My projects

  • Progress: Completed! 100% 100%
Introducing this hidden gem of search engines! While it may not be as widely recognized as other options, Searxng offers a unique opportunity to take control of your privacy. By hosting your own open-source search engine, you can rest assured that everything is in your hands – from the source code to logging settings and private data. No need to trust unknown administrators. The best part? With Searxng, you can customize the default settings and say goodbye to cookies resetting your preferences. Plus, as long as your endpoint remains uncompromised, your settings will stay securely stored and inaccessible to others. Embrace the power of Searxng and experience the privacy of a random profile per search. Give it a go on Roth The IT Guy’s hosted search engine by visiting https://search.rothitguy.pro you can also add my hosted search engine to your browser!

 

Why Supporting RothITguy Search Matters

True Privacy, No Compromises

RothITguy Search is built on SearXNG, an open-source meta-search engine designed to aggregate results from dozens of search providers—Google, Bing, DuckDuckGo, Startpage, Wikipedia, and more—without ever revealing your identity to them.

  • No tracking, profiling, or logging of personal data—your queries are stripped of IP addresses, cookies, and browser fingerprints before they leave the server.
  • Search queries are anonymized and proxied, so third-party search providers see RothITguy Search, not you.

 

Independence from Big Tech

Mainstream search engines shape what you see by ranking results to serve their business goals—ads, tracking, and content control. RothITguy Search doesn’t participate in algorithmic manipulation.

  • Search results are ranked transparently and locally, with your control over filtering, languages, and categories.

  • No bias toward corporate advertisers or paid placements—search results are based purely on content relevance.

Custom Enhancements

Unlike generic public SearXNG instances, RothITguy Search is tailored for performance, stability, and usability:

  • Tweaked search engine backends to improve relevancy and performance while avoiding unstable or tracking-prone sources.

  • Extra privacy hardening on the host system—hardened OS, network-level blocking of trackers, and monitoring for abuse.

Public Access Without Paywalls

Many private search instances are invite-only to avoid abuse, but RothITguy Search is open to the public. This increases privacy for everyone because:

  • The larger the user base, the harder it is for external parties to correlate or deanonymize search traffic.

  • It provides a trustworthy option for individuals who lack the skills, time, or resources to self-host SearXNG themselves.

RothITguy Search gives you private, unbiased search results—no tracking, no profiling, no ads. Every query is stripped of identifying data and anonymized before it leaves our server, keeping you invisible to Big Tech.

But running a fast, secure, and public SearXNG instance isn’t free. Your donation helps cover hosting, maintenance, and upgrades.

Configuring custom search engine in FireFox

We first enable a hidden Firefox feature that improves how custom engines behave.

  1. Open Firefox.

  2. In the address bar, type: about:config

  3. Accept the warning: “Proceed with caution”

  4. In the search box at the top, type: browser.urlbar.update2.engineAliasRefresh
  5. Double-click the entry to set its value to True
  6. Go to Firefox Settings
    • Open Firefox.

    • Click the menu icon (☰), then click Settings.

    • Go to the Search tab.

  7. Scroll to “Search Shortcuts”

  8. Set It as Default
  9. Go back to Firefox > Settings > Search and select RothITguy Search under the Default Search Engine dropdown.
  10. You can optionally choose to “remove” the other search engines.
Configuring custom search engine in FireFox (Mobile)
  • Visit https://search.rothitguy.pro

  • Tap and hold the search bar on the site

  • Choose “Add Search Engine”

  • Go to SettingsSearch and set it as default

Configuring custom search engine in Chome
  • Open Chrome

  • Go to SettingsSearch engineManage search engines and site search

  • Under Site Search, click Add

    • Search engine: RothITguy Search

    • Shortcut: roth

    • URL with %s: https://search.rothitguy.pro/search?q=%s

  • Click the three dots next to it → Set as default

Configuring custom search engine in Microsoft Edge (Chromium)
  • Open Edge

  • Go to SettingsPrivacy, search, and services

  • Scroll to Services → Click Address bar and search

  • Click Manage search engines

  • Click Add

    • Name: RothITguy Search

    • Keyword: roth

    • URL: https://search.rothitguy.pro/search?q=%s

  • Click the three dots next to the new engine → Make default

Configuring custom search engine in Brave
  1. Go to SettingsSearch engine

  2. Click Manage search engines

  3. Under Site Search, click Add

    • Name: RothITguy Search

    • Shortcut: roth

    • URL: https://search.rothitguy.pro/search?q=%s

  4. Use the menu to Set as default

Configuring custom search engine in Vivaldi
  • Go to Vivaldi MenuSettingsSearch

  • Click Add Search Engine

    • Name: RothITguy Search

    • Nickname: roth

    • URL: https://search.rothitguy.pro/search?q=%s

  • Check Set as Default Search

  • Progress: Completed! 100% 100%
SimpleX Chat is a privacy-focused messaging platform that operates without any user identifiers, making it highly secure and private. Unlike traditional messaging services, SimpleX Chat does not store user accounts or personal data on servers. Instead, all user data is stored locally on client devices in an encrypted format, ensuring that only the intended recipients can access the messages.
The platform uses end-to-end encryption for all communications, including messages, images, videos, and files. It employs a double-ratchet encryption protocol and out-of-band key exchange to prevent man-in-the-middle attacks and ensure communication integrity. SimpleX Chat also features temporary anonymous pairwise identifiers for each user contact or group member, providing strong metadata privacy.
Additionally, SimpleX Chat supports decentralized groups, encrypted voice messages, disappearing messages, and audio and video calls.
The platform can be accessed via Tor for added anonymity. The combination of these features makes SimpleX Chat a robust choice for users seeking secure and private communication. I am now hosting my own services.

“Messages, files & calls are protected by quantum resistant e2e encryption with perfect forward secrecy, repudiation & break-in recovery.”

  • Progress: Completed! 100% 100%
Currently hosting my own email server using Mailcow. https://mail.rothitguy.pro
Mailcow is an all-in-one email server solution that leverages a variety of well-established and widely-used components to create a reliable, secure, and feature-rich email platform.
Each container represents a single application, connected in a bridged network.

Contact me to get an account!

 

Why Supporting RothITguy Mail Matters

Take Back Control of Email

RothITguy Mail runs on Mailcow, a powerful, open-source email suite that gives you full ownership of your inbox.

  • No Gmail-style scanning of messages for advertising or AI training.

  • No Microsoft or Yahoo “policy changes” suddenly locking you out of your own messages.

  • Every mailbox, alias, and domain is under your control—not a corporation’s.

End-to-End Privacy & Security

Your email is hosted on hardened, privacy-focused infrastructure with industry best practices:

  • TLS encryption for mail in transit.

  • SPF, DKIM, and DMARC for authentication—reducing spoofing and phishing.

  • Secure webmail and IMAP/SMTP access, with multi-device sync.

  • Optional encrypted mailbox storage to protect against server breaches.

Resilient, Spam-Resistant Email
RothITguy Mail is tuned for deliverability and spam filtering without selling out privacy:

  • Rspamd & ClamAV for spam and virus filtering.

  • Automatic TLS upgrades when available.

  • Blocklists that keep unwanted senders out while still allowing legitimate messages in.

Community Benefit
Many people want private, self-hosted email but don’t have the expertise to run it themselves. RothITguy Mail bridges that gap:

  • Offers a trusted, ad-free alternative to Big Tech email.

  • Grows a shared privacy network where more people benefit from stronger protections.

  • Reduces dependence on surveillance-driven communication platforms.

Funding Keeps It Running Smoothly
Maintaining a robust, public-facing mail system means:

  • High-uptime servers with redundancy and regular updates.

  • Security monitoring to prevent abuse or breaches.

  • Continuous tuning to ensure deliverability to major mail providers.

RothITguy Mail is your ad-free, surveillance-free email—no scanning, no profiling, no “free” service that sells your data. Every message is encrypted in transit and hosted on hardened infrastructure you can trust.

