Edit: I appreciate everyone's suggestions and recommendations! After speaking with my co-worker, I think we'll got with a Managed WordPress solution. Still have a lot more to discuss and figure out, but I suspect that'll at least put us on the right footing. Thanks!

Hello Tilderinos. I need your knowledge and advice.

The organization I work for wants to build a new website. Traditionally, we've used an AMS, which is an Association Management System. These are typically used by non-profits, which is what we are, a voluntary regulatory non-profit. It combines a CMS with a CRM in a proprietary package. It's also entirely hosted and managed by the AMS developer, which is typical for these platforms. Basically a turnkey solution.

We have a web designer/developer-yet-doesn't-want-wear-the-developer-mantle and me, who's really more of a desktop support/low level sysadmin for our small organization. I'm jack of all many trades, master of none.

Our web designer is really interested in either self-hosting WordPress or even looking into a headless CMS. He wants more creative and functional control over our website than what we currently with our AMS. We are very limited to what we can do right now, since we're playing in the AMS' sandbox with only some HTML/CSS and light JS use. Anyway, from there, we'd use API calls to query the new CRM that's currently being built out (it's a proprietary one, akin to Salesforce) to generate dynamic content.

I could go out and get webhosting at like a GoDaddy (I wouldn't use GoDaddy) or somewhere like that. I've done that before for some smaller auxiliary sites. Sites that, if they go down for a day or two, it's kinda NBD, while I try to figure out what's going on and reach out to the webhost for assistance. I literally just did that earlier this week on one of those sites.

But this would be our main website. And we have a global customer and stakeholder base. People are always on our website 24/7. I'm hesitant to commit to doing it this way because I feel like there's so much that would drop into our laps that we don't know how to handle. What happens when the site goes down for some reason? Is there a failover? How do I even set that up? How do we do backups and rollbacks? How about security issues? How do I harden the site and system? What happens if we do get hacked? We've discussed the issues with WordPress, which are many. How do we deal with all those issues on our own? I don't know the answer to any of these.

Like I said above, we don't have to deal with any of those questions right now. Our AMS provider deals with all that. I'm sure they have a team in a NOC or similar that watches the infrastructure 24/7. Part of what we pay them is so they can handle all that. No way in hell my co-worker and I are willing or able to do all that. And it's not that I'm not willing to learn how to do all this stuff, but to me, this seems like the wrong venue and time to be learning on the fly.

Idk. Are my concerns overblown? Is it really just as easy as getting some webhosting space somewhere and installing WP or some headless CMS and letting my web dev go to town? I know my co-worker could build the site out. I'm just not sure if I could support it all during and afterwards.

Any advice or suggestion would be appreciated. Because right now, him and I are going around in circles trying to figure this out, ha. Thanks.

Web devs: what's up with this trend? For enterprise apps, I get it…single sign-on needs to detect what your email domain is to send you to your identity provider. For consumers, I feel like it's gotta be one of these reasons:

• Users don't know about the tab key being able to move to other fields on a page
• Mobile users don't really have a tab key, despite there being "previous/next field" arrows on the stock iOS keyboard since its inception (Android users, help me out please)
• Users tend to hit Enter after typing in their username, leading to a form submission with a blank password
• Security, maybe? In the past I have sent a link and a password in separate emails or separate communication methods entirely. Are you hashing/salting these separately for better MITM mitigation?

Did your UX team make a decision? Are my password managers forever doomed to need a "keyboard combo" value for every entry from now on?

Non-devs: do you prefer one method over the other? If so, why?

Tildes maintainers: selfishly, thanks for keeping these together :)

I've been trying to set up a dev enviornment for Tildes, mainly so that I can actually test my MR (!136), and I've been running into a few issues.

However, since we also have a new influx of people who might be interested in contributing to Tildes, it seems like a good time to collect resources on setting up the dev environment, as well as helping anyone running into issues.

So, if you have issues or advice, post them here! I'll be adding my questions in a comment shortly.

Relevant wiki pages:

• Development / Initial Setup
• Development / General Development Info

Edit: A more recent post on setting up the dev environment on Apple Silicon / M1 Macs

This is more focused towards those that use custom domains for their email. My current plan is up at Zoho for my team in a month, and even though I've used them for the past few years its been hit-or-miss (especially when using third-party apps or programs).

Who do you use? Who do you not trust? Who would you never go back to?

Sidenote: I hope this might eventually kick off a ~privacy group, one day.

Hey Tildes, with the renewed interest in the site, it got me thinking that we should hold a fundraiser for the not-for-profit company—which currently consists of just one person—that runs Tildes. It's overdue.

Disclaimer: These are my words as a member of the community. I haven't run this message by the admin before posting. I may have gotten some details wrong.

Where to donate

• GitHub Sponsors: https://github.com/sponsors/Deimos
• Patreon: https://www.patreon.com/tildes

History

A bit of history: The site admin, @Deimos ran the first three years of the site working full-time on it, paid only by donations, plus a $5000 GitHub sponsor match one year, which I'm not even sure was fully achieved, or only just barely.

For that time period 2018-2020, a lowball salary as a software engineer with his experience would have been $100,000 USD per year not including benefits.

If he received $5000 in donations per year (almost certainly an overestimate for more recent years) plus the $5000 GitHub match for the first year—for the 5 years of Tildes' life, that's about $30,000.

The remaining opportunity cost of $270,000 was essentially paid out of pocket by himself, as a donation to the community. Plus remember there are server expenses, legal incorporation expenses, etc. And, y'know, rent.

In recent years he had to take a full-time job because the situation was, of course, unsustainable.

App?

I announced in April that a mobile app is under development. Originally, I was planning to take my time and release a first alpha by the end of 2023.

How about if we struck a deal: get the donation numbers up and I will devote more time to the app, as opposed to splitting my time between it and contract work and other projects.

What's the deal?

• 150 active donors combined on GitHub Sponsors and Patreon—I'll release an alpha by November.
  GOAL REACHED
• 300 active donors—I'll release an alpha by October.
  GOAL REACHED
• 500 active donors—I'll release an alpha by September.

The dollar amounts don't matter.

As of writing, we are at 46 active donors.

What's in it for you, though?

Feeling like I did a good deed, I guess? I'm not looking for a "slice of the pie," to be clear. In some sense I'd be matching your donations with my time, aka opportunity cost.

If I donate, can I bother the admin to work more on the site?

No.

Again, I haven't run this fundraiser by the admin. He will certainly keep his full-time employment for the foreseeable future, and will not magically have more hours in the day to devote to Tildes.

With a sustainable budget, though, a lot can happen in the future. Contracting out work to others, for example.

But the point of this fundraiser is more to make a small dent in the past debt we owe the admin, not making any promises whatsoever on the future of the site and how it's run.

Let's go, my fellow Tilderinos!

• GitHub Sponsors: https://github.com/sponsors/Deimos
• Patreon: https://www.patreon.com/tildes

I'm a supporter and believer in the small web and minimalist websites (i.e. NOT "minimal design" websites, which are not minimalist more often than not).
Some examples:

• Tildes.
• Sourcehut.
• HackerNews.
• To a limited degree, the different motherfucking websites (as they are, in essence, websites with no purpose).
• Members of the 512kb club (also see https://10kbclub.com/).
• Tools like Miniflux and Kanboard.
• Pinboard.in.
• And many others.

What is your experience, if any, with the small web?
Which steps have you taken (if at all) to ensure your website is not bloated?
What do you think can be done better both individually as well as globally to make the web a nicer, faster place?

Edit: So I don’t look like I don’t practice what I preach, this is my blog. I try and follow the minimalist principles.