> I am always worried about someone deciding to DDoS me though. I've hosted a Tor exit node and other questionable stuff as a teenager, going from 1mbps upload

> I am always worried about someone deciding to DDoS me though. I've hosted a Tor exit node and other questionable stuff as a teenager, going from 1mbps upload to 50 mbps today. The site has been on the HN homepage, sometimes get featured on news sites like zdnet (that article gave me clicks for years on end), plus I run a file sharing service where anyone can post literally anything but the links are valid for one day. It has definitely hosted links to phishing and malware in the past (and I combat that when I see it, like replacing the short link with an info page "this was a phishing page" + infos). In ~15 years, I never noticed anyone trying to take down the site. But your sentiment keeps being echoed in places like r/selfhosted and moves people to put their services behind some traffic inspection service, reducing the decentralized to a few places where all traffic passes through (often with decryption keys made available to them). It's still good to self host even if you do that, but I do feel a bit conflicted about that and wouldn't do it myself.