Comment on Self Hosting- Security recommendations
frongt@lemmy.zip 8 hours ago
Connect via VPN instead of reverse proxy. Don’t expose services directly if you can avoid it.
Comment on Self Hosting- Security recommendations
frongt@lemmy.zip 8 hours ago
Connect via VPN instead of reverse proxy. Don’t expose services directly if you can avoid it.
If you really need to expose something to the internet set yourself up an SSO/OIDC provider and have it sit in front of the service and have a deny-first policy in place, whitelist the known few IP’s that need to connect regularly or alternatively geoblock.