• 0 Posts
  • 37 Comments
Joined 3 years ago
cake
Cake day: August 19th, 2023

help-circle



  • I have been thinking about it until I realize that nginx still can have zero days vulnerabilities that could be even in the tls layer or so and decided to actually close the port completely in the Firewall and just run Wireguard on devices. And as fallback I have external program that have a webbserver with qr code with link and ip query encrypted so when i scan it on smartphone i have to follow the link to internal server that i only can access with Wireguard so then only that public ip is then added to my Firewall rules temporary.










  • Mio@feddit.nutoSelfhosted@lemmy.worldThoughts on crowdsec
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    edit-2
    2 months ago

    Yes, that is the hard part. But it can be done. Geoip blocking like only allow your country - blocking every China or Russian user etc. If you are selfhosting at home and worry about your SSH access, then you can do a lot of things to block then early. It is all about authentication. Lets say you require VPN access in - example Wireguard. You could require access only through somebody else, like Cloud flare tunnel. You could also do “port knocking” but that is not encrypted. You could require the user first has to be authenticated somewhere else, like require first Microsoft login and only then your ip is allowed.




  • It is about reasonable defaults. Why would anyone want to stop their presentation for Windows update reboot? It should be much more friendly how it handles this. Like always check what the user is doing and when is a reasonable time to do it? Maybe at the end of the day.

    Personally, I think they need to work on the whole concept. Make it as transparent as possible or less likely need a full reboot - containers or put more things in like wsl? Make the reboot only do reboot and not 20min installing updates… The user cant even chat on teams or browse the web while waiting. Think if it worked like like live cd that Linux can do.




  • I wanted to say Kubuntu but cloud not during the transition to Wayland. A few key features were missing. That required kde 6 to be fixed. At the time the next Kubuntu version were a LTS release so it was not going to include kde 6. Only solution were to choose something else that offered that but still were not bleeding edge. Fedora were the answer. Kept using since then. Also alogns a little better with my value of how things should be done like not so bloated , no snaps fight and BTRFs for backup.