Security Question
reddit / selfhosted

----------------------------------------------------------------------
3dholic · 2023-11-29 12:05

I have a home server running truenas and a bunch of services. I am
looking for advice/feedback on whether I have done enough to secure my
home network while maintaining external access.

In order to access them I have set up a Cloudflare tunnel to my
server. This tunnel allows access exclusively to devices that are on
my VPN and originate from my home server address. I also allow access
via email verification with a country filter. Anyone outside of my
home country is denied access.

Does anyone see any issues with what I use or could harden it in
another way?

----------------------------------------------------------------------
TheITMan19 · 2023-11-29 13:07

I’d say the method you have used is pretty secure. Maybe focus on
internal to external access.

----------------------------------------------------------------------
NGL_ItsGood · 2023-11-29 15:58

Why do you have a cloudfare tunnel to home servers if the only thing
that can access it is your VPN that originates from your home address?
I may be misunderstanding you.

----------------------------------------------------------------------
3dholic · 2023-11-30 11:24

Fair question, I use it to get https for my vaultwarden instance. I
was too lazy to setup a proper cert

I can also, if required, access remotely via authentication if not on
my vpn for some reason but the vpn is used to allow some apps such as
nextcloud etc to work without needing a log in screen

----------------------------------------------------------------------
3dholic · 2023-11-30 11:26

thanks, what could I do to lock down internal apps?

----------------------------------------------------------------------
Ordinary_Employer_39 · 2023-12-01 02:05

This might be what you're looking for
https://github.com/NOXCIS/Wiregate