Re:Ask HN: How do you securely self-host a server?
by bravetraveler on Wednesday March 09, 2022 @08:08PM
(#30622070)
Most of the people doing this are on a LAN with a commodity firewall (modem/router combo)
I think their security posture mainly stems from being isolated in this way.
I've seen enough questionable suggestions like disabling the host firewall/SELinux that I doubt there are many layers to their security onion.
To be fair, I do rely on the network gateway too. It's pretty much all on my LAN, on a separate VLAN.
Additionally... most of my services are on a 'mesh' style VPN called Nebula. This lets the things I really need to access outside of home work while not being quite as exposed.
I think their security posture mainly stems from being isolated in this way.
I've seen enough questionable suggestions like disabling the host firewall/SELinux that I doubt there are many layers to their security onion.
To be fair, I do rely on the network gateway too. It's pretty much all on my LAN, on a separate VLAN.
Additionally... most of my services are on a 'mesh' style VPN called Nebula. This lets the things I really need to access outside of home work while not being quite as exposed.