diff --git a/content/en/docs/Theory/architecture.md b/content/en/docs/Theory/architecture.md index a535ca7..359c8d6 100644 --- a/content/en/docs/Theory/architecture.md +++ b/content/en/docs/Theory/architecture.md @@ -30,15 +30,15 @@ Candidates: There's also free [Oracle Cloud](https://docs.oracle.com/en-us/iaas/Content/FreeTier/freetier_topic-Always_Free_Resources.htm), but where you don't pay, you're usually a commodity. ### DNS -For the choice of [Cloudflare](https://cloudflare.com), [deSEC](https://desec.io/), or [DigitalOcean DNS](https://www.digitalocean.com/). +There's a choice between [Cloudflare](https://cloudflare.com), [deSEC](https://desec.io/), or [DigitalOcean DNS](https://www.digitalocean.com/). [deSEC](https://desec.io/) is a more private option and is recommended by default. -[Cloudflare](https://cloudflare.com) and [DigitalOcean DNS](https://www.digitalocean.com) likely collect data in proxy traffic mode, otherwise it's hard to explain why they would offer such services for free. **In our case, we don't proxy anything and use them only as DNS servers.** +[Cloudflare](https://cloudflare.com) likely collects data in proxy traffic mode, otherwise it's hard to explain why they would offer such services for free. **In our case, we don't proxy anything and use it only as a DNS server.** ### Backup repository We use [Backblaze](https://www.backblaze.com/). -The first 20GB are free and significantly cheaper than AWS. [Backblaze](https://www.backblaze.com/) publishes its hardware developments in open source. It also shares very useful statistics on disk failures, based on which one can choose the most reliable and tested option. +The first 20GB are free and significantly cheaper than AWS. [Backblaze](https://www.backblaze.com/) publishes its hardware developments in open source. It also [shares](https://www.backblaze.com/b2/hard-drive-test-data.html) very useful statistics on disk failures, based on which one can choose the most reliable and tested option. In the future, we might replace it with a self-hosted solution or a peer-to-peer one. **Currently, this is not a top priority since the data is encrypted, and the service provider only sees the IP address of your server, not the device with the application.**