46
Is webmin safe to have accesible over the web (sh.itjust.works)
submitted 1 week ago by to c/selfhosted@lemmy.world
46 comments fedilink hide all child comments
 

As the title says ive started running webmin. And i wanna know if its safe for me to reverse proxy (with 2fa) or should i just use tailscale or ssh to access it.

you are viewing a single comment's thread
view the rest of the comments
[–] 47 points 1 week ago (4 children)

It is almost always a bad idea to place a management interface on the internet. No level of strong password and multifactor auth will protect against an unauthenticated RCE which every language will get, including Perl.
Absolutely stick it behind tailscale.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 7 points 1 week ago (3 children)

    @slazer2au @DrunkAnRoot So long as tailscale doesn't get RCEs.. thehackernews.com/2026/10/unpa

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 11 points 1 week ago (1 child)

    OK, but if your threat landscape is someone burning 2 zero days (one tail scale, one webmin) you aren't likely to be posting here for answers you will have security people on call.

    Geofencing is always a good option for remote access, no point in allowing someone from Spain to login when you are in Germany.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 5 points 1 week ago

    @slazer2au I'm just pointing out that tailscale isn't immune to security issues either. Maybe sticking webmin behind tailscale is the correct way to go, or maybe it's better to set up a heavily-restricted reverse proxy and keep the webmin user(s) off of the OP's private tailscale network.

  • permalink
  • fedilink
  • source
  • parent