 @@ Bu parola yöneticileri, tüm cihazlarınızdan kolay erişim ve cihaz kaybına Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/tr/self-hosting/dns-filtering.md b/i18n/tr/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/tr/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/tr/self-hosting/email-servers.md b/i18n/tr/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/tr/self-hosting/email-servers.md +++ b/i18n/tr/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/tr/self-hosting/index.md b/i18n/tr/self-hosting/index.md index 25260650..6ea1c081 100644 --- a/i18n/tr/self-hosting/index.md +++ b/i18n/tr/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/tr/tools.md b/i18n/tr/tools.md index b4726ef6..007e610a 100644 --- a/i18n/tr/tools.md +++ b/i18n/tr/tools.md @@ -295,17 +295,6 @@ Diğerlerinin yanı sıra [Mullvad](https://mullvad.net/en/help/dns-over-https-a [DNS hakkında daha fazla bilgi edinin :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Çözümler - -
- -- ![AdGuard Home logosu](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[DNS hakkında daha fazla bilgi edinin :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Finansal Hizmetler #### Ödeme Maskeleme Hizmetleri @@ -317,7 +306,7 @@ Diğerlerinin yanı sıra [Mullvad](https://mullvad.net/en/help/dns-over-https-a -[Dns hakkında daha fazla bilgi edinin :material-arrow-right-drop-circle:](financial-services.md#payment-masking-services) +[DNS hakkında daha fazla bilgi edinin :material-arrow-right-drop-circle:](financial-services.md#payment-masking-services) #### Çevrimiçi Hediye Kartı Pazarları diff --git a/i18n/uk/about/donation-acceptance-policy.md b/i18n/uk/about/donation-acceptance-policy.md index 98c22e7b..7037dc75 100644 --- a/i18n/uk/about/donation-acceptance-policy.md +++ b/i18n/uk/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/uk/ai-chat.md b/i18n/uk/ai-chat.md index fbecfca9..056b7cda 100644 --- a/i18n/uk/ai-chat.md +++ b/i18n/uk/ai-chat.md @@ -163,7 +163,7 @@ To check the authenticity and safety of the model, look for: - Community reviews and usage statistics - A "Safe" badge next to the model file (Hugging Face only) - Matching checksums[^1] - - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. + - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/uk/dns.md b/i18n/uk/dns.md index c4341675..bb36319c 100644 --- a/i18n/uk/dns.md +++ b/i18n/uk/dns.md @@ -1,5 +1,5 @@ --- -title: "Розв'язувачі DNS" +title: Розв'язувачі DNS icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Капіталізм нагляду](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Зашифрований DNS на сторонніх серверах слід використовувати, щоб обійти базове [блокування за DNS](https://en.wikipedia.org/wiki/DNS_blocking) лише тоді, коли ви впевнені, що це не матиме жодних наслідків. Зашифрований DNS не допоможе вам приховати будь-яку вашу веб-активність. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Зашифрований DNS не допоможе вам приховати будь-яку вашу веб-активність. [Дізнайтеся більше про DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | Ні | Based on server choice. Список використовуваних фільтрів можна знайти тут. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Опціонально | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -Самостійно розміщене рішення DNS корисно для забезпечення фільтрації на контрольованих платформах, таких як Smart TV та інші пристрої IoT, оскільки не потрібно клієнтське програмне забезпечення. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole розроблений для розміщення на Raspberry Pi, але він не обмежується цим обладнанням. Програмне забезпечення має зручний веб-інтерфейс для перегляду аналітики та управління заблокованим контентом. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home має відшліфований веб-інтерфейс для перегляду аналітики та керування заблокованим контентом. - -[:octicons-home-16: Домашня сторінка](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Політика конфіденційності" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Документація} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Вихідний код" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/uk/os/windows/group-policies.md b/i18n/uk/os/windows/group-policies.md index 8a173d21..faac8ed6 100644 --- a/i18n/uk/os/windows/group-policies.md +++ b/i18n/uk/os/windows/group-policies.md @@ -20,8 +20,8 @@ To change any group policy, double click it and select Enabled or Disabled at th #### Device Guard - Turn On Virtualization Based Security: **Enabled** - - Platform Security Level: **Secure Boot and DMA Protection** - - Secure Launch Configuration: **Enabled** + - Platform Security Level: **Secure Boot and DMA Protection** + - Secure Launch Configuration: **Enabled** #### Internet Communication Management @@ -52,14 +52,14 @@ AutoRun and AutoPlay are features which allow Windows to run a script or perform - Turn off AutoPlay: **Enabled** - Disallow Autoplay for nonvolume devices: **Enabled** - Set the default behavior for AutoRun: **Enabled** - - Default AutoRun Behavior: **Do not execute any AutoRun commands** + - Default AutoRun Behavior: **Do not execute any AutoRun commands** #### BitLocker Drive Encryption You may wish to re-encrypt your operating system drive after changing these settings. - Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7): **Enabled** - - Select the encryption method: **AES-256** + - Select the encryption method: **AES-256** Setting the cipher strength for the Windows 7 policy still applies that strength to newer versions of Windows. @@ -85,12 +85,12 @@ Despite the names of these policies, this doesn't _require_ you to do anything b #### Data Collection and Preview Builds - Allow Diagnostic Data: **Enabled** - - Options: **Send required diagnostic data** (Pro Edition); or - - Options: **Diagnostic data off** (Enterprise or Education Edition) + - Options: **Send required diagnostic data** (Pro Edition); or + - Options: **Diagnostic data off** (Enterprise or Education Edition) - Limit Diagnostic Log Collection: **Enabled** - Limit Dump Collection: **Enabled** - Limit optional diagnostic data for Desktop Analytics: **Enabled** - - Options: **Disable Desktop Analytics collection** + - Options: **Disable Desktop Analytics collection** - Do not show feedback notifications: **Enabled** #### File Explorer @@ -118,7 +118,7 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Allow Cortana: **Disabled** - Don't search the web or display web results in Search: **Enabled** - Set what information is shared in Search: **Enabled** - - Type of information: **Anonymous info** + - Type of information: **Anonymous info** #### Sync your settings @@ -132,4 +132,4 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Do not send additional data: **Enabled** - Consent > Configure Default consent: **Enabled** - - Consent level: **Always ask before sending data** + - Consent level: **Always ask before sending data** diff --git a/i18n/uk/passwords.md b/i18n/uk/passwords.md index d60eb44c..b830f59f 100644 --- a/i18n/uk/passwords.md +++ b/i18n/uk/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Password Managers" +title: Password Managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/uk/self-hosting/dns-filtering.md b/i18n/uk/self-hosting/dns-filtering.md new file mode 100644 index 00000000..92bdc5ec --- /dev/null +++ b/i18n/uk/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole розроблений для розміщення на Raspberry Pi, але він не обмежується цим обладнанням. