this post was submitted on 14 Jul 2024
320 points (98.8% liked)

Selfhosted

40296 readers
212 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

GoDaddy really lived up to its bad reputation and recently changed their API rules. The rules are simple: either you own 10 (or 50) domains, you pay $20/month, or you don't get the API. I personally didn't get any communication, and this broke my DDNS setup. I am clearly not the only one judging from what I found online. A company this big gating an API behind such a steep price... So I will repeat what many people said before me (being right): don't. use. GoDaddy.

top 50 comments
sorted by: hot top controversial new old
[–] timewarp@lemmy.world 66 points 4 months ago (3 children)

This is what NameCheap does too. It's freaking stupid. Domain registrations should not be managed by corporations.

[–] loudwhisper@infosec.pub 36 points 4 months ago (2 children)

NameCheap

WOW! I did not know that. I just checked and after a little search:

We have certain requirements for activation to prevent system abuse. In order to have API enabled, your account should meet one of the following requirements:

- have at least 20 domains under your account;
- have at least $50 on your account balance;
- have at least $50 spent within the last 2 years

$50 in last 2 years is not much, but for those who renew for many years, it is still stupid.

Ironically, Namecheap is what the people in https://github.com/navilg/godaddy-ddns/issues/32 migrated to!

I really wish that domain registration was done in a different way, but even in current scenario, gutting features for such a basic service to extract a few bucks and risking losing customers...?

[–] lemmyvore@feddit.nl 9 points 4 months ago (1 children)

These are ancient holdovers. Nowadays DNS hosting with API is a dime a dozen. You may have to pay for it occasionally but it's not going to be even close to $20/mo.

[–] loudwhisper@infosec.pub 12 points 4 months ago (1 children)

$20/month for a service that anyway is low traffic (especially for hobbyists) is a completely insane price. Even more insane is that their cheapest subscription still doesn't offer any API access. I agree anyway, but are these staying in business just because they have a consolidated market share? Do they have access to more TLDs? I don't know, I am genuinely confused. I have absolutely no reason whatsoever to even think of using GoDaddy again.

[–] lemmyvore@feddit.nl 5 points 4 months ago (1 children)

I like the way Bunny.net does paid DNS, 20M monthly queries for $1 and $0.1/M after that. With an API included, ofc. Now that's the kind of pricing I can get into as a self-hoster, not $20/mo.

GoDaddy advertises a lot, basically. So whenever a person who's never owned a domain before searches for "get a new domain" they're gonna get GoDaddy, NameCheap and (ironically) Google Domains as the top results. That's pretty much all there is to it.

[–] loudwhisper@infosec.pub 2 points 4 months ago

Yep, I like bunny in fact. It didn't have all the features I needed back then, but it's a very good product, I heard very good things.

I also agree about the pricing. I ended up not using desec.io, but if I did, I would have probably set a 1-2 Euros recurring donation, as I feel that's a totally acceptable price.

As for why people use GoDaddy well... I feel personally attacked as that's exactly how I ended up there, when I didn't know better.

[–] catloaf@lemm.ee 6 points 4 months ago (2 children)

That can't be right. I only had two domains (one now) and I've been using the API just fine. And basically any purchase will clear those dollar amounts.

[–] loudwhisper@infosec.pub 8 points 4 months ago

I found it on their FAQ.

Yes, it is generally less restrictive, but... I have 4 domains, and now I have renewed all of them for the maximum amount. They will all expire after 2033. So unless I decide to add more domains (which is unlikely), I won't spend a cent in the next ~9 years. I wonder if they really enforce it as it is written or they consider still the renewal an expense "split" over the duration.

Still, I really don't understand. You can - and should - have proper rate limits on the API. You have API keys that uniquely identify the source, what is "the abuse" they are trying to prevent this way...?

[–] hedgehog@ttrpg.network 4 points 4 months ago (2 children)

Doesn’t their API also require you to allow-list IPs, making it basically useless for dynamic DNS?

