What setups/softwares do you use to secure your server?
All I do is run the process as user with no login shell.
The topic came to mind after reading this post Is Authelia enough without fail2ban or crowdsec?
What setups/softwares do you use to secure your server?
All I do is run the process as user with no login shell.
The topic came to mind after reading this post Is Authelia enough without fail2ban or crowdsec?
If you’re talking about remote access specifically, I use tiers.
“Public” is open, but goes through crowdsec and anubis, and is on a DMZ network. This is my website, blog, Fediverse, etc.
“Private” is either secured with mtls or wireguard. This is stuff that’s only for me or family, like media or home assistant.
“Sensitive” is wireguard only. This is infrastructure management, Paperless, etc.