News for hackers. Stuff that matters.

A comment on CLI agents like Claude Code make self-hosting on a home server easier and fun. Parent comment

Re:CLI agents like Claude Code make self-hosting on a home s... by johnisgood on Monday January 12, 2026 @07:13PM (#46595860)
You do not need to exploit each layer because you traverse them. Tailnet access (compromised device, account, Tailscale itself) gets you to nginx. Then you only need to exploit Nextcloud.

LXC isolation protects Proxmox from container escapes, not services from each other over the network. Full disk encryption protects against physical theft, not network attacks while running.

And if Nextcloud has passkeys, HTTPS, and proper auth, what is Tailscale adding exactly? What is the point of this setup over the alternative? What threat does this stop that "hardened Nextcloud, exposed directly" does not? It is complexity theater. Looks like defense in depth, but the "layers" are network hops, not security boundaries.

[ Parent | on HN ]
Re:CLI agents like Claude Code make self-hosting on a home s... by butvacuum on Wednesday January 14, 2026 @12:51AM (#46612795)
And, Proxmox makes it worse in this case as most people won't know or understand that proxmox's netoworking is fundamentally wrong: its configured with consistent interface naming set the wrong way.
[ Parent | on HN ]