So setup a VPN
Comment on Is webmin safe to hsve accesible over the web
ITGuyLevi@programming.dev 1 day agoMy homelab stuff I like to be able to access from places that take all my free time (like work), making things accessible is a bit of a requirement for me.
funkajunk@lemmy.world 1 day ago
ITGuyLevi@programming.dev 1 day ago
Hmm… Where I work setting up a VPN on my work machine would not only break my workflow, it would probably cost me my job. Plus I’m not a big fan of giving computers I don’t control access to the internals of my network. Reverse proxies were invented for a reason, no reason not to use one.
asap@lemmy.world 21 hours ago I think you might be drastically misunderstanding what a reverse proxy does.
Reverse proxy: Gives EVERY computer a direct connection to your network if you make it public, which it certainly sounds like you mean.
VPN: gives only you access to your internals.
ITGuyLevi@programming.dev 12 hours ago
USB’s are another really big no-no where I work, and running a different OS on my work network would 100% throw a lot of flags in our SOC as it’s essentially plugging a rogue device into the network. In my understanding, a reverse proxy allows access to specific resources, if configured properly it only allows access to your DMZ.
VPNs allow you to become part of a virtual network (like one you aren’t physically connected to), frequently providing access as though you are directly connected to the whole network. I could set up a VPN to my DMZ I suppose, but that just feels weird as hell as the whole point of a DMZ is to be an area you allow the public internet to reach (sometimes requiring authenticating to the reverse proxy).
LewdLemon@sh.itjust.works 1 day ago
That’s fair, but I still can’t see how a VPN connection makes your stuff less accessible.
ITGuyLevi@programming.dev 1 day ago
Just by making it so I can’t access from a system I don’t control. Like say I need to retrieve a document from my house, but I’m in a SCIF, or a waiting room, or anywhere else I wouldn’t have my personal device, it’s super useful to just connect to something like Nextcloud and pull it down.
LewdLemon@sh.itjust.works 1 day ago
I didn’t say you should put your Nextcloud instance behind a VPN. Mine is public too.
I’m saying you should put your administrative access behind a VPN. SSH, reverse proxy admin panel, you name it. You need not do administrative stuff from work.
ITGuyLevi@programming.dev 1 day ago
Oh yeah, I 100% agree with that, honestly two VPNs are better given you wouldn’t want your normal VPN to terminate into your management vlan. I thought we were just discussing normal homelab stuff, all administrative stuff should really be oob.