Inspired by this comment to try to learn what I’m missing.

  • Cloudflare proxy
  • Reverse Proxy
  • Fail2ban
  • Docker containers on their own networks

Another concern I have is does it need to be on a separate machine on a vlan from the rest of the network or is that too much?

  • jimmy90@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    2 days ago

    use a cheap vlan switch to make an actual vlan DMZ with the services’ router

    use non-root containers everywhere. segment services in different containers