• 0 Posts
  • 5 Comments
Joined 4 months ago
Cake day: June 17th, 2026
  • esperal@pawb.socialtoSelfhosted@lemmy.world•For users with public facing services: How does the current explosion of AI-discovered vulnerabilities affect your threat model and willingness to be public facing?English
    6·
    3 days ago

    This was the final push that convinced me to rebuild my server from scratch! I started doing so 3 weeks ago :D

    I was running my containers on a single good old Debian, that I replaced with Proxmox. I set up several VM that don’t share anything between them :

    • One for all the services I don’t really care about, like game servers and utilities with no personal data.
    • A second one for services in need of a GPU passthrough (Immich and Jellyfin) and partial access to some of my data (photos and movies in this case)
    • And a third one that gets access to all my personal data, only hosting a container for WebDAV access and a web file browser. I might hide these two services behind a VPN in the future if I feel like doing so, for now it is still to practical to have them freely available…
    • A last VM is running network related app like my reverse proxy.

    I should have done this years ago, but I’m still learning and learning costs time :p

    Next I want to hide all of Internet facing services behind an identity provider/application proxy (I don’t really know if it is the right way to name it ?) like Authentic to totally block access to any content from unauthorized visitors.

    I guess I’ll be mostly fine once this is done ^^