this post was submitted on 19 Oct 2023
2 points (100.0% liked)

Self-Hosted Main

502 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
2
how safe i am? (alien.top)
submitted 11 months ago by pastelstocking@alien.top to c/main@selfhosted.forum
22 comments fedilink hide all child comments
 

I’ve migrated from cloudflare pages to cloudflare tunnels as I wanted to do a little bit more.

I can’t segregate my network as my ISPs router is rather limited, which means no vLANs. Connecting another router would introduce a double nat as they don't allow bridging. So I'm running my website basically "raw" in a hyperV virtual machine. the website is semi-static and made out of flatfiles, therefore it's is quite impossible to login into it. as stated before i’m using cloudflare tunnels to expose a nginx server to the interner. what are the chances someone or something (bot) inflataring my network? 100% safety is not possible but how safe am i?

you are viewing a single comment's thread
view the rest of the comments
[–] amizzo@alien.top 1 points 11 months ago

You've already taken a great step by setting up Cloudflare tunnels, as that will obfuscate your WAN IP, but a common mistake I see a lot is having another random device on a network that is perhaps using a DDNS that doesn't obfuscate A records or something like that.

Basically, just make sure everything that is public/internet-facing is going through CF tunnels and you're as protected as you can (reasonably) can be - from that angle at least.

Keep in mind though, this just (largely) prevents one vector of attack - through your WAN IP - depending on your set-up, you could (and likely do) have other ways of penetration to get into your network.

I am a big proponent of getting something like a Firewalla to mitigate many other vectors. They're bit pricey (though for their capabilities relative to other "off the shelf" devices, not really, I suppose) but largely hands-off.