pub.solar/_data/services.yml

services:
  - name: Nextcloud
    id: nextcloud
    description:
      en: Store your files, calendar, contacts and many other things in the local cloud. Access from all your devices. 
      de:
    link: https://cloud.pub.solar
    wiki: https://wiki.pub.solar/index.php/Nextcloud
    support:
      status: yes # yes partial no
    backups:
      status: untested # fully-automated untested not-applicable no
    anonymousUsage:
      status: no # yes partial no
    zeroKnowledge: # yes partial no
      status: no
      comment:
        en: |
          By default, no data in Nextcloud is encrypted and everything is readable and changeable by pub.solar administrators.

          However, we have installed the [End-to-End Encryption app](https://apps.nextcloud.com/apps/end_to_end_encryption) which gives you the option to encrypt files before they are sent to the pub.solar cloud.

          This application has horrible reviews, with lots of people saying they suffered dataloss. Though we offer this option, **there will be no support or help** if you use this app and lose data.          
        de:
    storageEncrypted: # yes no
      status: yes
    loggingMinimized: # yes partial no
      status: no 
    decentralized: # yes partial no
      status: yes

  - name: Mastodon
    id: mastodon
    description:
      en: Social networking and microblogging.
      de:
    link: https://mastodon.pub.solar
    support:
      status: yes # yes partial no
    backups:
      status: untested # fully-automated untested not-applicable no
    anonymousUsage:
      status: partial # yes partial no
      comment:
        en: You can use our web interface to read posts, but if you want to post stuff yourself you'll need a pub.solar ID.
        de:
    zeroKnowledge: # yes partial no
      status: no
    storageEncrypted: # yes no
      status: yes
    loggingMinimized: # yes partial no
      status: no 
    decentralized: # yes partial no
      status: yes

  - name: Matrix
    id: matrix
    description:
      en: Matrix is an encrypted chat service. It can be used as an alternative to tools like Discord, Slack, or IRC. In fact, Matrix can bridge into these other chat tools, allowing you to chat with everyone from one place.
      de:
    link: https://chat.pub.solar
    support:
      status: yes # yes partial no
    backups:
      status: untested # fully-automated untested not-applicable no
    anonymousUsage:
      status: no # yes partial no
    zeroKnowledge: # yes partial no
      status: partial
      comment:
        en: |
          By default pub.solar admins cannot read the content of your messages, but there is data that is accessible:

          * Who you're talking to
          * When you're talking to them
          * When you are online or offline

          Also, some larger public rooms are unencrypted, and you have the option to turn off encryption on rooms you control.          
        de: 
    storageEncrypted: # yes no
      status: yes
    loggingMinimized: # yes partial no
      status: no 
    decentralized: # yes partial no
      status: yes

  - name: Forgejo / git
    id: forgejo
    description:
      en: git server
      de:
    link: https://git.pub.solar
    support:
      status: yes # yes partial no
    backups:
      status: untested # fully-automated untested nnot-applicable no
    anonymousUsage:
      status: no # yes partial no
    zeroKnowledge: # yes partial no
      status: no
    storageEncrypted: # yes no
      status: yes
    loggingMinimized: # yes partial no
      status: no 
    decentralized: # yes partial no
      status: no

  - name: Wiki
    id: wiki
    description:
      en: Our wiki
      de:
    link: https://wiki.pub.solar
    support:
      status: partial # yes partial no
    backups:
      status: untested # fully-automated untested not-applicable no
      comment:
        en: The database is backed up, but not assets like images.
        de:
    anonymousUsage:
      status: partial # yes partial no
    zeroKnowledge: # yes partial no
      status: no
    storageEncrypted: # yes no
      status: yes
    loggingMinimized: # yes partial no
      status: no 
    decentralized: # yes partial no
      status: no

  - name: Mailman
    id: mailman
    description:
      en: Mailing lists
      de:
    link: https://list.pub.solar
    support:
      status: partial # yes partial no
    backups:
      status: untested # fully-automated untested not-applicable no
    anonymousUsage:
      status: no # yes partial no
    zeroKnowledge: # yes partial no
      status: no
    storageEncrypted: # yes no
      status: yes
    loggingMinimized: # yes partial no
      status: no 
    decentralized: # yes partial no
      status: no

  - name: Open Bike Sensor portal
    id: obs-portal
    description:
      en: Portal for the open bike sensor project. This portal currently only hosts the cologne/bonn region.
      de:
    link: https://obs-portal.pub.solar
    support:
      status: partial # yes partial no
    backups:
      status: untested # fully-automated untested not-applicable no
    anonymousUsage:
      status: no # yes partial no
    zeroKnowledge: # yes partial no
      status: no
    storageEncrypted: # yes no
      status: yes
    loggingMinimized: # yes partial no
      status: no 
    decentralized: # yes partial no
      status: no

