News for hackers. Stuff that matters.

A comment on Removal of Heroku free product plans. Parent comment

Re:Removal of Heroku free product plans by dicriseg on Thursday August 25, 2022 @03:36PM (#32598897)
Im about to go down this path for fun with the saas template I’ve built for myself, but my concern is what am I going to screw up security-wise? Im not an expert by any stretch - I know the basics. I guess we’ll find out!

I just never worried about this with Heroku. I already use the paid tier there for some projects, but the writing seems to be on the wall, so I’m sampling the alternatives. Render is probably where I end up though.

[ Parent | on HN ]
Re:Removal of Heroku free product plans by jszymborski on Thursday August 25, 2022 @04:15PM (#32599419)
Ya, certainly a concern when going from well-funded org with hired experts to just yourself.

For myself, I just run automated security updates (uptime is not a pinnacle concern for me), do the basic fail2ban set-up, ensure I have a bit of reporting. Most importantly, I pray to Cthulhu I'm enough of a low-priority target that all I need to fend off is drive-by attacks.

I try as much as possible to isolate e.g. credentials and sensitive information from public infrastructure. Everything else that is more sensitive I stick behind tailscale, usually hosted at home on Pis or my NAS.

[ Parent | on HN ]