Re:Tech Independence
by 6ak74rfy on Monday September 18, 2023 @01:57AM
(#37552717)
It depends on how you technology/security savvy you are.
For instance, here is everything I do:
- Use an open source firewall+router (== Opnsense) and not commercial routers (such as Netgear, Tp Link etc.)
- Open up port 80 and 443 on the firewall.
- Both the ports go to a Traefik reverse proxy that is configured to always redirect port 80 to 443.
- Traefik then reverse-proxies requests to relevant Docker containers.
- Auto-update Traefik every day (through Watch Tower).
- Use Authelia, with 2FA, where I can for the publicly available services.
I assume I am reasonably secure but I've also built this over a few months. You may not get there right away, so start small and slow and don't go crazy early on.
For instance, here is everything I do:
- Use an open source firewall+router (== Opnsense) and not commercial routers (such as Netgear, Tp Link etc.) - Open up port 80 and 443 on the firewall. - Both the ports go to a Traefik reverse proxy that is configured to always redirect port 80 to 443. - Traefik then reverse-proxies requests to relevant Docker containers. - Auto-update Traefik every day (through Watch Tower). - Use Authelia, with 2FA, where I can for the publicly available services.
I assume I am reasonably secure but I've also built this over a few months. You may not get there right away, so start small and slow and don't go crazy early on.