Shaarli

I've been using Shaarli[1] for the past 15 years, and I'm very happy with it. The code base is small and stable enough (the official version hasn't got a single update over the past 12 years, even though the author is still using it daily[2]) you can easily tweak it to your tastes. [1]: https://github.com/sebsauvage/Shaarli [2]: https://sebsauvage.net/links/

I think about rate-limiting from an unprivileged user perspective and saw it first at https://github.com/sebsauvage/Shaarli/blob/master/index.php#.... So e.g. fail2ban is not an option. And the application has to deal with it. I care more about load/DOS than actual crack success. What means the firewall is the sensible place. Not the application. Or just take the risk, make backup/restore simple and do intrusion detection by monitoring a dedicated endpoint with e.g. https://updown.io/44q5 and let things happen for the sake of simplicity. Hm. (I'm doing a federated, single-user microblog engine targeting laypersons. A proof of concept is at https://codeberg.org/mro/ShaarliGo)

I self-host Shaarli[1] with the 2004licious theme[2], as an emulation of early del.icio.us. It works really well - no database (it saves a single .php file), minimal interface, and it has an Android app. It also has tag and note support. I only wish it supported plain notes; you have to have a URL for each entry. [1] https://github.com/sebsauvage/Shaarli [2] https://github.com/Ruin0x11/shaarli-2004licious-theme

For that case you may use a bookmark manager. For an open-source self-hosted one, check Shaarli : https://github.com/sebsauvage/Shaarli

some influencial tech blogs (in order less famous) in France use a lot this delicious-clone : https://github.com/sebsauvage/Shaarli. It's a one-click bookmarlet with public/private separations, RSS built-in for syndication, and there are implementations of dashboard multiplexing sources : http://shaarli.fr/. No comments though (the author seems against it).