Our great sponsors
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
Yes, and no. Server security is a rather complex topic and covering it in a few sentences is impossible. Try to expose as few of your services as possible to the open web and also ensure they are well maintained - on your side (AKA update your stuff regular) and on the dev side. Seeing that the last github update was over ~6 months ago likely means there are unmitigated security risks. You can expect large projects like Plex, Nextcloud, Bitwarden(Vaultwarden), and others to be built well enough that they do not pose a significant risk. Anything else should only be accessible over a VPN. I am not talking about the commercial ones like PIA or NordVPN. These are mainly useful to circumvent geo restrictions, get better peering, and some other stuff. In terms of security, it does almost nothing despite what the ads claim. What I am talking about is running your own VPN server. Easily doable when you run a home server anyway by running a Wireguard script. By connecting to it remotely you will be able to access your home network as if you were at home although a bit bandwidth limited due to slow internet connections.