Self Hosted - Self-hosting your services.

15037 readers

1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules

No harassment
crossposts from c/Open Source & c/docker & related may be allowed, depending on context
Video Promoting is allowed if is within the topic.
No spamming.
Stay friendly.
Follow the lemmy.ml instance rules.
Tag your post. (Read under)

Important

Lemmy doesn't have tags yet, so mark it with [Question], [Help], [Project], [Other], [Promoting] or other you may think is appropriate. This is strongly encouraged!

Cross-posting

!everything_git@lemmy.ml is allowed!
!docker@lemmy.ml is allowed!
!portainer@lemmy.ml is allowed!
!fediverse@lemmy.ml is allowed if topic has to do with selfhosting.
!selfhosted@lemmy.ml is allowed!

If you see a rule-breaker please DM the mods!

founded 4 years ago

MODERATORS

Zoe8338@lemmy.ml

dogmuffins@lemmy.ml

testman@lemmy.ml

[Question] What do you do to keep your server secure (lemmy.ca)

submitted 2 years ago by soullioness@lemmy.ca to c/selfhost@lemmy.ml

15 comments fedilink hide all child comments

For example, I prefer to use a VPN instead of port forwarding. And I use SSH for anything I used to use an FTP for.

you are viewing a single comment's thread
view the rest of the comments

[–] const_void@lemmy.ml 1 points 2 years ago (1 children)

Blacklist everything then whitelist the IPs you know you'll be connecting from (work, cell phone, etc). I don't connect from random places usually. If I need to then I use cellular. You might be better off with a VPN if you need to connect from random places.

[–] splendoruranium@infosec.pub 1 points 2 years ago (1 children)

Blacklist everything then whitelist the IPs you know you’ll be connecting from (work, cell phone, etc). I don’t connect from random places usually. If I need to then I use cellular. You might be better off with a VPN if you need to connect from random places.

I see, thanks!
Is there any concern with whitelisting a cellular CGNAT's public IP? Presumably that would potentially whitelist thousands or tens of thousands of other mobile devices at once, wouldn't it?

[–] const_void@lemmy.ml 0 points 2 years ago

Is there any concern with whitelisting a cellular CGNAT’s public IP?

It depends on how much you decide to whitelist. In my case I whitelist my cellular carrier's IP block. Which does expose those services a little more broadly but I'm willing to risk it.