There’s a significant distinction between servers that are actively malicious as you’re describing and servers that aren’t fully compatible with certain features, or that are simply buggy.

Lemmy, for example modifies posts federated from other platforms to fit its format constraints. One of them is that a post from Mastodon with multiple images attached will only show one image on Lemmy. Mastodon does it too: inline images from a Lemmy post don’t show on vanilla Mastodon.

I’ll note that Lemmy’s version numbers all start with 0. So do Piixelfed’s. That implies the software is unfinished and unstable.

Federation doesn’t inherently require large amounts of memory. Fundamentally, it’s a matter of selecting a list of unique servers (likely tens, maybe hundreds) from a larger set of followers (likely hundreds, maybe thousands) and sending an HTTP request to each when there’s a new post. There’s a speed/size tradeoff for how many to send in parallel, but it’s not a resource-intensive operation.

Growth beyond a few tens of megabytes was a bug in Writefreely, which is a likely-suitable option several comments here recommended.

I’d put it farther removed from the technical side than that; dreadbeef is thinking like a manager. OP might be better off paying a third party $3/month to handle the details and host a heavyweight, full-featured blog for them, but that’s not what they asked for.

This is selfhosted, which I think implies a desire to self-host things even if it might seem a wiser use of resources to do something else.

I’m thinking like a programmer about what a basic blog has to do and the computing resources necessary to accomplish it. Software that needs more than a few tens of megabytes to accomplish that is not lightweight regardless of its merits.

This comment seems to be arguing that one should not demand blog software be lightweight because there’s inexpensive hosting for something heavyweight. That’s a fine position to take, I guess, but OP did ask for lightweight options.

It wants a gigabyte of RAM. Maybe that passes for lightweight in 2025, but given the fundamental things a blog has to do, I’d probably put the cutoff at less than a tenth that amount.

Some people have privacy expectations that are not realistic in an unencrypted, federated, heterogeneous environment run by hobbyist volunteers in their spare time.

It you have something private and sensitive to share with a small audience, make a group chat on Signal. Don’t invite any reporters.

Total Webhosting Solutions

I’ve been with Porkbun since Gandi got acquired. No complaints.