3 ms·

FWIW you can trivially self-host Ghost these days with an official one-click droplet on DigitalOcean. https://www.digitalocean.com/products/one-click-apps/ghos

FWIW you can trivially self-host Ghost these days with an official one-click droplet on DigitalOcean. https://www.digitalocean.com/products/one-click-apps/ghost/ https://www.digitalocean.com/products/one-click-apps/ghost/ https://www.digitalocean.com/docs/one-clicks/ghost/ https://www.digitalocean.com/docs/one-clicks/ghost/

shiftpgdn 8y ago
There are a million security implications involved with this. I don't recommend it unless you're going to stay on top of keeping your system up to date.
- tedmiston 8y ago
  The security implications are no different than those for hosting any other web application which most developers are already comfortable doing.
npunt 8y ago
Perhaps if you're doing this type of work frequently, but if you're just a regular person who wants a blog it's not trivial nor advisable. Configuring your DO instance can be a pain and you have to manually keep Ghost up to date by SSHing in. Definitely not set and forget.
- tedmiston 8y ago
  The author's post seemed to target a developer blogger audience as opposed to regular people. With this particular image, there's virtually no DO configuration (just standard size / region settings which have smart defaults IIRC). You do have to SSH in, but the new Ghost 2.0 CLI handles updating Ghost much more smoothly than in the past. I've been happy with it personally.
  - npunt 8y ago
    The DO one-click is super easy, but the SSL config and adding Cloudflare wound up being a huge pain. DO's docs aren't great and that meant I spent hours in config land just trying to get tablestakes blog features of HTTPS and DDoS protection. Ghost 2.0 is definitely better than prior versions but still needs babysitting. As an infrequent blogger, I've found I am updating Ghost more frequently than I'm blogging. Github pages or Gatsby (via something like Netlify) are much better suited to this problem because server config & SSL are handled and they're just serving static pages.
    - tedmiston 8y ago
      I used Cloudflare with Ghost pre-2.0 but switched to Let's Encrypt for 2.0 [1]. I found this easier than using Cloudflare with 2.0 which handles auto renewing the cert as well. [1]: https://docs.ghost.org/integrations/lets-encrypt/ https://docs.ghost.org/integrations/lets-encrypt/

shiftpgdn 8y ago

There are a million security implications involved with this. I don't recommend it unless you're going to stay on top of keeping your system up to date.

tedmiston 8y ago
The security implications are no different than those for hosting any other web application which most developers are already comfortable doing.

npunt 8y ago

Perhaps if you're doing this type of work frequently, but if you're just a regular person who wants a blog it's not trivial nor advisable. Configuring your DO instance can be a pain and you have to manually keep Ghost up to date by SSHing in. Definitely not set and forget.

tedmiston 8y ago
The author's post seemed to target a developer blogger audience as opposed to regular people. With this particular image, there's virtually no DO configuration (just standard size / region settings which have smart defaults IIRC). You do have to SSH in, but the new Ghost 2.0 CLI handles updating Ghost much more smoothly than in the past. I've been happy with it personally.
- npunt 8y ago
  The DO one-click is super easy, but the SSL config and adding Cloudflare wound up being a huge pain. DO's docs aren't great and that meant I spent hours in config land just trying to get tablestakes blog features of HTTPS and DDoS protection. Ghost 2.0 is definitely better than prior versions but still needs babysitting. As an infrequent blogger, I've found I am updating Ghost more frequently than I'm blogging. Github pages or Gatsby (via something like Netlify) are much better suited to this problem because server config & SSL are handled and they're just serving static pages.
  - tedmiston 8y ago
    I used Cloudflare with Ghost pre-2.0 but switched to Let's Encrypt for 2.0 [1]. I found this easier than using Cloudflare with 2.0 which handles auto renewing the cert as well. [1]: https://docs.ghost.org/integrations/lets-encrypt/ https://docs.ghost.org/integrations/lets-encrypt/