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/uk/self-hosting/email-servers.md b/i18n/uk/self-hosting/email-servers.md index f7c4e5f5..957bee7a 100644 --- a/i18n/uk/self-hosting/email-servers.md +++ b/i18n/uk/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/uk/self-hosting/index.md b/i18n/uk/self-hosting/index.md index fda8adcc..6ea1c081 100644 --- a/i18n/uk/self-hosting/index.md +++ b/i18n/uk/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/uk/social-networks.md b/i18n/uk/social-networks.md index 96eaefb1..e9be7104 100644 --- a/i18n/uk/social-networks.md +++ b/i18n/uk/social-networks.md @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/uk/tools.md b/i18n/uk/tools.md index aea2ed54..b7cc1378 100644 --- a/i18n/uk/tools.md +++ b/i18n/uk/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/vi/dns.md b/i18n/vi/dns.md index b2c69b8f..52221289 100644 --- a/i18n/vi/dns.md +++ b/i18n/vi/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS Resolvers" +title: DNS Resolvers icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. Encrypted DNS will not help you hide any of your browsing activity. [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | No | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed. - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. The software features a friendly web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home features a polished web interface to view insights and manage blocked content. - -[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/vi/passwords.md b/i18n/vi/passwords.md index 8a93d980..81fe5a24 100644 --- a/i18n/vi/passwords.md +++ b/i18n/vi/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "Password Managers" +title: Password Managers icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/vi/self-hosting/dns-filtering.md b/i18n/vi/self-hosting/dns-filtering.md new file mode 100644 index 00000000..f8de2d50 --- /dev/null +++ b/i18n/vi/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware. + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/vi/self-hosting/email-servers.md b/i18n/vi/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/vi/self-hosting/email-servers.md +++ b/i18n/vi/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/vi/self-hosting/index.md b/i18n/vi/self-hosting/index.md index 25260650..6ea1c081 100644 --- a/i18n/vi/self-hosting/index.md +++ b/i18n/vi/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/vi/tools.md b/i18n/vi/tools.md index f8ee4247..edb36624 100644 --- a/i18n/vi/tools.md +++ b/i18n/vi/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[Learn more :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services diff --git a/i18n/zh-Hant/about/donation-acceptance-policy.md b/i18n/zh-Hant/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/zh-Hant/about/donation-acceptance-policy.md +++ b/i18n/zh-Hant/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/zh-Hant/ai-chat.md b/i18n/zh-Hant/ai-chat.md index 2ea3b184..f029b5c8 100644 --- a/i18n/zh-Hant/ai-chat.md +++ b/i18n/zh-Hant/ai-chat.md @@ -163,7 +163,7 @@ Mozilla 只為某些 Llama 和 Mistral 模型提供 llamafile，而可用的第 - 社群評論和使用情況統計 - 模型檔案旁的「Safe」徽章（僅限 Hugging Face） - 核對 checksum（核對和）[^1] - - 在 Hugging Face 上，您可以按一下模型檔案，並在其下方尋找 **Copy SHA256** 按鈕，以找到雜湊值。 您應該將此 checksum 與您下載的模型檔案之 checksum 進行比對。 + - 在 Hugging Face 上，您可以按一下模型檔案，並在其下方尋找 **Copy SHA256** 按鈕，以找到雜湊值。 您應該將此 checksum 與您下載的模型檔案之 checksum 進行比對。 A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/zh-Hant/android/obtaining-apps.md b/i18n/zh-Hant/android/obtaining-apps.md index e5daef0c..c99673ab 100644 --- a/i18n/zh-Hant/android/obtaining-apps.md +++ b/i18n/zh-Hant/android/obtaining-apps.md @@ -86,26 +86,26 @@ Aurora Store 不允許其匿名帳戶下載付費應用程式。 您可以選擇 3. 解壓縮下載的檔案： - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. 執行簽章驗證指令： - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. 然後可以將產生的雜湊值與另一個來源的相同應用程式進行比對。 一些開發人員（例如 Signal）也會在其網站上 [展示 fingerprints](https://signal.org/android/apk)，您可以用先前產生的雜湊值與其比對。 - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/zh-Hant/device-integrity.md b/i18n/zh-Hant/device-integrity.md index 65ae4f2b..471fdb3a 100644 --- a/i18n/zh-Hant/device-integrity.md +++ b/i18n/zh-Hant/device-integrity.md @@ -103,7 +103,7 @@ MVT 對掃描 iOS 裝置「最」有用。 Android 儲存的診斷資訊非常 2. 經常觸發 _sysdiagnose_ 記錄日誌並在外部備份。 如果需要，這些日誌可為鑑識調查人員提供寶貴的資料。 - 執行操作過程因型號而異，但可以在較新的手機上按住_電源_ + _音量調高_ + _音量調低_直到感覺到短暫的振動來觸發。 幾分鐘後，帶有時間戳記的 _sysdiagnose_ 日誌將出現在 **設定** > **隱私和安全性** > **分析和改進** > **分析資料** 中。 + 執行操作過程因型號而異，但可以在較新的手機上按住_電源_ + _音量調高_ + _音量調低_直到感覺到短暫的振動來觸發。 幾分鐘後，帶有時間戳記的 _sysdiagnose_ 日誌將出現在 **設定** > **隱私和安全性** > **分析和改進** > **分析資料** 中。 3. 啟用[鎖定模式](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode)。 diff --git a/i18n/zh-Hant/dns.md b/i18n/zh-Hant/dns.md index 1a899938..660a1821 100644 --- a/i18n/zh-Hant/dns.md +++ b/i18n/zh-Hant/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS解析器" +title: DNS解析器 icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: 監控資本主義](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -使用第三方伺服器的加密 DNS 只能避開基本的 [DNS 封鎖](https://en.wikipedia.org/wiki/DNS_blocking) ，當您確定不會有不良後果時。 加密的 DNS 無法為您隱藏瀏覽活動。 +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. 加密的 DNS 無法為您隱藏瀏覽活動。 [了解更多有關 DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ global: | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | 不採納 | 根據伺服器的選擇。 正在使用的過濾器列表可以在這裡找到。 [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | 可選 | 根據伺服器的選擇。 Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## 自行託管 DNS 過濾器 - -在被控制平臺，自主託管 DNS 可提供有用的過濾，例如智慧電視和其他物聯網裝置，因為不需要客戶端軟體。 - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** 是一個開源的 [DNS沉洞](https://zh.wikipedia.org/wiki/DNS%E6%B2%89%E6%B4%9E) ，它使用 [DNS 過濾](https://cloudflare.com/learning/access-management/what-is-dns-filtering/)來阻止不需要的網頁內容，例如廣告。 - -Pi-hole 設計應用在 Raspberry Pi ，但它並不限於這種硬體。 該軟體良好的 Web 界面，可查看有用資訊和管理被阻止的內容。 - -[:octicons-home-16: 首頁](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="隱私權政策" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=說明文件} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="原始碼" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=捐款 } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** 是一個開源的 [DNS沉洞](https://zh.wikipedia.org/wiki/DNS%E6%B2%89%E6%B4%9E) ，使用 [DNS 過濾](https://cloudflare.com/learning/access-management/what-is-dns-filtering/) 來封鎖不需要的網頁內容，例如廣告。 - -AdGuard Home 提供精美的網頁介面，可查看有用資訊並管理被封鎖的內容。 - -[:octicons-home-16: 首頁](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="隱私權政策" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=說明文件} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="原始碼" } - - - -
- ## 雲端 DNS 過濾器 -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. 這些服務通常比上述自託管服務更容易設定和配置，並且可以更輕鬆地跨多個網路使用（自託管解決方案通常僅限於家用/區域網路，除非您進行更進階的設定）。 +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** 可自訂的 DNS 服務，可在 DNS 層級封鎖安全性威脅、不必要的內容和廣告。 付費方案之外，他們還提供許多可免費使用的預先配置 DNS 解析器。 +**Control D** 可自訂的 DNS 服務，可在 DNS 層級封鎖安全性威脅、不必要的內容和廣告。 + +付費方案之外，他們還提供許多可免費使用的預先配置 DNS 解析器。 [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** 為可自訂的 DNS 服務，可在 DNS 層級封鎖安全性威脅、不必要的內容和廣告。 他們提供功能齊全的免費計劃，但使用受限。 +**NextDNS** 為可自訂的 DNS 服務，可在 DNS 層級封鎖安全性威脅、不必要的內容和廣告。 + +他們提供功能齊全的免費計劃，但使用受限。 [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/zh-Hant/os/windows/group-policies.md b/i18n/zh-Hant/os/windows/group-policies.md index f08976a5..9d3df852 100644 --- a/i18n/zh-Hant/os/windows/group-policies.md +++ b/i18n/zh-Hant/os/windows/group-policies.md @@ -20,8 +20,8 @@ These settings should be set on a brand-new installation of Windows. Setting the #### 裝置防護 - 開啟虛擬化型安全性:**啟用** - - 選取平台安全性層級: **安全開機及 DMA 保護** - - 安全啟動設定: **已啟用** + - 選取平台安全性層級: **安全開機及 DMA 保護** + - 安全啟動設定: **已啟用** #### 網際網路通訊管理 @@ -52,14 +52,14 @@ These settings should be set on a brand-new installation of Windows. Setting the - 關閉自動播放: **已啟用** - 不允許非磁碟區裝置的自動播放: **已啟用** - 設定 AutoRun 的預設行為: **已啟用** - - 預設 AutoRun 行為: **不執行任何 AutoRun 命令** + - 預設 AutoRun 行為: **不執行任何 AutoRun 命令** #### BitLocker 磁碟機加密 在變更以下設定後，您可能需要重新加密作業系統磁碟機。 - 選擇磁碟機加密演算法及金鑰加密強度 (Windows Vista, Windows Server 2008, Windows 7): **已啟用** - - 選取加密方法:**AES-256** + - 選取加密方法:**AES-256** 即使針對 Windows 7 政策設定加密強度，此強度仍適用於較新的 Windows 版本。 @@ -85,12 +85,12 @@ Despite the names of these policies, this doesn't _require_ you to do anything b #### 資料收集與預覽組建 - 允許電腦分析處理:**已啟用** - - 選項: **傳送必要的診斷資料** (專業版) 或是 - - 選項: **關閉診斷資料** (企業版或教育版) + - 選項: **傳送必要的診斷資料** (專業版) 或是 + - 選項: **關閉診斷資料** (企業版或教育版) - 限制診斷記錄檔集合: **已啟用** - 限制傾印集合: **已啟用** - 限制用於電腦分析的選擇性診斷資料: **已啟用** - - 選項: **停用 電腦分析 收集** + - 選項: **停用 電腦分析 收集** - 不顯示意見反應通知: **已啟用** #### 檔案總管 @@ -118,7 +118,7 @@ Despite the names of these policies, this doesn't _require_ you to do anything b - 允許 Cortana: **已停用** - 不要在[搜尋] 中搜尋網路或顯示網路搜尋結果:**已啟用** - 設定 [搜尋] 中可分享的資訊:**已啟用** - - 資訊類型:**匿名資訊** + - 資訊類型:**匿名資訊** #### 同步您的設定 @@ -132,4 +132,4 @@ Despite the names of these policies, this doesn't _require_ you to do anything b - 不要傳送其它資料:**已啟用** - 同意 > 設定預設同意: **已啟用** - - 同意層級: **傳送資料前一律詢問** + - 同意層級: **傳送資料前一律詢問** diff --git a/i18n/zh-Hant/passwords.md b/i18n/zh-Hant/passwords.md index 14e3cd46..1d894c8e 100644 --- a/i18n/zh-Hant/passwords.md +++ b/i18n/zh-Hant/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "保護您的隱私和安全的最佳密碼管理器 - Privacy Guides" -title: "密碼管理器" +title: 密碼管理器 icon: material/form-textbox-password description: 密碼管理器可讓您安全地儲存和管理密碼及其他憑證。 cover: passwords.webp @@ -177,16 +177,10 @@ For example, the password manager in Microsoft Edge doesn't offer end-to-end enc Bitwarden 預設使用 [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) 作為其 金鑰衍生函式(KDF) 演算法。 它也提供更安全的 [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id) 作為可選方案。 You can change your account's KDF algorithm in the web vault: -- [x] 選擇**設定 > 安全 > 金鑰 > KDF 演算法 > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden 伺服器端代碼是 [開源的](https://github.com/bitwarden/server)，因此如果不想使用 Bitwarden 雲端，可以輕鬆地託管自己的 Bitwarden 同步伺服器。 -**Vaultwarden** 是 Bitwarden 同步伺服器的另一種實作，以 Rust 寫成，並與官方的 Bitwarden 用戶端相容。非常適合用來自架服務，因為使用資源吃重的官方服務可能不是很理想。 如果您想在自己的伺服器上自行託管 Bitwarden，幾乎可以肯定的是，您想使用 Vaultwarden 而不是 Bitwarden 的官方伺服器程式碼。 - -[:octicons-repo-16: Vaultwarden 儲存庫](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="說明文件" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="原始碼" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="捐款" } - ### Proton Pass