  - name: Searx
    id: searx
    description:
      en: Metasearch engine
      de:
    link: https://search.pub.solar
    support:
      status: no # yes partial no
    backups:
      status: not-applicable # fully-automated untested not-applicable no
    anonymousUsage:
      status: yes # yes partial no
    zeroKnowledge: # yes partial no
      status: yes
    storageEncrypted: # yes no
      status: yes
    loggingMinimized: # yes partial no
      status: no 
    decentralized: # yes partial no
      status: not-applicable

strings:
  states:
    yes:
      en: Yes
      de: Ja
    partial:
      en: Partial
      de: Teilweise
    no:
      en: No
      de: Nein
    not-applicable:
      en: Not applicable
      de: Nicht zutreffend
    fully-automated:
      en: Fully automated
      de: Komplett automatisiert
    untested:
      en: Yes, untested
      de: Ja, nicht getestet
  support:
    name:
      en: Support
      de: Unterstützung
    description: 
      en: This badge describes how much love and support this service gets from the pub.solar community. Services with a higher level of support are less likely to suffer from outages or dataloss.
      de:
    states:
      yes: 
        en: We consider this service to be part of our core. It is among our highest priority services to keep online, up-to-date, and backed-up. This service will not be shut down without at least 3 months of prior notice.
        de: 
      partial:
        en: We've been running this service for a while, and it's probably going to be around to stay. However, it is not our highest priority. We could shut this service down with only a couple of days of prior notice.
        de: 
      no:
        en: This service is running because someone thought it was fun to try out, as a test, or is very new. Expect changes, downtime, or even shutdown to happen at any time.
        de:
  backups:
    name:
      en: Backups
      de: Backups
    description:
      en: This badge shows whether the data in the service is automatically backed up every day.
      de: 
    states:
      yes:
        en: Daily encrypted backups are made automatially and are tested so we can also automatically restore the service from a previous backup.
        de:
      untested:
        en: We run daily encrypted backups to an offsite location, but we do not have automated tests to see if recovery works. In a catastrophic event, recovery might take a long time.
        de:
      not-applicable:
        en: This service does not store any data to be backed up.
        de:
      no:
        en: Data from this service is not backed up. Expect dataloss any time.
        de:
  anonymousUsage:
    name:
      en: Anonymous usage
      de: Anonyme Benutzung
    description:
      en: This badge shows whether you can use the service without registering a pub.solar ID.
      de:
    states:
      yes:
        en: You can use all features of this service without logging in to a pub.solar ID.
        de:
      partial:
        en: Some features of this service require you to log in to a pub.solar ID.
        de:
      no:
        en: You have to log in to a pub.solar ID to use this service.
        de:
  zeroKnowledge:
    name:
      en: Zero knowledge
      de: Zero knowledge
    description:
      en: This badge tells you how much access the pub.solar administrators have to your data in that service.
      de:
    states:
      yes:
        en: pub.solar administrators have no access to your data in this service.
        de:
      partial:
        en: Some of the data of this service is unreadable to pub.solar administrators, but not all.
        de:
      no:
        en: All your data in this service is readable by pub.solar administrators.
        de:
  storageEncrypted:
    name:
      en: Storage encrypted
      de: Verschlüsselter Speicher
    description:
      en: |
        This badge tells you whether the service data is stored on encrypted drives. This protects against unwanted physical access to the servers, since only the pub.solar administrators can unlock the hard drive encryption.

        ***Caveat***: Man-in-the-middle attacks that intercept the password in-transit when pub.solar administrators remotely unlock the disk can circumvent this. Do not rely on storage encryption to keep your data safe from highly-capable attackers like nation-states. Focus on the zero-knowledge badge if this is your threat-model.        
      de:
    states:
      yes:
        en: This service runs on a server with encrypted hard drives. 
        de:
      no:
        en: This service **does not** run on a server with encrypted hard drives. 
        de:
  loggingMinimized:
    name:
      en: Logging minimized
      de: Minimiertes Logging
    description:
      en: This badge tells you whether we've configured the service and any related software so it logs as little data as possible.
      de:
    states:
      yes:
        en: No logs are written at all.
        de:
      partial:
        en: We've reduced the amount of logging, but there is still some amount of activity logging going on.
        de:
      no:
        en: This service runs in its default logging configuration.
        de:
  decentralized:
    name:
      en: Decentralized
      de: Dezentralisiert
    description:
      en: |
        This badge shows whether this service can interact with services of similar types hosted by other people or organizations.

        For example, you can send an email from your own provider to someone who has their address with some other provider. With facebook messages you cannot do this; all facebook messages have to go to other facebook users.        
      de:
    states:
      yes:
        en: All relevant communication features of this service can interact with other instances of similar services.
        de:
      partial:
        en: Some features of this service can interact with other instances.
        de:
      not-applicable:
        en: This service has no features that could be decentralized.
        de:
      no:
        en: This service is centralized.
        de: