this post was submitted on 21 Nov 2023
2 points (100.0% liked)

Self-Hosted Main

515 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
[email protected]
2
Securing my network (alien.top)
submitted 11 months ago by [email protected] to c/[email protected]
5 comments fedilink hide all child comments
 

Hi, I apologise if this isn't the right place to ask for advice or if I come across as stupid. I work in IT and have started to run my homelab. It's mainly local stuff like a NAS and media server but I do have a Home assistant instance running. I was always a hardware guy but with my role growing I felt I needed to learn about networking and how a network runs services on the Internet.

I own a domain and use NGINX to point to my HA box. Cloudflare points my domain to my local IP via plugin that watches for changes as I understand it. Currently Home assistant and NGINX are open on my router but I'm pretty sure I made them open only to the two static IPs running my services. Cloudflare seems to mask my local IP when pinging my domain but I'm sure there are ways around it.

I want to eventually run a Minecraft server and a few other bits as a hobby but I'm conscious of the security risk of opening up ports and exposing my servers to the Internet. Is there a way I can secure my network even more? Am I doing this wrong?

Again I apologise I'd this is the wrong place or I come off as stupid. While Networking and Hardware are my specialty at work, the buck stops at the router

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 11 months ago

Oh dude, yeah ChatGPT knows Linux and docker better than I do and I've been doing this sort of thing professionally for 15 years, lol. Whatever you need as far as writing scripts, invoking containers, or generally asking it questions, you can just consider it an expert network administrator and it can write all your scripts and whathaveyou.

One of the best moments this year was when I realized I never had to figure out how to write an iptables command again lol