How do I setup my own FOSS shopping website for my business?

Hello, I don't have much experience in self-hosting, I'm buying a ProtonVPN subscription and would like to port forward. I have like no experience in self-hosting but a good amount in Linux. I'm planning on using Proxmox VE with a YunoHost VM. I already have a domain name from Njalla. I'm setting up a website for my computer store. I want it to have listings and payment options so they can check out there. I want my customer data to be secure. I don't want it to have any JavaScript or nasty trackers. I want it to be FOSS. Any help is highly appreciated!

tagginator Bot ,

New Lemmy Post: How do I setup my own FOSS shopping website for my business? (https://lemmyverse.link/lemmy.world/post/14610573)
Tagging:

(Replying in the OP of this thread (NOT THIS BOT!) will appear as a comment in the lemmy discussion.)

I am a FOSS bot. Check my README: https://github.com/db0/lemmy-tagginator/blob/main/README.md

wildbus8979 ,

WordPress shop maybe?

mo_ztt , (edited )
@mo_ztt@lemmy.world avatar

Wordpress 1,000% (probably coupled with WooCommerce but there are probably some other options)

I honestly don't even know off the top of my head why you would use anything else (aside from some vague elitism connected to the large ecosystem of commercial crap which has tainted by association the open source core of it) -- it combines FOSS + easy + powerful + popular. You will have to tiptoe around some amount of crapware in order to keep it pure OSS though.

RobotToaster ,
@RobotToaster@mander.xyz avatar

the large ecosystem of commercial crap which has tainted by association the open source core of it

Isn't the main shop plugin (woocommerce) heavily infested with that though?

mo_ztt ,
@mo_ztt@lemmy.world avatar

Everything Wordpress is heavily infested with that. However you don't have to let it impact you -- it kind of looks to me like they pressure commercial vendors to put their stuff under the GPL if they're wanting to offer a free version, so there's a robust ecosystem of actually-FOSS tooling for it. My experience has been that it's always worked pretty well in practice; you just have to keep your nope-I'm-not-paying-for-your-paid-version goggles firmly affixed. (Also, side note, GPT does an excellent job of writing little functions.php snippets for you to enable particular custom functionality for your Wordpress install when you need it.)

lemmyvore ,

LOL, getting GPT to write code for the most unholy combination of the worst the blog and e-commerce have to offer, that should work well.

mozz Admin ,
mozz avatar

Honestly having GPT write one-off code for you for particular selected pieces (esp ones that require a lot of domain knowledge) works pretty well in my experience

foggy ,

Yeah, anything you wanna do on WordPress, you can do. But someone else has also already done, and likely offers it through their plugin ecosystem. The question is, is that plugin FOSS, and if not, are you ready to do it yourself?

The caveat to doing anything yourself for e-commerce is liability. Just make sure your shit is secure, up to date, tested, encrypted, backed up, etc.

smileyhead ,

I had to migrate shop from WooCommerce to PrestaShop.
The store is for both Poland and Germany, so two countries, two different currencies, languages and tax zones. With WooCommerce every simple thing like multicurrency requires a plugin. Then you need a plugin for multiple languages, then for multiple tax zones, then multiple client bases (retail and B2B)...
With PrestaShop all of we needed for that basic but two-country store was a payment plugin.

thefactremains ,

Here's a decent list on awesome-self-hosted

Nougat ,

If you are accepting payments, you absolutely want to offload that to a third party payment processor, so that you don't have to go through the hassle of doing PCI compliance.

cm0002 ,

I feel like it was just a few months ago someone else was asking this very similar thing, including wanting to handle payment processing themselves as well.

Seriously OP, do not do payment processing on your own unless you already have experience with going through PCI compliance. And if you did, you would already have made the decision to off load it to an actual payment processer lmao

Don't be a hero, offload payment processing to a third-party.

just_another_person ,

Second this wholeheartedly. There's a reason businesses like Square space exist, and you will kill yourself trying to stay on top of things to stay up to date and secure.

IHawkMike ,

Third. The first thing I mention when one of my clients asks anything about PCI is to offload as much card processing onto third parties as possible.

