Replying to Avatar sommerfeld

I have to admit before I was like: "not your metal, not your server".

I chose sovereignty over security, without any nuance.

From now on, everything public goes to the VPS (with regular backups in case it gets taken down), everything private stays at home.

The only port I want open in my house is a single UDP port for wireguard. Good luck trying to break through that!
Avatar
NunyaBiznus 2y ago

Thoughts on things like Cloudflare Tunnels to proxy public facing services in lieu of opening ports on your network?

Reply to this note

Please Login to reply.

Discussion

Avatar
sommerfeld 2y ago

I self-hosted behind a Cloudflare proxy as well. The fact is, it's impossible to fully secure a public webserver. Any motivated and resourceful attacker can find their way in.

The web (just http, not the Internet) is inherently insecure.

Avatar
NunyaBiznus 2y ago

Yeah, very true. This is why we can’t have nice things 😅