But privacy isn’t free to run. Your donation helps cover the servers, security monitoring, and maintenance that keep RothITguy Mail reliable and safe for everyone.

If you believe email should be yours—not theirs—support the cause.

Core Components and Their Functions
Component Function
Postfix Mail Transfer Agent (MTA) that handles sending and receiving emails via SMTP.
Dovecot IMAP and POP3 server responsible for storing and retrieving email. It supports full-text search, Sieve filtering, and quota enforcement.
Rspamd Spam filtering system with DKIM, DMARC, SPF, greylisting, and rate-limiting support. Learns from spam/ham feedback.
ClamAV Antivirus scanner that scans incoming/outgoing mail for malware.
SOGo Groupware Webmail interface with calendar, address book, and ActiveSync (mobile sync). Alternative front-ends like Roundcube are not included by default.
MariaDB SQL database to store Mailcow configuration data like domains, mailboxes, aliases, etc.
Redis In-memory key-value store used for caching and session management (e.g., for Rspamd and Dovecot).
PHP-FPM Executes PHP scripts, required for the Mailcow admin panel and web interface.
Nginx Reverse proxy and web server for the admin UI, webmail (SOGo), and ActiveSync.
ACME/Let’s Encrypt Companion Automates SSL/TLS certificate generation and renewal.
Netfilter/Fail2Ban

Optional tools for blocking malicious IPs and brute-force attempts.

Watchdog Mailcow’s custom watchdog script for container health checks and automatic restarts of failed services.
Dsync/Dovecot replication Optional: for multi-node setups with email syncing across servers.
User Interface

There are two main user interfaces

1. Admin UI

Feature Description
Dashboard Overview of mail system health, queue size, spam/ham stats, watchdog status, and service uptime.
Domain Management Add/remove email domains, configure limits (mailboxes, aliases, quota).
Mailbox Management Create/edit/delete users, assign passwords, quota, send limits, Sieve scripts, etc.
Alias & Forwarding Set up aliases and forwarders per user or domain.
DKIM Key Management Generate and rotate DKIM keys. TXT records are shown for DNS configuration.
Relay Settings Configure domain-wide or global SMTP relays (e.g., for SendGrid, SES, etc).
Blacklist/Whitelist Rspamd integration for managing sender/recipient rules.
Quarantine Viewer Manages spam/junk quarantines with preview and release functions.
Rspamd Charts Real-time stats and analytics via Rspamd UI.
System Logs Syslog, mail logs, dovecot logs, and postfix queue visibility.
TLS/SSL Settings Status of Let’s Encrypt or manually managed TLS certs.
Configuration Export/Import Backup settings and domain/mailbox configuration via JSON.
2FA for Admins OTP-based two-factor login for the admin panel.

2. User UI (Self-Service Panel)

Feature Description
Password Change Users can securely change their mailbox password.
Sieve Filters Create rules to sort, forward, reject, or auto-reply to mail.
Out-of-Office (Vacation) Set start/end dates and auto-reply messages.
Alias Management View aliases or redirect targets (if permitted by admin).
Spam Training Some setups allow users to mark email as spam/ham, feeding Rspamd.
ActiveSync Device Control Users can wipe or block connected mobile devices (via SOGo).

 

Advanced Features

Advanced Features

Authentication & Security

  • 2FA Support for admin panel (TOTP-based)

  • Fail2Ban and Netfilter rules to block brute force and spam bots

  • Per-user and per-domain TLS policy enforcement

  • Submission port 587 and SMTPS on port 465 with authentication

  • Mail rate limiting (outbound limits per mailbox/domain)

Mail Delivery Features

  • Sieve scripting for advanced mail filtering and actions

  • Greylisting to reduce spam by delaying first-time senders

  • Rspamd pre-filters with custom Lua rules

  • Sender reputation-based throttling

Relaying and Routing

  • Outbound relays: Configure SMTP relay per domain or globally (e.g., Gmail/SES integration)

  • Inbound filtering: Can route incoming mail through 3rd-party services before delivering

  • Recipient verification before relaying (anti-spam measure)

Backup & Restore

  • helper-scripts/backup_and_restore.sh: Easy full system and mailbox backup/restore

  • Works with rsync, rclone, or direct tarballs

  • Can exclude virus quarantine and logs to save space

Mail Sync and Replication

  • Dovecot dsync (experimental): Allows mailbox replication across nodes

  • Useful in HA or DR scenarios

Monitoring & Metrics

  • Rspamd Web UI: Live filtering stats, Bayesian database, reputation score, etc.

