ALostInquirer@lemm.ee to Selfhosted@lemmy.worldEnglish · 8 months agoHow much of what you self-host do you keep LAN only over making accessible across the internet?message-squaremessage-square94fedilinkarrow-up1109arrow-down14
arrow-up1105arrow-down1message-squareHow much of what you self-host do you keep LAN only over making accessible across the internet?ALostInquirer@lemm.ee to Selfhosted@lemmy.worldEnglish · 8 months agomessage-square94fedilink
minus-squarepHr34kY@lemmy.worldlinkfedilinkEnglisharrow-up8·edit-28 months agoEverything exposed except NFS, CUPS and Samba. They absolutely cannot be exposed. Like, even my DNS server is public because I use DoT for AdBlock on my phone. Nextcloud, IMAP, SMTP, Plex, SSH, NTP, WordPress, ZoneMinder are all public facing (and mostly passworded). A fun note: All of it is dual-stacked except SSH. Fail2Ban comparatively picks up almost zero activity on IPv6.
Everything exposed except NFS, CUPS and Samba. They absolutely cannot be exposed.
Like, even my DNS server is public because I use DoT for AdBlock on my phone.
Nextcloud, IMAP, SMTP, Plex, SSH, NTP, WordPress, ZoneMinder are all public facing (and mostly passworded).
A fun note: All of it is dual-stacked except SSH. Fail2Ban comparatively picks up almost zero activity on IPv6.