this post was submitted on 25 Oct 2023
1 points (100.0% liked)

Self-Hosted Main

504 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
1
Is Accessing Pi-hole via IP and HTTP Risky? (alien.top)
submitted 1 year ago by pumpkin_sexy@alien.top to c/main@selfhosted.forum
1 comments fedilink hide all child comments
 

I deployed Wireguard (using PiVPN) and Pi-hole on my Ubuntu Digital Ocean server. I can go to the Pi-hole settings with my IP address by adding '/admin' after it, and it's not secure (HTTP).

Is this unsafe since everyone can access the /admin page?

I have not added any custom firewall rules on DigitalOcean yet.

you are viewing a single comment's thread
view the rest of the comments
[–] Tharunx@alien.top 1 points 1 year ago

Dude i did the same thing. Trust me. I thought who would attack or care about my digital ocean droplet. But just after some time i was attacks happening. So many bots tried to use my DNS server to DDoS some websites they targeted. I can see the queries going from few thousands to hundreds of thousands. This also affected all the devices using the DNS because it became slow. Internet loaded slower. I tried changing a few settings and at last tried to allow only certain IP addresses i allowed. But just after a day, i cannot see any queries . I cannot see anything. It’s hijacked. This is entirely a bad idea. You must host your DNS over private network such as VPN