I have a VPS that I secure as much as possible since the IP is public, but does a wireguard-access-only homelab warrant the same efforts? Those with homelabs like this, what do you do?
I have a VPS that I secure as much as possible since the IP is public, but does a wireguard-access-only homelab warrant the same efforts? Those with homelabs like this, what do you do?
Anything that I publicly expose, I have protected with multiple layers up and down my entire stack…
https://corelab.tech/cybersecroadmap/
This is such a nice overview. Thank you for sharing!
No worries, hope it helps, let me know if you have questions =)
I access my home server with Jellyfin exclusively via Tailscale. Until now, I thought I was safe, as I haven’t opened anything to “the open internet”. After reading your very nice guide, I feel like I forgot a lot. Supposed I trust Tailscale, is that enough?
Oh sorry, I’m late coming back to you but I went on summer holidays and have been enjoying the outdoors a lot =)
Using a VPN is a very safe way to do things. Tailscale is very well regarded in the homelab community and trusted. I personally prefer using raw wireguard myself, so no metadata or 3rd party metrics can be collected or sold, but Tailscale uses wireagurd under the hood so it’s very secure.