2d ago

What steps do you take to secure your server and your selfhosted services?

Inspired by this comment to try to learn what I'm missing.

Another concern I have is does it need to be on a separate machine on a vlan from the rest of the network or is that too much?

33 comments

One thing I do is instead of having an open SSH port, I have an OpenVPN server that I’ll connect to, then SSH to the host from within the network. Then, if someone hacks into the network, they still won’t have SSH access.
- I do the same, but with Wireguard instead of OpenVPN. The performance is much better in my experience and it sucks less battery life.

33 comments