  • Netdata (optional): Real-time system resource monitoring

  • Prometheus/Grafana integration: Community-built exporters available

Mobile & Client Integration

  • Autodiscover/autoconfig for automatic email client setup (Outlook, Thunderbird, iOS)

  • ActiveSync via SOGo, including support for contacts and calendars

  • CalDAV/CardDAV support for cross-device syncing (Nextcloud, Thunderbird, iOS)

Developer/Automation Features

  • REST API: Manage domains, mailboxes, aliases, DKIM, etc.

    • Swagger UI available under /api

  • Hooks: Execute scripts on specific mail actions (e.g., quarantine, delivery)

  • LDAP integration: (Experimental/community) for user management

  • Progress: Completed! 100% 100%
Currently hosting my own SIEM using Wazuh. https://sec.rothitguy.pro

RothITguy Security delivers enterprise-grade threat detection—without the corporate surveillance, vendor lock-in, or massive price tag. Every log, alert, and security event stays on privacy-focused, self-hosted infrastructure you can trust.

But defending against modern cyber threats takes serious resources. Your donation funds the servers, bandwidth, updates, and tuning that keep RothITguy Security running 24/7 for everyone—free, open, and independent.

If you value security without spying, help keep it alive.

Why Supporting RothITguy Security Matters

Security That Works for You, Not Against You
Wazuh is an open-source XDR (Extended Detection & Response) and SIEM (Security Information and Event Management) platform.

  • Unlike commercial systems that tie you to costly licenses, Wazuh is free and transparent—you can inspect every line of code.

  • No hidden “telemetry” sent back to a vendor; all data stays on infrastructure you trust.

  • You get enterprise-grade detection without corporate surveillance baked in.

Continuous Threat Detection
RothITguy Security monitors endpoints, servers, and cloud workloads in real time:

  • Log analysis: Correlates system, application, and network logs to detect unusual activity.

  • File integrity monitoring (FIM): Instantly alerts you to unauthorized changes in critical files.

  • Vulnerability detection: Identifies outdated or risky software before attackers exploit it.

  • Malware detection: Flags malicious behavior patterns across systems.

Incident Response & Automation
RothITguy Security doesn’t just detect problems—it can respond to them:

  • Automatic remediation scripts to isolate compromised systems.

  • Real-time alerts via email, messaging, or API integrations.

  • Custom rules to match your security needs (e.g., blocking repeated login failures).

Privacy-Conscious Security
Big-name monitoring tools often funnel data to centralized vendor servers. RothITguy Security doesn’t.

  • All logs and telemetry remain within self-hosted infrastructure.

  • No third-party analytics, tracking pixels, or “optional” data sharing.

  • Designed for compliance with privacy-focused standards and regulations.

Accessible Security for All
Most small teams and individuals can’t afford commercial SIEM/XDR licenses—often costing thousands per month.

  • RothITguy Security offers the same class of protection at no cost to users.

  • You don’t need a dedicated security engineer to benefit—users get a pre-configured, tuned system.

  • By keeping it public, more users benefit, which strengthens the entire privacy and security community.

Funding = Stability & Expansion
Keeping Wazuh running for the public requires:

  • High-availability servers to ensure uptime during attacks.

  • Regular rule updates to detect the latest threats.

  • Performance tuning so monitoring doesn’t slow systems down.

  • Continuous security hardening to keep the platform itself safe from compromise.

Donations directly pay for the hardware, bandwidth, and time required to keep RothITguy Security operating at a professional, trustworthy level.