diff --git a/i18n/zh-Hant/self-hosting/dns-filtering.md b/i18n/zh-Hant/self-hosting/dns-filtering.md new file mode 100644 index 00000000..3c1b9749 --- /dev/null +++ b/i18n/zh-Hant/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +防護下列威脅： + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole 設計應用在 Raspberry Pi ，但它並不限於這種硬體。 + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/zh-Hant/self-hosting/email-servers.md b/i18n/zh-Hant/self-hosting/email-servers.md index 7ee5eb64..4d47d8a4 100644 --- a/i18n/zh-Hant/self-hosting/email-servers.md +++ b/i18n/zh-Hant/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/zh-Hant/self-hosting/index.md b/i18n/zh-Hant/self-hosting/index.md index 84d7c884..2736195c 100644 --- a/i18n/zh-Hant/self-hosting/index.md +++ b/i18n/zh-Hant/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/zh-Hant/social-networks.md b/i18n/zh-Hant/social-networks.md index e557132e..dc328cab 100644 --- a/i18n/zh-Hant/social-networks.md +++ b/i18n/zh-Hant/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/zh-Hant/tools.md b/i18n/zh-Hant/tools.md index 9575c00a..6ae6e2ad 100644 --- a/i18n/zh-Hant/tools.md +++ b/i18n/zh-Hant/tools.md @@ -299,17 +299,6 @@ description: Privacy Guides 社群所推薦的隱私工具、服務、軟體及 [了解更多 :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### 自主託管方案 - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[了解更多 :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### 金融服務 #### 付款掩蔽服務 diff --git a/i18n/zh-TW/about/donation-acceptance-policy.md b/i18n/zh-TW/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/zh-TW/about/donation-acceptance-policy.md +++ b/i18n/zh-TW/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/zh-TW/ai-chat.md b/i18n/zh-TW/ai-chat.md index 2ea3b184..f029b5c8 100644 --- a/i18n/zh-TW/ai-chat.md +++ b/i18n/zh-TW/ai-chat.md @@ -163,7 +163,7 @@ Mozilla 只為某些 Llama 和 Mistral 模型提供 llamafile，而可用的第 - 社群評論和使用情況統計 - 模型檔案旁的「Safe」徽章（僅限 Hugging Face） - 核對 checksum（核對和）[^1] - - 在 Hugging Face 上，您可以按一下模型檔案，並在其下方尋找 **Copy SHA256** 按鈕，以找到雜湊值。 您應該將此 checksum 與您下載的模型檔案之 checksum 進行比對。 + - 在 Hugging Face 上，您可以按一下模型檔案，並在其下方尋找 **Copy SHA256** 按鈕，以找到雜湊值。 您應該將此 checksum 與您下載的模型檔案之 checksum 進行比對。 A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/zh-TW/android/obtaining-apps.md b/i18n/zh-TW/android/obtaining-apps.md index e5daef0c..c99673ab 100644 --- a/i18n/zh-TW/android/obtaining-apps.md +++ b/i18n/zh-TW/android/obtaining-apps.md @@ -86,26 +86,26 @@ Aurora Store 不允許其匿名帳戶下載付費應用程式。 您可以選擇 3. 解壓縮下載的檔案： - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. 執行簽章驗證指令： - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. 然後可以將產生的雜湊值與另一個來源的相同應用程式進行比對。 一些開發人員（例如 Signal）也會在其網站上 [展示 fingerprints](https://signal.org/android/apk)，您可以用先前產生的雜湊值與其比對。 - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/zh-TW/device-integrity.md b/i18n/zh-TW/device-integrity.md index 65ae4f2b..471fdb3a 100644 --- a/i18n/zh-TW/device-integrity.md +++ b/i18n/zh-TW/device-integrity.md @@ -103,7 +103,7 @@ MVT 對掃描 iOS 裝置「最」有用。 Android 儲存的診斷資訊非常 2. 經常觸發 _sysdiagnose_ 記錄日誌並在外部備份。 如果需要，這些日誌可為鑑識調查人員提供寶貴的資料。 - 執行操作過程因型號而異，但可以在較新的手機上按住_電源_ + _音量調高_ + _音量調低_直到感覺到短暫的振動來觸發。 幾分鐘後，帶有時間戳記的 _sysdiagnose_ 日誌將出現在 **設定** > **隱私和安全性** > **分析和改進** > **分析資料** 中。 + 執行操作過程因型號而異，但可以在較新的手機上按住_電源_ + _音量調高_ + _音量調低_直到感覺到短暫的振動來觸發。 幾分鐘後，帶有時間戳記的 _sysdiagnose_ 日誌將出現在 **設定** > **隱私和安全性** > **分析和改進** > **分析資料** 中。 3. 啟用[鎖定模式](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode)。 diff --git a/i18n/zh-TW/dns.md b/i18n/zh-TW/dns.md index 1a899938..660a1821 100644 --- a/i18n/zh-TW/dns.md +++ b/i18n/zh-TW/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS解析器" +title: DNS解析器 icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: 監控資本主義](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -使用第三方伺服器的加密 DNS 只能避開基本的 [DNS 封鎖](https://en.wikipedia.org/wiki/DNS_blocking) ，當您確定不會有不良後果時。 加密的 DNS 無法為您隱藏瀏覽活動。 +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. 加密的 DNS 無法為您隱藏瀏覽活動。 [了解更多有關 DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ global: | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | 不採納 | 根據伺服器的選擇。 正在使用的過濾器列表可以在這裡找到。 [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | 可選 | 根據伺服器的選擇。 Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## 自行託管 DNS 過濾器 - -在被控制平臺，自主託管 DNS 可提供有用的過濾，例如智慧電視和其他物聯網裝置，因為不需要客戶端軟體。 - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** 是一個開源的 [DNS沉洞](https://zh.wikipedia.org/wiki/DNS%E6%B2%89%E6%B4%9E) ，它使用 [DNS 過濾](https://cloudflare.com/learning/access-management/what-is-dns-filtering/)來阻止不需要的網頁內容，例如廣告。 - -Pi-hole 設計應用在 Raspberry Pi ，但它並不限於這種硬體。 該軟體良好的 Web 界面，可查看有用資訊和管理被阻止的內容。 - -[:octicons-home-16: 首頁](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="隱私權政策" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=說明文件} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="原始碼" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=捐款 } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** 是一個開源的 [DNS沉洞](https://zh.wikipedia.org/wiki/DNS%E6%B2%89%E6%B4%9E) ，使用 [DNS 過濾](https://cloudflare.com/learning/access-management/what-is-dns-filtering/) 來封鎖不需要的網頁內容，例如廣告。 - -AdGuard Home 提供精美的網頁介面，可查看有用資訊並管理被封鎖的內容。 - -[:octicons-home-16: 首頁](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="隱私權政策" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=說明文件} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="原始碼" } - - - -
- ## 雲端 DNS 過濾器 -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. 這些服務通常比上述自託管服務更容易設定和配置，並且可以更輕鬆地跨多個網路使用（自託管解決方案通常僅限於家用/區域網路，除非您進行更進階的設定）。 +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** 可自訂的 DNS 服務，可在 DNS 層級封鎖安全性威脅、不必要的內容和廣告。 付費方案之外，他們還提供許多可免費使用的預先配置 DNS 解析器。 +**Control D** 可自訂的 DNS 服務，可在 DNS 層級封鎖安全性威脅、不必要的內容和廣告。 + +付費方案之外，他們還提供許多可免費使用的預先配置 DNS 解析器。 [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** 為可自訂的 DNS 服務，可在 DNS 層級封鎖安全性威脅、不必要的內容和廣告。 他們提供功能齊全的免費計劃，但使用受限。 +**NextDNS** 為可自訂的 DNS 服務，可在 DNS 層級封鎖安全性威脅、不必要的內容和廣告。 + +他們提供功能齊全的免費計劃，但使用受限。 [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/zh-TW/os/windows/group-policies.md b/i18n/zh-TW/os/windows/group-policies.md index f08976a5..9d3df852 100644 --- a/i18n/zh-TW/os/windows/group-policies.md +++ b/i18n/zh-TW/os/windows/group-policies.md @@ -20,8 +20,8 @@ These settings should be set on a brand-new installation of Windows. Setting the #### 裝置防護 - 開啟虛擬化型安全性:**啟用** - - 選取平台安全性層級: **安全開機及 DMA 保護** - - 安全啟動設定: **已啟用** + - 選取平台安全性層級: **安全開機及 DMA 保護** + - 安全啟動設定: **已啟用** #### 網際網路通訊管理 @@ -52,14 +52,14 @@ These settings should be set on a brand-new installation of Windows. Setting the - 關閉自動播放: **已啟用** - 不允許非磁碟區裝置的自動播放: **已啟用** - 設定 AutoRun 的預設行為: **已啟用** - - 預設 AutoRun 行為: **不執行任何 AutoRun 命令** + - 預設 AutoRun 行為: **不執行任何 AutoRun 命令** #### BitLocker 磁碟機加密 在變更以下設定後，您可能需要重新加密作業系統磁碟機。 - 選擇磁碟機加密演算法及金鑰加密強度 (Windows Vista, Windows Server 2008, Windows 7): **已啟用** - - 選取加密方法:**AES-256** + - 選取加密方法:**AES-256** 即使針對 Windows 7 政策設定加密強度，此強度仍適用於較新的 Windows 版本。 @@ -85,12 +85,12 @@ Despite the names of these policies, this doesn't _require_ you to do anything b #### 資料收集與預覽組建 - 允許電腦分析處理:**已啟用** - - 選項: **傳送必要的診斷資料** (專業版) 或是 - - 選項: **關閉診斷資料** (企業版或教育版) + - 選項: **傳送必要的診斷資料** (專業版) 或是 + - 選項: **關閉診斷資料** (企業版或教育版) - 限制診斷記錄檔集合: **已啟用** - 限制傾印集合: **已啟用** - 限制用於電腦分析的選擇性診斷資料: **已啟用** - - 選項: **停用 電腦分析 收集** + - 選項: **停用 電腦分析 收集** - 不顯示意見反應通知: **已啟用** #### 檔案總管 @@ -118,7 +118,7 @@ Despite the names of these policies, this doesn't _require_ you to do anything b - 允許 Cortana: **已停用** - 不要在[搜尋] 中搜尋網路或顯示網路搜尋結果:**已啟用** - 設定 [搜尋] 中可分享的資訊:**已啟用** - - 資訊類型:**匿名資訊** + - 資訊類型:**匿名資訊** #### 同步您的設定 @@ -132,4 +132,4 @@ Despite the names of these policies, this doesn't _require_ you to do anything b - 不要傳送其它資料:**已啟用** - 同意 > 設定預設同意: **已啟用** - - 同意層級: **傳送資料前一律詢問** + - 同意層級: **傳送資料前一律詢問** diff --git a/i18n/zh-TW/passwords.md b/i18n/zh-TW/passwords.md index 14e3cd46..1d894c8e 100644 --- a/i18n/zh-TW/passwords.md +++ b/i18n/zh-TW/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "保護您的隱私和安全的最佳密碼管理器 - Privacy Guides" -title: "密碼管理器" +title: 密碼管理器 icon: material/form-textbox-password description: 密碼管理器可讓您安全地儲存和管理密碼及其他憑證。 cover: passwords.webp @@ -177,16 +177,10 @@ For example, the password manager in Microsoft Edge doesn't offer end-to-end enc Bitwarden 預設使用 [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) 作為其 金鑰衍生函式(KDF) 演算法。 它也提供更安全的 [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id) 作為可選方案。 You can change your account's KDF algorithm in the web vault: -- [x] 選擇**設定 > 安全 > 金鑰 > KDF 演算法 > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden 伺服器端代碼是 [開源的](https://github.com/bitwarden/server)，因此如果不想使用 Bitwarden 雲端，可以輕鬆地託管自己的 Bitwarden 同步伺服器。 -**Vaultwarden** 是 Bitwarden 同步伺服器的另一種實作，以 Rust 寫成，並與官方的 Bitwarden 用戶端相容。非常適合用來自架服務，因為使用資源吃重的官方服務可能不是很理想。 如果您想在自己的伺服器上自行託管 Bitwarden，幾乎可以肯定的是，您想使用 Vaultwarden 而不是 Bitwarden 的官方伺服器程式碼。 - -[:octicons-repo-16: Vaultwarden 儲存庫](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="說明文件" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="原始碼" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="捐款" } - ### Proton Pass
