The cake is a lie.

I have no trust in lies. That's why I'm being transparent about server-side configurations for all of my services.

Here you can find some web security scan reports:

Mozilla Observatory Report Permalink | Qualys SSL Labs Report Permalink

You can check subdomains using same tools if you want to.

For email and Jitsi some compromises had to be made in favor of proper usage experience (like allowing unsafe-inline), please use dedicated email and Jitsi clients when possible.

Let me make some bold claims:

All services I host follow the strict zero-log policy.

All services I host are FOSS.

All logs in /var/log are wiped on an hourly basis, application logs are either set to /dev/null or disabled.

Docker images pulled from their original sources are used for all my services. They are updated on a weekly basis by simple bash scripts to keep them healthy. Health checks are made after each container is up.

SearXNG instance is updated every day to keep the maximum compliance to public SearXNG instance hosting policy.

Unprivileged user handles all the docker containers.

The server uses hardened_malloc, strict AppArmor policies and strong sysctl parameters to make sure nothing easily gets through. Strict firewall policy is also applied.

System updates are handled by unattended-upgrades. Major and kernel updates are done manually.

My services are hosted by 1984 and FlokiNET. Server locations are Iceland and Netherlands (with Icelandic jurisdiction), so Icelandic regulatory laws are likely to be applied.

The Good Usage Policy (GUP) of my services is: Please do not use my services for illegal activities. Try to make the Internet free and safe place.

I won't especially tolerate child abuse, gore, necro, extreme violence and other illegal perverted stuff. Yes, this is personal.

If you break the Good Usage Policy, your account will be permanently banned.

If you discover any violations of GUP, you can leave a report here.

If you have any questions, don't hesitate to ask.

RXZlcnl0aGluZyBpcyBPSy4= | Last updated on: 2025-11-06

SHA256: 482ee519105809c9732d19b42fbe5c58045421c3dde1a82a766bf330787f61bd

This pseudo-canary is updated monthly to indicate all services are operating normally and unaltered.
If it is not updated before 25th of the current month, this may be an indicator of compromise.