News for hackers. Stuff that matters.

A comment on A story on home server security. Parent comment

Re:A story on home server security by bakugo on Sunday January 05, 2025 @12:18PM (#42603239)
Important to note that, even if you use Tailscale, the firewall punching happens regardless, so you still have to make sure you either:

1. Have some external firewall outside of the Docker host blocking the port

2. Explicitly tell Docker to bind to the Tailscale IP only

[ Parent | on HN ]
Re:A story on home server security by aaomidi on Sunday January 05, 2025 @02:23PM (#42604257)
> the firewall punching happens regardless

Does it? I think it only happens if you specifically enumerate the ports. You do not need to enumerate the ports at all if you're using Tailscale as a container.

[ Parent | on HN ]
Re:A story on home server security by bakugo on Sunday January 05, 2025 @02:47PM (#42604431)
Oh, I didn't realize you meant running Tailscale in docker, my bad. Then yeah, that's safe.
[ Parent | on HN ]