diff --git a/i18n/zh-TW/self-hosting/dns-filtering.md b/i18n/zh-TW/self-hosting/dns-filtering.md new file mode 100644 index 00000000..3c1b9749 --- /dev/null +++ b/i18n/zh-TW/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +防護下列威脅： + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole 設計應用在 Raspberry Pi ，但它並不限於這種硬體。 + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/zh-TW/self-hosting/email-servers.md b/i18n/zh-TW/self-hosting/email-servers.md index 7ee5eb64..4d47d8a4 100644 --- a/i18n/zh-TW/self-hosting/email-servers.md +++ b/i18n/zh-TW/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: "Self-Hosted Email - Privacy Guides" +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/zh-TW/self-hosting/index.md b/i18n/zh-TW/self-hosting/index.md index 84d7c884..2736195c 100644 --- a/i18n/zh-TW/self-hosting/index.md +++ b/i18n/zh-TW/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: "Self-Hosted Software and Services - Privacy Guides" -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/zh-TW/social-networks.md b/i18n/zh-TW/social-networks.md index e557132e..dc328cab 100644 --- a/i18n/zh-TW/social-networks.md +++ b/i18n/zh-TW/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/zh-TW/tools.md b/i18n/zh-TW/tools.md index 9575c00a..6ae6e2ad 100644 --- a/i18n/zh-TW/tools.md +++ b/i18n/zh-TW/tools.md @@ -299,17 +299,6 @@ description: Privacy Guides 社群所推薦的隱私工具、服務、軟體及 [了解更多 :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies) -#### 自主託管方案 - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[了解更多 :material-arrow-right-drop-circle:](dns.md#self-hosted-dns-filtering) - ### 金融服務 #### 付款掩蔽服務 diff --git a/i18n/zh/about/donation-acceptance-policy.md b/i18n/zh/about/donation-acceptance-policy.md index c3ec73d3..7037dc75 100644 --- a/i18n/zh/about/donation-acceptance-policy.md +++ b/i18n/zh/about/donation-acceptance-policy.md @@ -12,7 +12,7 @@ Privacy Guides aspires to obtain funding from a wide variety of sources to reduc In the course of our regular fundraising activities... - Donations and other forms of support will generally be accepted from individuals, corporations, foundations, or other entities, without limitations. - - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. + - This includes cash, cash equivalents (checks, money orders, credit/debit card payments), and cryptocurrency. - Gifts of Real Property, Personal Property, or Securities may only be accepted upon approval of the MAGIC Grants board of directors. Privacy Guides will only accept such gifts that are legal and consistent with our policies. Gifts must not interfere with Privacy Guides' mission, purpose, and procedures. diff --git a/i18n/zh/about/jobs.md b/i18n/zh/about/jobs.md index 6a5909b3..598c21d2 100644 --- a/i18n/zh/about/jobs.md +++ b/i18n/zh/about/jobs.md @@ -3,7 +3,7 @@ title: Job Openings description: Privacy Guides has a small, remote team of privacy researchers and advocates. Any open positions we may have in the future will be posted here. --- -Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed here. Please consider donating to support our cause. +Privacy Guides has a small, remote team of privacy researchers and advocates working to further our mission of protecting free expression and promoting privacy-respecting technology. As a non-profit, we are expanding very slowly to ensure the project is sustainable in the long term. All of our team members are listed [here](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Please consider [donating](https://donate.magicgrants.org/privacyguides) to support our cause. We are occasionally looking for strong journalistic writers, product reviewers, and privacy experts to help us out, and any open positions will be posted below. diff --git a/i18n/zh/ai-chat.md b/i18n/zh/ai-chat.md index fd2462c0..abeb10fc 100644 --- a/i18n/zh/ai-chat.md +++ b/i18n/zh/ai-chat.md @@ -1,6 +1,6 @@ --- meta_title: "Recommended AI Chat: Private ChatGPT Alternatives - Privacy Guides" -title: AI Chat +title: "AI Chat" icon: material/assistant description: Unlike OpenAI's ChatGPT and its Big Tech competitors, these AI tools run locally so your data never leaves your desktop device. cover: ai-chatbots.webp @@ -163,7 +163,7 @@ To check the authenticity and safety of the model, look for: - Community reviews and usage statistics - A "Safe" badge next to the model file (Hugging Face only) - Matching checksums[^1] - - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. + - On Hugging Face, you can find the hash by clicking on a model file and looking for the **Copy SHA256** button below it. You should compare this checksum with the one from the model file you downloaded. A downloaded model is generally safe if it satisfies all the above checks. diff --git a/i18n/zh/alternative-networks.md b/i18n/zh/alternative-networks.md index ec73a71c..49626fe6 100644 --- a/i18n/zh/alternative-networks.md +++ b/i18n/zh/alternative-networks.md @@ -1,5 +1,5 @@ --- -title: Alternative Networks +title: "Alternative Networks" icon: material/vector-polygon description: These tools allow you to access networks other than the World Wide Web. cover: alternative-networks.webp diff --git a/i18n/zh/android/distributions.md b/i18n/zh/android/distributions.md index ed7e2cce..63f4ba1a 100644 --- a/i18n/zh/android/distributions.md +++ b/i18n/zh/android/distributions.md @@ -1,12 +1,12 @@ --- -meta_title: The Best Android Operating Systems - Privacy Guides -title: Alternative Distributions +meta_title: "The Best Android Operating Systems - Privacy Guides" +title: "Alternative Distributions" description: You can replace the operating system on your Android phone with these secure and privacy-respecting alternatives. schema: - "@context": http://schema.org "@type": WebPage name: Private Android Operating Systems - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: GrapheneOS @@ -16,7 +16,7 @@ schema: subjectOf: "@context": http://schema.org "@type": WebPage - url: ./ + url: "./" robots: nofollow, max-snippet:-1, max-image-preview:large --- diff --git a/i18n/zh/android/general-apps.md b/i18n/zh/android/general-apps.md index 7c335885..92c79193 100644 --- a/i18n/zh/android/general-apps.md +++ b/i18n/zh/android/general-apps.md @@ -1,11 +1,11 @@ --- -title: General Apps +title: "General Apps" description: The apps listed here are Android-exclusive and specifically enhance or replace key system functionality. schema: - "@context": http://schema.org "@type": WebPage name: General Android Apps - url: ./ + url: "./" - "@context": http://schema.org "@type": MobileApplication name: Shelter diff --git a/i18n/zh/android/index.md b/i18n/zh/android/index.md index 271cc17d..cf61f1f4 100644 --- a/i18n/zh/android/index.md +++ b/i18n/zh/android/index.md @@ -1,13 +1,13 @@ --- -title: Android +title: "Android" description: Our advice for replacing privacy-invasive default Android features with private and secure alternatives. -icon: simple/android +icon: 'simple/android' cover: android.webp schema: - "@context": http://schema.org "@type": WebPage name: Android Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": CreativeWork name: Android @@ -38,7 +38,7 @@ There are also many private alternatives to the apps that come pre-installed on When you buy an Android phone, the default operating system comes bundled with apps and functionality that are not part of the Android Open Source Project. Many of these apps—even apps like the dialer which provide basic system functionality—require invasive integrations with Google Play Services, which in turn asks for privileges to access your files, contacts storage, call logs, SMS messages, location, camera, microphone, and numerous other things on your device in order for those basic system apps and many other apps to function in the first place. Frameworks like Google Play Services increase the attack surface of your device and are the source of various privacy concerns with Android. -This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. 