And if you have nothing in place yet, then 100% offloaded should be possible (with the possible exception of secure payment terminals if you need to process physical cards).

That said, it is still possible to use your own hosted WordPress storefront and offload the payment processing via tokenization or redirection. But a turnkey solution like Shopify might be better if you lack the experience.

EncryptKeeper ,

For real. I handle PCI audits at work and at this point I’d pay somebody to do it for me.

atzanteol ,

Be sure to familiarize yourself with PCI DSS compliance and how it does or does not apply to you and your payment gateway.

hperrin ,

No JavaScript? Good luck.

Oha ,
@Oha@lemmy.ohaa.xyz avatar

Can be done with a server side rendered framework like flask

TCB13 ,
@TCB13@lemmy.world avatar

Wordpress + Woocomerce. There are a few themes that use less or no JavaScript, but you shouldn't bother with that, JS is useful and can reduce the amount of page loads (traffic) and make the experience better.

ricdeh ,
@ricdeh@lemmy.world avatar

I don't want it to have any JavaScript

That's not going to happen. I also don't understand why you wouldn't want JavaScript. All the concerns with it are about the times when you access a website by a proprietary software maker and encounter obfuscated and opaque code that you can only with great difficulty reconstruct what it does. But JavaScript "in the right hands", like on a FOSS website, is perfectly fine and even required to make a webpage that can actually do something more than simply display text or images.

thebardingreen ,
@thebardingreen@lemmy.starlightkel.xyz avatar

Given your requirements, why not just accept Bitcoin or other crypto? It sounds like you want to self host it semi anonymously.

WolfLink ,

Using ProtonVPN probably isn’t doing what you want it to do, since the port they will give you is random, but for your website you will want ports 80 and 443 exposed.

CloudFlare will hide your IP will properly forwarding traffic (and other benefits, like caching images on their CDN, if you want them). Also their free tier is more than enough for something like this.

WolfLink ,

Using ProtonVPN probably isn’t doing what you want it to do, since the port they will give you is random, but for your website you will want ports 80 and 443 exposed.

CloudFlare will hide your IP will properly forwarding traffic (and other benefits, like caching images on their CDN, if you want them). Also their free tier is more than enough for something like this.

possiblylinux127 ,
@possiblylinux127@lemmy.zip avatar

I would create in the cloud

impure9435 ,

Definitely use some sort of cloud server, I'd stay away from your VPN + port forwarding idea, it will only cause you issues. I heard good things about WooCommerce, it's FOSS. You can't get around JavaScript, it's impossible to build a functioning online store without some kind of JS. WooCommerce doesn't include trackers though, just the bare-minimum JavaScript that is required for the site to work.

SirQuackTheDuck ,

You can't get around JavaScript, it's impossible to build a functioning online store without some kind of JS.

Well, sure you can. It will just be a pain to use for your users, especially when validation comes into play.

But a simple list with an "add to chart" button really won't need any javascript.

impure9435 ,

How would you integrate with a payment processor? Handling payments yourself means that you would have to comply with the PCI standard and get audits in regular intervals, which are insanely expensive and only make sense if you actually run a large business which makes money from card transactions.

SirQuackTheDuck ,

You don't have to be PCI compliant for stuff like bank transfers or other forms of payment. Credit cards aren't the default payment method everywhere.

Maybe it's pay on pickup, or just a simple mail with sepa wire transfer instructions.

Also, the PSP can still use JS but your site still doesn't need to have it. Services like Mollie and Stripe offer checkout environments they host, meaning you still don't have to use JS on your site.

impure9435 ,

Having a Stripe integration literally means having JavaScript on your site. Sure, it doesn't come from your website directly, but it's still loaded and executed when someone visits the site and tries to pay. TL;DR: Of course it's possible. Everything is possible. Having some FOSS JavaScript from WooCommerce isn't that bad though, and you'll likely need nonfree JS for payments anyway.

smileyhead ,

iframes?

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • selfhosted@lemmy.world
  • test
  • worldmews
  • mews
  • All magazines
    •