Let’s do another round of this. What’s going on on your servers, any cool things? How’d the recent CVE flood tangent you and did it change how you see/do stuff?
Let’s do another round of this. What’s going on on your servers, any cool things? How’d the recent CVE flood tangent you and did it change how you see/do stuff?
Hey, thank you for the comment!
That makes sense, that I would be tightening security on the LAN. It’s not just one machine, I have a Raspberry Pi 4 as well running a flavor of Debian (and the Synology NAS), so I would assume a firewall on both the Raspberry Pi and my NUC would make sense? I don’t have any VMs that I’m aware of, and I’ve heard of VLANs but don’t know anything about those.
Services don’t always have to be available! It’s just me and my partner who are accessing them, so nothing like a lot of people who need media playback. I’ll have to weigh if it’s worth fighting with the NAS over auto reboots, but I’m leaning towards yes as an experiment. I’ll have to actually look into how to do unattended Debian security updates, though.
I think for that use case, Firewalls on the hosts make sense. VLAN is not a bad idea either, though you’d need a managed switch (hardware) for that.