不巧，很多安卓 ROM 不支持 AVB、回滚保护、系统更新、等这些关键的安全功能，破坏了安卓的安全模型。 Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require more permissive SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. +This problem could be solved by using an alternative Android distribution, commonly known as a _custom ROM_, that does not come with such invasive integration. 不巧，很多安卓 ROM 不支持 AVB、回滚保护、系统更新、等这些关键的安全功能，破坏了安卓的安全模型。 Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require [more permissive](https://github.com/LineageOS/android_system_sepolicy/search?q=userdebug&type=code) SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model. 在挑选安卓 ROM 时，理想的情况，是能找到坚持安卓安全模型的 ROM。 At the very least, the distribution should have production builds, support for AVB, rollback protection, timely firmware and operating system updates, and SELinux in [enforcing mode](https://source.android.com/security/selinux/concepts#enforcement_levels). All of our recommended Android distributions satisfy these criteria: diff --git a/i18n/zh/android/obtaining-apps.md b/i18n/zh/android/obtaining-apps.md index acad1d72..1ea08bbe 100644 --- a/i18n/zh/android/obtaining-apps.md +++ b/i18n/zh/android/obtaining-apps.md @@ -1,5 +1,5 @@ --- -title: Obtaining Applications +title: "Obtaining Applications" description: We recommend these methods for obtaining applications on Android without interacting with Google Play Services. --- @@ -86,26 +86,26 @@ If you download APK files to install manually, you can verify their signature wi 3. Extract the downloaded archive: - ```bash - unzip commandlinetools-*.zip - cd cmdline-tools - ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" - ``` + ```bash + unzip commandlinetools-*.zip + cd cmdline-tools + ./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3" + ``` 4. Run the signature verification command: - ```bash - ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk - ``` + ```bash + ./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk + ``` 5. The resulting hashes can then be compared with another source. Some developers such as Signal [show the fingerprints](https://signal.org/android/apk) on their website. - ```bash - Signer #1 certificate DN: CN=GrapheneOS - Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 - Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c - Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 - ``` + ```bash + Signer #1 certificate DN: CN=GrapheneOS + Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59 + Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c + Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3 + ``` ## F-Droid diff --git a/i18n/zh/basics/hardware.md b/i18n/zh/basics/hardware.md index ee98de98..85386f4b 100644 --- a/i18n/zh/basics/hardware.md +++ b/i18n/zh/basics/hardware.md @@ -1,6 +1,6 @@ --- -title: Choosing Your Hardware -icon: material/chip +title: "Choosing Your Hardware" +icon: 'material/chip' description: Software isn't all that matters; learn about the hardware tools you use every day to protect your privacy. --- diff --git a/i18n/zh/device-integrity.md b/i18n/zh/device-integrity.md index 5a983c76..b33905c1 100644 --- a/i18n/zh/device-integrity.md +++ b/i18n/zh/device-integrity.md @@ -1,5 +1,5 @@ --- -title: Device Integrity +title: "Device Integrity" icon: material/security description: These tools can be used to check your devices for compromise. cover: device-integrity.webp @@ -102,7 +102,7 @@ If you use iOS and are at high-risk, we have three additional suggestions for yo 2. Trigger _sysdiagnose_ logs often and back them up externally. These logs can provide invaluable data to future forensic investigators if need be. - The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. + The process to do so varies by model, but you can trigger it on newer phones by holding down _Power_ + _Volume Up_ + _Volume Down_ until you feel a brief vibration. After a few minutes, the timestamped _sysdiagnose_ log will appear in **Settings** > **Privacy & Security** > **Analytics & Improvements** > **Analytics Data**. 3. Enable [Lockdown Mode](https://blog.privacyguides.org/2022/10/27/macos-ventura-privacy-security-updates/#lockdown-mode). diff --git a/i18n/zh/dns.md b/i18n/zh/dns.md index fed43310..560345f9 100644 --- a/i18n/zh/dns.md +++ b/i18n/zh/dns.md @@ -1,5 +1,5 @@ --- -title: "DNS解析器" +title: DNS解析器 icon: material/dns description: We recommend choosing these encrypted DNS providers to replace your ISP's default configuration. cover: dns.webp @@ -13,7 +13,7 @@ global: - [:material-account-cash: 监视资本主义](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown} -Encrypted DNS with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. 加密的DNS不会帮助你隐藏任何浏览活动。 +Encrypted **DNS** with third-party servers should only be used to get around basic [DNS blocking](https://en.wikipedia.org/wiki/DNS_blocking) when you can be sure there won't be any consequences. 加密的DNS不会帮助你隐藏任何浏览活动。 [Learn more about DNS :material-arrow-right-drop-circle:](advanced/dns-overview.md ""){.md-button} @@ -30,52 +30,9 @@ These are our favorite public DNS resolvers based on their privacy and security | [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^5] | No | Based on server choice. 正在使用的过滤器列表可以在这里找到。 [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | | [**Quad9**](https://quad9.net) | Cleartext
DoH
DoT
DNSCrypt | Anonymized[^6] | 可选 | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | -## Self-Hosted DNS Filtering - -自我托管的DNS解决方案对于在智能电视和其他物联网设备等受控平台上提供过滤非常有用，因为不需要客户端软件。 - -### Pi-hole - -
- -![Pi-hole logo](assets/img/dns/pi-hole.svg){ align=right } - -**Pi-hole** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -Pi-hole被设计为在Raspberry Pi上托管，但它并不局限于这种硬件。 该软件具有一个友好的网络界面，可以查看洞察力和管理封锁的内容。 - -[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } -[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } -[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title=Documentation} -[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } -[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title=Contribute } - - - -
- -### AdGuard Home - -
- -![AdGuard Home logo](assets/img/dns/adguard-home.svg){ align=right } - -**AdGuard Home** is an open-source [DNS-sinkhole](https://en.wikipedia.org/wiki/DNS_sinkhole) which uses [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) to block unwanted web content, such as advertisements. - -AdGuard Home有一个精致的网络界面，可以查看洞察力和管理被阻止的内容。 - -[:octicons-home-16: 主页](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } -[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="隐私政策" } -[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title=文档} -[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="源代码" } - - - -
- ## Cloud-Based DNS Filtering -These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs, similarly to a Pi-hole. These services are usually easier to set up and configure than self-hosted services like the ones above, and can be used more easily across multiple networks (self-hosted solutions are typically restricted to your home/local network unless you set up a more advanced configuration). +These DNS filtering solutions offer a web dashboard where you can customize the block lists to your exact needs. These services can be used easily across multiple networks. ### Control D @@ -83,7 +40,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![Control D logo](assets/img/dns/control-d.svg){ align=right } -**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. +**Control D** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free. [:octicons-home-16: Homepage](https://controld.com){ .md-button .md-button--primary } [:octicons-eye-16:](https://controld.com/privacy){ .card-link title="Privacy Policy" } @@ -110,7 +69,9 @@ These DNS filtering solutions offer a web dashboard where you can customize the ![NextDNS logo](assets/img/dns/nextdns.svg){ align=right } -**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use. +**NextDNS** is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. + +They offer a fully functional free plan for limited use. [:octicons-home-16: Homepage](https://nextdns.io){ .md-button .md-button--primary } [:octicons-eye-16:](https://nextdns.io/privacy){ .card-link title="Privacy Policy" } diff --git a/i18n/zh/document-collaboration.md b/i18n/zh/document-collaboration.md index 94ad1099..7f12072d 100644 --- a/i18n/zh/document-collaboration.md +++ b/i18n/zh/document-collaboration.md @@ -1,5 +1,5 @@ --- -title: Document