Plex, Sonarr, Overseer etc on windows with no security at all
reddit / selfhosted

----------------------------------------------------------------------
Chriskob · 2023-10-09 15:42

Hello,

I have a home server running all the programs to serve media etc but I
have no security.
Im running windows10 and have no https to access Plex or my other
apps.

I have docker running but I'm not to good with it without step by step
instructions.

What would be the first step in securing my PC?
I'm also thinking about getting a domain name so I can stop using a
DDNS.

Thanks..

----------------------------------------------------------------------
thegreatincognitum · 2023-10-09 16:18

A domain name will help you with ssl certs for https, but it won't
give you a static IP unless you also migraine your whole setup to a
vps.

When you say you don't have any https access, does that mean your
services are only available inside the lan? Of so, your firewall is
securing your network, and no further security is strictly required.
If you're able to use plex, etc from outside your lan, then you're
going to want to set up some security. Fail2ban or crowdsec would be a
good start, maybe authalia or authentik, something like that. There
are plenty of guides out there, but if you don't have a solid grasp of
the docker concepts, they may not be granular enough.

----------------------------------------------------------------------
marwanblgddb · 2023-10-10 07:58

Ensure you have passwords to access sonarr (too many unprotected
sonarr on the Internet)

You can by a domain name, this will help you get a certificate for
your hosted apps. You can either use your registae DNS to point to
your apps.

You will most likely have to use ddns if you have a dynamic ip address
from your ISP. Either ask your ISP for a static ip (usually you have
to pay for it) or use a tunnel solution if you really really don't
want to use ddns.

The are many ways of accessing your services from the internet, so I'm
sure you'll find something that suits your needs, as long as you
remember to keep security a priority.

----------------------------------------------------------------------
rjames24000 · 2023-10-11 16:40

easy way to ensure youre not vulnerable is to make sure the only port
you open is the port for a vpn or similiar and then everything will
work locally once connected.. if i really want to expose things
publicly ill use a repo and a vps then expose my vps keeping my home
network secure