Selfhosted

46321 readers

833 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago

MODERATORS

HybridSarcasm@lemmy.world

HybridSarcasm@lemmy.hybridsarcasm.xyz

If Nothing is Exposed, Am I Safe? (lemmy.dbzer0.com)

submitted 1 week ago* (last edited 1 week ago) by No_Bark@lemmy.dbzer0.com to c/selfhosted@lemmy.world

16 comments fedilink hide all child comments

Hello most excellent Selfhosted community,

I'm very new to this and am confused about how vulnerable my server and/or home network is with my current setup.

I just got a basic server up and running on a machine with proxmox and a DAS for 10tb of storage. I've got two LXCs running for a docker deployed arr stack and jellyfin+jellyseer stack. The proxmox server is connected to a router attached to a fiber ONT. Everything is accessed over the home LAN network and that's it.

Everything is working correctly and my containers are all talking to each other correctly via ip addresses (gluetun network on the arr stack container). I've been reading up on reverse proxies and tailscale to connect to the server from outside my LAN network, and it's mostly gone over my head, but it did make me concerned about my network security.

Is my current set up secure, assuming strong passwords were used for everything? I think it is for my current uses - but I could use a sanity check, I'm tired. I'm open to any suggestions or advice.

I own a domain that I don't use for anything, so it would be cool to get reverse proxy working, but my attempts so far have failed and I learned I'm behind a double NAT (ONT and router) - and attempts to bypass that by setting the ONT into bridge mode have also failed. I don't really need to access anything from outside my home network right now - but I would like to in the future.

you are viewing a single comment's thread
view the rest of the comments

[–] hoshikarakitaridia@lemmy.world 17 points 1 week ago

This is probably the best answer. If everything is truly only running on local network and nothing is exposed with a port through your router, you are very safe.

Most issues get introduced when running a server exposed to the Internet.

That said, on the lowest level, if they want to get you, they will. It's all a risk analysis. And the more interesting you are to adversarial parties, the higher the chances you'll get pursued.

If you're Edward Snowden, 99% your calls and conversations are always on record.

If you're John Doe, truly only your ISP cares when they get a law enforcement request because you really pushed the envelope.

Trending movies are notoriously bad, because movie studios will really try to rake in the revenue.

On the other hand, ripping music from YouTube, no one cares or is able to track it, so risk is very low.