I setup wg-easy, am I exposed somehow to the attacks?
reddit / selfhosted

----------------------------------------------------------------------
No_Connection1258 · 2023-11-23 18:10

I configured wg-easy on my home-server (docker installation) and want
to check if I missed something security-wise:

- I port-forwarded UDP 51820 on my router
- I have a domain which I purchsed, it's managed in Cloudflare and I
created an A record pointing to my WAN IP.
- Not sure if it matters, but all I have for my `wg.domain.com` is a
username/password authentication and it's secured with an SSL
certificate, which is obviously only valid inside of my LAN.

I currently assume that since I port-forwarded a UDP port, people
can't try and access `MY_WAN:51820`. Is it somewhat correct?

Any tips on this would be great. I'm not interested in exposing my
setup to the internet, all I want is a secure VPN to sometimes access
my network from my phone.

By the way, huge props to wg-easy, very quick and simple setup.