how can i make this better/more secure?
reddit / selfhosted

----------------------------------------------------------------------
ACuriousProgrammer · 2023-11-15 12:31

**Setup:**

Cloudflare cdn/dns ---> (ports open to the public not using tunnel)
oracle free tier (running nginx as a reverse proxy) ---> (using
zerotier to connect to my other servers from here)
\--path A--> to a raspberry pi in my home country running nextcloud
(also open to the internet as the cloudflare/oracle setup is still
new)
\--path B--> to another raspberry pi in my house again running as a
reverse proxy (not open to the internet) ----> a bigger server for
running proxmox and other projects (I am still learning how to use
this and also dont know how to work the networking yet)

​

**My Complaints:**

i wanted the cloud flare to hide my servers ips which is partly hy i
have the oracle proxy but cant because nextcloud wont allow public
uploads to use chunk uploading so bigger uploads gets blocked with
cloudfare proxy (100mb limit) so i need to pass it directly to the
oracle server exposing its ip

​

I want to block the nextcloud pi from the internet but afraid to do so
as i have no one i cant trust there to quickly solve issues if i lose
connections to it from zerotier or other issues. the reason i have the
nextcloud in another country mainly because of better internet and
cheaper electricity price but am thinking of moving it as a pi and
harddisk it not that energy consuming.

​

also i dont like my current setup, while i like that am using docker
compose for most of my services (except for nextcloud) i dont have a
central control method, i need to ssh to any of the servers i use to
update or fix or rerun a docker contianer

​

My Wish:

I would like to maybe have a kubernetes cluster as i want to learn how
to use it because its cool, currently learning how to use it on my
proxmox server (maybe i should simulate my entire setup on proxmox and
play from there?)

​

Thanks in advance,

Note I am still a biggener

----------------------------------------------------------------------
Jaska001 · 2023-11-16 07:54

Don't make it more complicated, simplify.

Is there legitimate reason you want to hide your IP? It will probably
leak at some point anyway.

I know this is not much help, but I like it simple :)

----------------------------------------------------------------------
GregPL151 · 2023-11-16 11:10

As a person working in Cybersecurity my setup is also a bit too
complicated based on what I see others have 😂 but I do not see a
free/cheap way to achieve what you want. All online CDNs will have
thresholds. If you need to do big uploads just expose it to the
internet, if you do not have a static public IP I would not care that
much. Easiest and most secure way would be to use VPN to your
nextcloud. If that is only you who is using it then it should not be a
big inconvenience I think.
With security it is the same as with any engineering, you have to
consider a lot of things and sometimes go for compromise between
security features/user experience/maintenance cost (effort) etc.