psoul

joined 9 months ago
[–] [email protected] 3 points 2 days ago (2 children)

Alright everyone, thank you so much for your thoughtful recommendations! To sum it up, here's what I have done:

  • I used let's encrypt's Certbot to get my SSL certs and setup https, auto-renew every 3 months and I setup a reminder to update Certbot every month.
  • I setup a permanent redirect from http to https in Apache
  • I installed a firewall on the Pi, only 80, 443 and [22 from my computer to the RPi] are open. I couldn't find the firewall settings on my router but I assume they exist since I had to forward 80 and 443 there.
  • installed the following plugins: WordFence and WP Fail2Ban
  • changed the user password on the pi to a better longer one

I think I should be all set, shouldn't I?

[–] [email protected] 1 points 2 days ago

Sweet thanks! Will add that ASAP

[–] [email protected] 1 points 3 days ago (3 children)

Noted ! I’ll make sure to set https up.

Tbh, I haven’t heard the word firewall since probably 2005… would my router have a firewall built in or is that something I need to add on, let’s say, the RPi ?

[–] [email protected] 1 points 3 days ago (2 children)

What does WordFence provide that makes it a must have?

[–] [email protected] 2 points 3 days ago

Wow lots of info. I’ll check all of this out. You have a good point that I don’t need wordpress. Hugo looks interesting, thanks for the advice!

And yes, as said above, I’ll look into the free SSL certs to setup https.

[–] [email protected] 1 points 3 days ago (1 children)

Your first point is a good point. I guess it’s ok for now if my rough location is accessible. It’s not like my art is worth anything.

Regarding upload speed, yeah I know it could become an issue but since it’s just a portfolio website, I don’t expect more than a dozen visits a month.

[–] [email protected] 1 points 3 days ago (1 children)

Thanks, I’ll look into it. I didn’t know there were free SSL certs out there

 

Hello. I’m pretty new here. I just managed to get my Raspberry Pi setup at home to selfhost a simple website that will act as my portfolio for some art I do.

I’m using WordPress to make the content of the website, meaning it runs on Apache, MariaDB and MySQL in the background. It’s connected via port 80 since I don’t want to pay for SSL certificates to setup https. There will be no accounts or transactions happening on my website. I don’t have anything to manage my dynamic IP but I’ll figure that out later. I’ve deleted the default Pi user on the RPi.

Are there security issues I should address preemptively? I’m worried for instance that I am exposing my home network, making it easier for someone to breach into whatever is connected there.

Any tips on making sure my setup is secure?

[–] [email protected] 5 points 5 days ago (2 children)

Probably a computer. I still don’t know if I want a laptop or a desktop. Still don’t know if I want to stay with Apple products or try something new. The frameworks laptops look cool but not the best bang for the buck. I also assume the tariff will kill the supply chain of spare parts which makes them attractive in the first place.

[–] [email protected] 6 points 3 weeks ago (5 children)

Ok any tips on how to manage email addresses to minimize their exposure and spam?

[–] [email protected] 1 points 3 weeks ago

Well I’m there. If one if them joined then they would not be able to sat what I said

[–] [email protected] 6 points 3 weeks ago (2 children)

Non of my IRL friends are on mastodon. So there’s that.

[–] [email protected] 8 points 3 weeks ago (1 children)

I call it the cinco de mayo revenge: Laughing Cow cheese (it’s French) melted in a tortilla.

view more: next ›