Collaboration +title: "Document Collaboration" icon: material/account-group description: Most online office suites do not support E2EE, meaning the cloud provider has access to everything you do. cover: document-collaboration.webp diff --git a/i18n/zh/email-aliasing.md b/i18n/zh/email-aliasing.md index 220bce59..50092afa 100644 --- a/i18n/zh/email-aliasing.md +++ b/i18n/zh/email-aliasing.md @@ -1,5 +1,5 @@ --- -title: Email Aliasing +title: "Email Aliasing" icon: material/email-lock description: An email aliasing service allows you to easily generate a new email address for every website you register for. cover: email-aliasing.webp diff --git a/i18n/zh/language-tools.md b/i18n/zh/language-tools.md index bd13e674..2fba8151 100644 --- a/i18n/zh/language-tools.md +++ b/i18n/zh/language-tools.md @@ -1,5 +1,5 @@ --- -title: Language Tools +title: "Language Tools" icon: material/alphabetical-variant description: These language tools do not send your input text to a server and can be used offline and self-hosted. cover: language-tools.webp diff --git a/i18n/zh/mobile-phones.md b/i18n/zh/mobile-phones.md index 2d83a75f..1eb04e23 100644 --- a/i18n/zh/mobile-phones.md +++ b/i18n/zh/mobile-phones.md @@ -1,5 +1,5 @@ --- -title: Mobile Phones +title: "Mobile Phones" icon: material/cellphone-check description: These mobile devices provide the best hardware security support for custom Android operating systems. cover: android.webp @@ -7,7 +7,7 @@ schema: - "@context": http://schema.org "@type": WebPage name: Mobile Phone Recommendations - url: ./ + url: "./" - "@context": http://schema.org "@type": Product name: Pixel diff --git a/i18n/zh/office-suites.md b/i18n/zh/office-suites.md index 1c746ac7..e338875e 100644 --- a/i18n/zh/office-suites.md +++ b/i18n/zh/office-suites.md @@ -1,5 +1,5 @@ --- -title: Office Suites +title: "Office Suites" icon: material/file-edit-outline description: These office suites offer their full functionality without an account and can be used offline. cover: office-suites.webp @@ -48,9 +48,9 @@ Choose an **office suite** that does not require logging in to an account to acc **OnlyOffice** is a cloud-based free and open-source office suite with extensive functionality, including integration with Nextcloud. [:octicons-home-16: Homepage](https://onlyoffice.com){ .md-button .md-button--primary } -:octicons-eye-16:{ .card-link title="Privacy Policy" } -:octicons-info-16:{ .card-link title=Documentation} -:octicons-code-16:{ .card-link title="Source Code" } +[:octicons-eye-16:](https://help.onlyoffice.com/products/files/doceditor.aspx?fileid=5048502&doc=SXhWMEVzSEYxNlVVaXJJeUVtS0kyYk14YWdXTEFUQmRWL250NllHNUFGbz0_IjUwNDg1MDIi0){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://helpcenter.onlyoffice.com/userguides.aspx){ .card-link title=Documentation} +[:octicons-code-16:](https://github.com/ONLYOFFICE){ .card-link title="Source Code" }
Downloads diff --git a/i18n/zh/os/windows/group-policies.md b/i18n/zh/os/windows/group-policies.md index 6e221658..9032d760 100644 --- a/i18n/zh/os/windows/group-policies.md +++ b/i18n/zh/os/windows/group-policies.md @@ -20,8 +20,8 @@ To change any group policy, double click it and select Enabled or Disabled at th #### Device Guard - Turn On Virtualization Based Security: **Enabled** - - Platform Security Level: **Secure Boot and DMA Protection** - - Secure Launch Configuration: **Enabled** + - Platform Security Level: **Secure Boot and DMA Protection** + - Secure Launch Configuration: **Enabled** #### Internet Communication Management @@ -52,14 +52,14 @@ AutoRun and AutoPlay are features which allow Windows to run a script or perform - Turn off AutoPlay: **Enabled** - Disallow Autoplay for nonvolume devices: **Enabled** - Set the default behavior for AutoRun: **Enabled** - - Default AutoRun Behavior: **Do not execute any AutoRun commands** + - Default AutoRun Behavior: **Do not execute any AutoRun commands** #### BitLocker Drive Encryption You may wish to re-encrypt your operating system drive after changing these settings. - Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7): **Enabled** - - Select the encryption method: **AES-256** + - Select the encryption method: **AES-256** Setting the cipher strength for the Windows 7 policy still applies that strength to newer versions of Windows. @@ -85,12 +85,12 @@ Despite the names of these policies, this doesn't _require_ you to do anything b #### Data Collection and Preview Builds - Allow Diagnostic Data: **Enabled** - - Options: **Send required diagnostic data** (Pro Edition); or - - Options: **Diagnostic data off** (Enterprise or Education Edition) + - Options: **Send required diagnostic data** (Pro Edition); or + - Options: **Diagnostic data off** (Enterprise or Education Edition) - Limit Diagnostic Log Collection: **Enabled** - Limit Dump Collection: **Enabled** - Limit optional diagnostic data for Desktop Analytics: **Enabled** - - Options: **Disable Desktop Analytics collection** + - Options: **Disable Desktop Analytics collection** - Do not show feedback notifications: **Enabled** #### File Explorer @@ -118,7 +118,7 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Allow Cortana: **Disabled** - Don't search the web or display web results in Search: **Enabled** - Set what information is shared in Search: **Enabled** - - Type of information: **Anonymous info** + - Type of information: **Anonymous info** #### Sync your settings @@ -132,4 +132,4 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Do not send additional data: **Enabled** - Consent > Configure Default consent: **Enabled** - - Consent level: **Always ask before sending data** + - Consent level: **Always ask before sending data** diff --git a/i18n/zh/passwords.md b/i18n/zh/passwords.md index 0d33514c..4fc92368 100644 --- a/i18n/zh/passwords.md +++ b/i18n/zh/passwords.md @@ -1,6 +1,6 @@ --- meta_title: "The Best Password Managers to Protect Your Privacy and Security - Privacy Guides" -title: "生产力工具" +title: 生产力工具 icon: material/form-textbox-password description: Password managers allow you to securely store and manage passwords and other credentials. cover: passwords.webp @@ -177,16 +177,10 @@ These password managers sync your passwords to a cloud server for easy accessibi Bitwarden uses [PBKDF2](https://bitwarden.com/help/kdf-algorithms/#pbkdf2) as its key derivation function (KDF) algorithm by default. It also offers [Argon2](https://bitwarden.com/help/kdf-algorithms/#argon2id), which is more secure, as an alternative. You can change your account's KDF algorithm in the web vault: -- [x] Select **Settings > Security > Keys > KDF algorithm > Argon2id** +- [x] Select **Settings → Security → Keys → KDF algorithm → Argon2id** Bitwarden's server-side code is [open source](https://github.com/bitwarden/server), so if you don't want to use the Bitwarden cloud, you can easily host your own Bitwarden sync server. -**Vaultwarden** is an alternative implementation of Bitwarden's sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy official service might not be ideal. If you are looking to self-host Bitwarden on your own server, you almost certainly want to use Vaultwarden over Bitwarden's official server code. - -[:octicons-repo-16: Vaultwarden Repository](https://github.com/dani-garcia/vaultwarden ""){.md-button} [:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } -[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } -[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } - ### Proton Pass
