3 ms·
Self-hosted Mattermost and Gitlab can be done reliably at very low cost, had better uptime than their cloud services for us and would've likely prevented leaks
by dx034 4y ago
Self-hosted Mattermost and Gitlab can be done reliably at very low cost, had better uptime than their cloud services for us and would've likely prevented leaks like these. At least you can add some layers of security for self-hosted services so that stolen tokens aren't enough to steal code or messages.
- splittingTimes 4y agoDo you have write up or guide somewhere on how to specifically set this up, configure and add security?
- dx034 4y agoWe run it in our VPN with SSO for authentication. You'd need a company device, user credentials and a location that's whitelisted to access. For smaller companies something like Cloudflare Teams and/or Tailscale would probably also add a good layer of extra security. I guess it's important to have some device whitelisting in addition to credentails, so that stolen credentials alone are not enough to access code or chat.