Comment on Is webmin safe to hsve accesible over the web
Andres4NY@social.ridetrans.it 3 hours ago @slazer2au @DrunkAnRoot So long as tailscale doesn't get RCEs.. https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html
Attachment: thehackernews.com ↗
slazer2au@lemmy.world 3 hours ago
OK, but if your threat landscape is someone burning 2 zero days (one tail scale, one webmin) you aren’t likely to be posting here for answers you will have security people on call.
Geofencing is always a good option for remote access, no point in allowing someone from Spain to login when you are in Germany.
@slazer2au I'm just pointing out that tailscale isn't immune to security issues either. Maybe sticking webmin behind tailscale is the correct way to go, or maybe it's better to set up a heavily-restricted reverse proxy and keep the webmin user(s) off of the OP's private tailscale network.