66
How much do you secure a home server that's only accessible with VPN? (programming.dev)
submitted 4 months ago by to c/selfhosted@lemmy.world
30 comments fedilink hide all child comments
 

I have a VPS that I secure as much as possible since the IP is public, but does a wireguard-access-only homelab warrant the same efforts? Those with homelabs like this, what do you do?

you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 4 months ago (3 children)

Security through obscurity is not sufficient. It's also not nothing.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 4 points 4 months ago (2 children)

    Wireguard doesn't respond to port scans so it changes nothing

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 11 points 4 months ago* (1 child)

    Assume a security researcher finds a bug in wireguard that, if sent a malformed packet, it can crash the service. Then it would be trivialy easy to send that packet to the default port on every IP address and just crash everything for fun.

    It costs me nothing to increment the port by 1 and avoid all that drama.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •