Hacker News Reader

Self-hosted Mattermost and Gitlab can be done reliably at very low cost, had better uptime than their cloud services for us and would've likely prevented leaks like these. At least you can add some layers of security for self-hosted services so that stolen tokens aren't enough to steal code or messages.

View on HN

Do you have write up or guide somewhere on how to specifically set this up, configure and add security?

We run it in our VPN with SSO for authentication. You'd need a company device, user credentials and a location that's whitelisted to access.

For smaller companies something like Cloudflare Teams and/or Tailscale would probably also add a good layer of extra security. I guess it's important to have some device whitelisting in addition to credentails, so that stolen credentials alone are not enough to access code or chat.

Reply on news.ycombinator.com