107
How "secure" is your setup? (lemmy.dbzer0.com)
submitted 1 month ago by to c/selfhosted@lemmy.world
63 comments fedilink hide all child comments
 

What setups/softwares do you use to secure your server?

All I do is run the process as user with no login shell.

The topic came to mind after reading this post Is Authelia enough without fail2ban or crowdsec?

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 1 point 1 month ago (1 child)

You have Authentik guarding your Wireguard key on a public server?

I'm not sure how this is different from having Authentik on your home server, unless the point is to hide your IP address

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 1 month ago

    Not Authentik, something home made. Wireguard is unfortunately open for the whole world but as far as I know there has not been any security whole in it. But Wireguard is at least a security product. It is not about hiding my public IP. It is about closing the attack surface. Bots cant connect to my home server at all. This means zero days vun cant be used. Yes, Oracle server can be compromises but it itself cant connect to my home server and it cannot authenticate any user as it does not have my phone to do that. It just generate an internal adress that is only accessible when connected with Wireguard. So only those I manually add have a chance and I will notice if the source IP is wrong or if it was not generated by that server as I use public key that is just base64 encoded url

  • permalink
  • fedilink
  • source
  • parent