122
The Web is Going to Die (www.youtube.com)
submitted 1 year ago by to c/technology@lemmy.world
59 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 1 year ago (4 children)

I got 1gbps internet (symmetrical) and a raspberry pi cluster… running my own Wordpress never made more sense… AND that botch should scale!

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 1 year ago (3 children)

    You're comfortable port forwarding onto your own network?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 3 points 1 year ago (2 children)

    Yes, My home network setup is a bit complicated but I am using Pfsense so I have things on separate vlans with internal firewall rules to reduce risks.

    All traffic in on port 443 is routed from Cloudflare to an NginX reverse proxy which decides how to connect back into my network for things

    Years ago I would just run a server on the network with 443, 80 and 22 exposed directly to the world and never had any major issues. (Other than the normal automated attacks trying to gain shell access over SSH)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    Gotcha, vlan setup sounds like the best possible way to do it, I don't trust my security skills at all, 22 with fail2ban is about as far as I trust myself!

    The hammering 22 gets is astonishing though.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 1 year ago

    Most of these things are pretty secure out of the box.

    Even without fail2ban disabling root login and only allowing SSH key authentication makes those scripts just a waste of time for the attacker. That game is a low effort attempt to just get the low hanging fruit for botnets though.

  • permalink
  • fedilink
  • source
  • parent