From https://www.namecheap.com/support/api/intro/ under “Whitelisting IP.”

[–] loudwhisper@infosec.pub 2 points 4 months ago

That's a very interesting gotcha. They don't seem to support address ranges either. Unless once you add the whitelist the requests still work from any address (their documentation is ambiguous). This is even more confusing.

[–] catloaf@lemm.ee 1 points 4 months ago

Not sure. Personally I only use it for Let's Encrypt DNS challenges.

[–] 5714@lemmy.dbzer0.com 14 points 4 months ago

I'm saying this for years, but a) it's quite late (seems like a 1990s issue) and b) OpenNIC is a bit of a joke atm (but support it anyways)

ICANN never should've been a creature of US-NTIA, but of the UN. The US has no right to decide for the digital world how everyone communiticates. No one really should (apart from about stuff like CSAM).

[–] foggy@lemmy.world 7 points 4 months ago (1 children)

Damn. I always though they were one of the good ones.

[–] can@sh.itjust.works 3 points 4 months ago* (last edited 4 months ago) (1 children)

I still think they are but maybe my needs are simple. It was definitely better when I switched over (from godaddy*) during one of the migrations.

[–] foggy@lemmy.world 2 points 4 months ago

They've been my go-to rec for like 6 years 😢

Their support is top tier, which is important when it's important. But this complicates things. I'll have to take a close look at the competition these days.

[–] dylanTheDeveloper@lemmy.world 37 points 4 months ago* (last edited 4 months ago) (1 children)

GoDaddy can GoFuckThemselves, wondering why my shit was broken until i found out

[–] loudwhisper@infosec.pub 21 points 4 months ago

Been there...

I thought my API keys were expired, I regenerated them, changed a couple of things, checked all API calls to see if they changed API itself...then I searched the exact error and found out.

For such a breaking change to the API, was it hard to drop an email to every account not meeting the damn "requirements" with an API call performed in the last x months, to alert of the change?

[–] Chewy7324@discuss.tchncs.de 26 points 4 months ago* (last edited 4 months ago) (2 children)

desec.io can be used with any domain registrar and has an API with support for various ddns clients (ddclient, lego).

deSEC is a free DNS hosting service, designed with security in mind.

Running on open-source software and supported by SSE, deSEC is free for everyone to use.

Edit: To clarify, desec.io does not sell/rent domains. Desec has to be set as the authoritative nameserver on the registrar, then desec can manage domain records instead of the registrar (which usually also provides their own domain hosting for "free" by default).

[–] khorak@lemmy.dbzer0.com 6 points 4 months ago

Yes, a thousand times this. DeSEC is awesome, I moved my domain record management there. I'm usually buying domains on namecheap, and the IP allow list thing for the API was just too annoying to deal with.

[–] pentagrammar@programming.dev 4 points 4 months ago (1 children)

What's the benefit of having a separate DNS host? I'm using porkbun and had to mess around with its dns records to configure my email hosting. Does having separate service mean I don't have to do this all over again If I switched registrars?

[–] loudwhisper@infosec.pub 4 points 4 months ago

Yes, pretty much that. Plus some configuration might be easier with a DNS hosting. But the main benefit is decoupling domain and DNS for easier change.

[–] markstos@lemmy.world 14 points 4 months ago (7 children)

ClouDNS makes DDNS easy for a low cost for 1-5 domains.

[–] loudwhisper@infosec.pub 10 points 4 months ago* (last edited 4 months ago) (1 children)

ClouDNS

I think I heard of it. I think most DDNS scripts support a lot of registrars as well, if one doesn't want to go with full DNS hosting.

In case of DNS hosting (I also linked it in the post, but it's a good shotout), there is desec.io too. EU-hosted, free (although donations are highly encouraged) and has a ton~~s~~ of features! There is also a Terraform provider!

load more comments (1 replies)
load more comments (6 replies)
[–] pineapplelover@lemm.ee 11 points 4 months ago (2 children)

I use porkbun but I don't know how they handle this situation.

