Comment on Ways to Expose Services Publicly
lazylemons@lemmy.today 1 week ago
Recently set up caddy myself, very straightforward setup. You essentially just edit one config file and point your domain host to the right place and are good to go. Took me by surprise actually.
pineapplelover@lemmy.dbzer0.com 1 week ago
Yeah but my main concern is security. If I publicly have services like jellyfin or something then I would think I would have constant exploits and bot attacks
frongt@lemmy.zip 1 week ago
You will.
Anything you expose should be designed for it (e.g. not jellyfin). You should have a WAF configured for the type of service you’re hosting. You can’t just drop one and have it magically protect you, they take configuration. Same with fail2ban.
And you should have these services in a DMZ, so that a compromise in one doesn’t provide an entry point to other resources on your network.
lazylemons@lemmy.today 1 week ago
Oh for sure. I would only do so if you have a proper firewall running, a DMZ set up. Among other precautions.