pinpox/infra
1
0
Fork 0
forked from pub-solar/infra
Code Pull requests Activity

Merge pull request 'docs: add privacy hardening docs' (#89) from docs/privacy-hardening into main

Browse source 
Reviewed-on: pub-solar/infra#89
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
This commit is contained in:
b12f 2024-01-07 14:51:18 +00:00
parent 9bde9237d2 9cf04fd710
commit 737f6ec35d
Signed by: pub.solar gitea
GPG key ID: F0332B04B7054873
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
docs/privacy-hardening.md Normal file
View file

@ -0,0 +1,11 @@
# Privacy hardening
Some default options in the services we run are not as privacy friendly as they can be. Oftentimes, services assume they are running for an organization in which everyone knows (or wants to know) everyone else. However, when running a public service accounts should be hidden from other users.
## Nextcloud account leaking
By default, accounts are visible globally across the instance. To prevent this, go into the administration settings -> Sharing. Check the option saying "Restrict users to only share with users in their group".
## Forgejo email leaking
By default, emails are visible on the explore page for other logged in users. We have disabled this in the config by setting `service.DEFAULT_KEEP_EMAIL_PRIVATE` to `true`.