diff --git a/i18n/zh/pastebins.md b/i18n/zh/pastebins.md index fd9f64b9..a53230ec 100644 --- a/i18n/zh/pastebins.md +++ b/i18n/zh/pastebins.md @@ -1,5 +1,5 @@ --- -title: Pastebins +title: "Pastebins" icon: material/content-paste description: These tools allow you to have full control of any pasted data you share to other parties. cover: pastebins.webp diff --git a/i18n/zh/privacy.md b/i18n/zh/privacy.md index 2a06d68b..2afb4a8b 100644 --- a/i18n/zh/privacy.md +++ b/i18n/zh/privacy.md @@ -1,11 +1,11 @@ --- -title: Privacy Policy +title: "Privacy Policy" description: We do not sell or share your data with any third-parties. --- ## What is Privacy Guides? -Privacy Guides is a community project operated by a number of active contributors. The public list of team members can be found on our forum. Privacy Guides is legally administered by MAGIC Grants, a 501(c)(3) public charity acting as our fiscal host. +Privacy Guides is a community project operated by a number of active contributors. The public list of team members [can be found on our forum](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all). Privacy Guides is legally administered by [MAGIC Grants](https://magicgrants.org), a 501(c)(3) public charity acting as our fiscal host. As a project, we make available to the public: @@ -230,7 +230,7 @@ Currently: - Privacy Guides [processes personal data on servers outside the European Union](#where-does-privacy-guides-store-data-about-me). - Privacy Guides uses [subprocessors](#subprocessors-used-by-privacy-guides) with personnel and computers outside the European Union. -- Privacy Guides has personnel in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. +- Privacy Guides has [personnel](https://discuss.privacyguides.net/u?group=team&order=solutions&period=all) in the United States, Australia, and other non-EU countries without EU adequacy decisions under GDPR. These people need access to forum personal data in order to keep forums running, address security concerns, respond to privacy-related requests from users, field technical support requests, and otherwise assist users. - Privacy Guides is very likely subject to section 702 of the Foreign Intelligence Surveillance Act in the United States, a law that the European Court of Justice has found inadequately protects the rights and freedoms of data subjects. - Privacy Guides has never received any order or request for personal data under FISA 702 or any similar national security or surveillance law of any other country. Privacy Guides is not subject to any court order or legal obligation that would prevent it from disclosing the existence or non-existence of such an order or request. - Privacy Guides has a policy for how we will respond to those orders and requests, in case we ever receive one. Privacy Guides will suspend processing, notify any affected user, minimize disclosure, and resist disclosure of personal data, all as the law allows. diff --git a/i18n/zh/self-hosting/dns-filtering.md b/i18n/zh/self-hosting/dns-filtering.md new file mode 100644 index 00000000..31a5f989 --- /dev/null +++ b/i18n/zh/self-hosting/dns-filtering.md @@ -0,0 +1,49 @@ +--- +title: DNS Filtering +meta_title: "Self-Hosting DNS Solutions - Privacy Guides" +icon: material/dns +description: For our more technical readers, self-hosting a DNS solution can provide filtering for devices not covered by cloud-based DNS solutions. +cover: dns.webp +--- + +Protects against the following threat(s): + +- [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } +- [:material-account-cash: Surveillance Capitalism](../basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } + +**Self-hosting DNS** is useful for providing [DNS filtering](https://cloudflare.com/learning/access-management/what-is-dns-filtering) on controlled platforms, such as smart TVs and other IoT devices, as no client-side software is needed. Keep in mind that the DNS solutions below are typically restricted to your home or local network unless you set up a more advanced configuration. + +## DNS Sinkholes + +[**DNS sinkholes**](https://en.wikipedia.org/wiki/DNS_sinkhole) use DNS filtering to block unwanted web content such as advertisements. + +### Pi-Hole + +
+ +![Pi-hole logo](../assets/img/self-hosting/pi-hole.svg){ align=right } + +**Pi-hole** is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole被设计为在Raspberry Pi上托管，但它并不局限于这种硬件。 + +[:octicons-home-16: Homepage](https://pi-hole.net){ .md-button .md-button--primary } +[:octicons-eye-16:](https://pi-hole.net/privacy){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://docs.pi-hole.net){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/pi-hole/pi-hole){ .card-link title="Source Code" } +[:octicons-heart-16:](https://pi-hole.net/donate){ .card-link title="Contribute" } + +
+ +### AdGuard Home + +
+ +![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ align=right } + +**AdGuard Home** is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content. + +[:octicons-home-16: Homepage](https://adguard.com/adguard-home/overview.html){ .md-button .md-button--primary } +[:octicons-eye-16:](https://adguard.com/privacy/home.html){ .card-link title="Privacy Policy" } +[:octicons-info-16:](https://github.com/AdguardTeam/AdGuardHome/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/AdguardTeam/AdGuardHome){ .card-link title="Source Code" } + +
diff --git a/i18n/zh/self-hosting/email-servers.md b/i18n/zh/self-hosting/email-servers.md index 60c99e07..957bee7a 100644 --- a/i18n/zh/self-hosting/email-servers.md +++ b/i18n/zh/self-hosting/email-servers.md @@ -1,6 +1,6 @@ --- title: Email Servers -meta_title: Self-Hosted Email - Privacy Guides +meta_title: "Self-Hosting Email - Privacy Guides" icon: material/email description: For our more technical readers, self-hosting your own email can provide additional privacy assurances by having maximum control over your data. cover: email.webp @@ -10,7 +10,7 @@ cover: email.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: +Advanced system administrators may consider setting up their own **email server**. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable. In addition to the "all-in-one" solutions below, we've picked out a few articles that cover a more manual approach: - [Setting up a mail server with OpenSMTPD, Dovecot and Rspamd](https://poolp.org/posts/2019-09-14/setting-up-a-mail-server-with-opensmtpd-dovecot-and-rspamd) (2019) - [How To Run Your Own Mail Server](https://www.c0ffee.net/blog/mail-server-guide) (August 2017) diff --git a/i18n/zh/self-hosting/index.md b/i18n/zh/self-hosting/index.md index 25260650..6ea1c081 100644 --- a/i18n/zh/self-hosting/index.md +++ b/i18n/zh/self-hosting/index.md @@ -1,7 +1,7 @@ --- title: Self-Hosting -meta_title: Self-Hosted Software and Services - Privacy Guides -description: For our more technical readers, self-hosted software and services can provide additional privacy assurances since you have maximum control over your data. +meta_title: "Self-Hosting Software and Services - Privacy Guides" +description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data. cover: router.webp --- @@ -9,7 +9,7 @@ cover: router.webp - [:material-server-network: Service Providers](../basics/common-threats.md#privacy-from-service-providers){ .pg-teal } -Using **self-hosted software and services** can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. +**Self-hosting** software and services can be a way to achieve a higher level of privacy through digital sovereignty, particularly independence from cloud servers controlled by product developers or vendors. By self-hosting, we mean hosting applications and data on your own hardware. Self-hosting your own solutions requires advanced technical knowledge and a deep understanding of the associated risks. By becoming the host for yourself and possibly others, you take on responsibilities you might not otherwise have. Self-hosting privacy software improperly can leave you worse off than using e.g. an end-to-end encrypted service provider, so it is best avoided if you are not already comfortable doing so. @@ -25,6 +25,35 @@ Self-hosting your own solutions requires advanced technical knowledge and a deep [Learn more :material-arrow-right-drop-circle:](email-servers.md) +## :material-dns: DNS Filtering + +
+ +- ![AdGuard Home logo](../assets/img/self-hosting/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns-filtering.md#adguard-home) +- ![Pi-Hole logo](../assets/img/self-hosting/pi-hole.svg){ .twemoji loading=lazy } [Pi-Hole](dns-filtering.md#pi-hole) + +
+ +[Learn more :material-arrow-right-drop-circle:](dns-filtering.md) + +## :material-form-textbox-password: Password Management + +### Vaultwarden + +
+ +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden.svg#only-light){ align=right } +![Vaultwarden logo](../assets/img/self-hosting/vaultwarden-dark.svg#only-dark){ align=right } + +**Vaultwarden** is an alternative implementation of [Bitwarden](../passwords.md#bitwarden)'s sync server written in Rust and compatible with official Bitwarden clients, perfect for self-hosted deployment where running the resource-heavy, [official service](https://github.com/bitwarden/server) might not be ideal. + +[:octicons-repo-16: Repository](https://github.com/dani-garcia/vaultwarden#readme){ .md-button .md-button--primary } +[:octicons-info-16:](https://github.com/dani-garcia/vaultwarden/wiki){ .card-link title="Documentation" } +[:octicons-code-16:](https://github.com/dani-garcia/vaultwarden){ .card-link title="Source Code" } +[:octicons-heart-16:](https://github.com/sponsors/dani-garcia){ .card-link title="Contribute" } + +
+ ## :material-account-supervisor-circle-outline: Social Networks Self-hosting your own instance of a social network software can help circumvent potential [censorship on a server level](../social-networks.md#censorship-resistance) by a public server's administrator or admin team. @@ -68,32 +97,32 @@ Self-hosting your own instance of a web-based frontend can help you circumvent r - ![Redlib logo](../assets/img/frontends/redlib.svg){ .lg .middle .twemoji } [**Redlib (Reddit)**](../frontends.md#redlib) - --- + --- - [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/redlib-org/redlib#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/redlib-org/redlib){ .card-link title="Source Code" } - ![ProxiTok logo](../assets/img/frontends/proxitok.svg){ .lg .middle .twemoji } [**ProxiTok (TikTok)**](../frontends.md#proxitok) - --- + --- - [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } + [:octicons-info-16:](https://github.com/pablouser1/ProxiTok/wiki/Self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/pablouser1/ProxiTok){ .card-link title="Source Code" } - ![Invidious logo](../assets/img/frontends/invidious.svg#only-light){ .twemoji }![Invidious logo](../assets/img/frontends/invidious-dark.svg#only-dark){ .twemoji } [**Invidious (YouTube)**](../frontends.md#invidious) - --- + --- - [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } + [:octicons-home-16:](https://invidious.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.invidious.io/installation){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/iv-org/invidious){ .card-link title="Source Code" } - ![Piped logo](../assets/img/frontends/piped.svg){ .twemoji } [**Piped (YouTube)**](../frontends.md#piped) - --- + --- - [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" } + [:octicons-info-16:](https://docs.piped.video/docs/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/TeamPiped/Piped){ .card-link title="Source Code" }
@@ -105,66 +134,66 @@ Tool recommendations in other categories of the website also provide a self-host - ![Addy.io logo](../assets/img/email-aliasing/addy.svg){ .twemoji } [**Addy.io**](../email-aliasing.md#addyio) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://addy.io/self-hosting){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/anonaddy){ .card-link title="Source Code" } - ![SimpleLogin logo](../assets/img/email-aliasing/simplelogin.svg){ .twemoji } [**SimpleLogin**](../email-aliasing.md#simplelogin) - --- + --- - [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } + [:octicons-home-16:](https://addy.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" } - ![CryptPad logo](../assets/img/document-collaboration/cryptpad.svg){ .twemoji } [**CryptPad**](../document-collaboration.md#cryptpad) - --- + --- - [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } - [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } + [:octicons-home-16:](https://cryptpad.fr){ .card-link title="Homepage" } + [:octicons-info-16:](https://docs.cryptpad.org/en/admin_guide/index.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/xwiki-labs/cryptpad){ .card-link title="Source Code" } - ![Miniflux logo](../assets/img/news-aggregators/miniflux.svg#only-light){ .twemoji }![Miniflux logo](../assets/img/news-aggregators/miniflux-dark.svg#only-dark){ .twemoji } [**Miniflux**](../news-aggregators.md#miniflux) - --- + --- - [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } - [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } + [:octicons-home-16:](https://miniflux.app){ .card-link title="Homepage" } + [:octicons-info-16:](https://miniflux.app/docs/index.html#administration-guide){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/miniflux/v2){ .card-link title="Source Code" } - ![Standard Notes logo](../assets/img/notebooks/standard-notes.svg){ .twemoji } [**Standard Notes**](../notebooks.md#standard-notes) - --- + --- - [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } - [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } + [:octicons-home-16:](https://standardnotes.com){ .card-link title="Homepage" } + [:octicons-info-16:](https://standardnotes.com/help/47/can-i-self-host-standard-notes){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/standardnotes){ .card-link title="Source Code" } - ![PrivateBin logo](../assets/img/pastebins/privatebin.svg){ .twemoji } [**PrivateBin**](../pastebins.md#privatebin) - --- + --- - [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } + [:octicons-home-16:](https://privatebin.info){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/PrivateBin/PrivateBin/blob/master/doc/Installation.md){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/PrivateBin/PrivateBin){ .card-link title="Source Code" } - ![Paaster logo](../assets/img/pastebins/paaster.svg){ .twemoji } [**Paaster**](../pastebins.md#paaster) - --- + --- - [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } - [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } + [:octicons-home-16:](https://paaster.io){ .card-link title="Homepage" } + [:octicons-info-16:](https://github.com/WardPearce/paaster#deployment){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/WardPearce/paaster){ .card-link title="Source Code" } - ![SimpleX Chat logo](../assets/img/messengers/simplex.svg){ .twemoji } [**SimpleX Chat**](../real-time-communication.md#simplex-chat) - --- + --- - [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } - [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } - [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } + [:octicons-home-16:](https://simplex.chat){ .card-link title="Homepage" } + [:octicons-info-16:](https://simplex.chat/docs/server.html){ .card-link title="Admin Documentation" } + [:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" } diff --git a/i18n/zh/social-networks.md b/i18n/zh/social-networks.md index 09ddef83..9bd4b6b8 100644 --- a/i18n/zh/social-networks.md +++ b/i18n/zh/social-networks.md @@ -36,9 +36,9 @@ If you are greatly concerned about an existing server censoring your content, th 2. **Use a managed hosting service.** We don't have any specific recommendations, but there are a variety of hosting services which will create a brand-new server on your own domain (or occasionally a subdomain of their domain, but we recommend against this unless registering your own domain presents too much of a burden to your privacy). - Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. + Typically, hosting providers will handle the _technical_ side of your server, but completely leave the _moderation_ side up to you. This often represents a better approach than self-hosting for most people because you can benefit from greater control over your own server without worrying about technical problems or unpatched security vulnerabilities. - You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. + You should look closely at your hosting provider's terms of service and acceptable use policies before registering. These are often far more broad than typical hosted server rules, and they are far less likely to be enforced without recourse, but they can still be restrictive in undesirable ways. ## Mastodon @@ -77,7 +77,7 @@ There are a number of privacy controls under the **privacy and reach** tab here. - [ ] **Automatically accept new followers**: You should consider unchecking this box to have a private profile. This will allow you to review who can follow your account before accepting them. - In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. + In contrast to most social media platforms, if you have a private profile you still have the _option_ to publish posts which are publicly visible to non-followers and can still be boosted by non-followers. Therefore, unchecking this box is the only way to have the _choice_ to publish to either the entire world or a select group of people. - [ ] **Show follows and followers on profile**: You should uncheck this box to hide your social graph from the public. It is fairly uncommon for the list of people you follow to have some genuine benefit to others, but that information can present a risk to you. diff --git a/i18n/zh/tools.md b/i18n/zh/tools.md index 3c50ed8c..d9b23fb9 100644 --- a/i18n/zh/tools.md +++ b/i18n/zh/tools.md @@ -299,17 +299,6 @@ We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers b [了解更多 :hero-arrow-circle-right-fill:](dns.md#encrypted-dns-proxies) -#### Self-hosted Solutions - -
- -- ![AdGuard Home logo](assets/img/dns/adguard-home.svg){ .twemoji loading=lazy } [AdGuard Home](dns.md#adguard-home) -- ![Pi-hole logo](assets/img/dns/pi-hole.svg){ .twemoji loading=lazy } [Pi-hole](dns.md#pi-hole) - -
- -[了解更多 :hero-arrow-circle-right-fill:](dns.md#self-hosted-dns-filtering) - ### Financial Services #### Payment Masking Services