[–] loudwhisper@infosec.pub 10 points 4 months ago

I also use porkbun, their API is not a masterpiece but it works and allows you to get, set and update records. In fact their API is now supported by some of the common ddns scripts out there.

[–] vrighter@discuss.tchncs.de 8 points 4 months ago (2 children)

i switched to porkbun from godaddy specifically because of this.

[–] Archer@lemmy.world 2 points 4 months ago

Google Domains to porkbun here, mostly because they added porkbun DDNS support to OPNsense

load more comments (1 replies)
[–] csm10495@sh.itjust.works 9 points 4 months ago (2 children)

Recommend cloudflare for DNS. I use it for DDNS via API and it works great.

You also basically pay the wholesale rate without markup for the domain.

[–] robinj1995@feddit.nl 9 points 4 months ago (1 children)

Warning: Cloudflare does not allow you to change the nameservers of domains you register with them unless you pay for some insanely priced subscription. For many of us who register domains at various registrar's but want to be able to centrally manage DNS, hiding such basic functionality behind an extremely steep paywall makes Cloudflare a no-go.

load more comments (1 replies)
[–] JackbyDev@programming.dev 4 points 4 months ago (4 children)

Is it cheap? I got shifted to SquareSpace from Google Domains and it's pricier. I switched the name cheap but have no loyalty to them.

[–] ShortN0te@lemmy.ml 5 points 4 months ago (1 children)

You can just use the Cloudflare DNS Nameservers. No need to transfer the Domain.

load more comments (1 replies)
[–] irotsoma@lemmy.world 3 points 4 months ago (1 children)

It's reasonably priced. I was in the same boat with the Google domains shutdown. As long as you aren't a heavy user, it has lots of cool features. But if you get their attention they've been known to fleece the crap out of small businesses that were using their free services. Most of my stuff is self hosted applications to move myself off of Google services, so my traffic is minimal.

load more comments (1 replies)
load more comments (2 replies)
[–] solidgrue@lemmy.world 8 points 4 months ago (2 children)

Gandi changed their TOS and price structure last year, so I ported everything over to Porkbun for a small savings, but mostly as a big middle finger to Gandi.

If you're gonna get banged that kind of cash for functions you're already using, you may as well look at better registrars, and get better value for your spend.

Shop around.

[–] loudwhisper@infosec.pub 9 points 4 months ago (1 children)

I also migrated everything to Porkbun. Gandi used to be good too, we used it extensively at work in my previous org (~3 years ago).

Is the whole sector regressing? It seems these companies aren't happy just earning a profit based on the service they offer. There is always something "more" that they need to do. Often this makes the experience worse. Meh.

Super happy with Porkbun BTW, it just works, does what it's needed and I found the renewals to be 50% cheaper compared to GoDaddy...

load more comments (1 replies)
[–] RegalPotoo@lemmy.world 3 points 4 months ago

I moved just about everything to Route53 for registration - I run my own DNS so I don't need to pay for that, and it's ~40% cheaper than Gandi for better service.

Now I just need to move my .nz domain (R53 supports .{co,net,org}.nz, but not .nz itself?) and the 2 .xyz domains that are "premium" for some reason so R53 won't touch

[–] elfin@mstdn.social 8 points 4 months ago (1 children)
[–] loudwhisper@infosec.pub 4 points 4 months ago (4 children)

Yeah, indeed. To me is still completely absurd. At this point is not just a bad registrar, for most of us (hobbyists), I think it's a completely non-functional option. Basically every competitor offers an API.

I stuck with them out of lazyness for far too long.

load more comments (4 replies)
[–] TCB13@lemmy.world 6 points 4 months ago

How unexpected 😂😂😂

[–] NorthWestWind@lemmy.world 6 points 4 months ago

I'm glad I transferred my domain a month ago to porkbun. They even halved my renewal price

[–] thejevans@lemmy.ml 5 points 4 months ago (12 children)

Porkbun + cloudflare DNS + ddclient

load more comments (12 replies)
load more comments
view more: next ›