As the title says, I want to know the most paranoid security measures you’ve implemented in your homelab. I can think of SDN solutions with firewalls covering every interface, ACLs, locked-down/hardened OSes etc but not much beyond that. I’m wondering how deep this paranoia can go (and maybe even go down my own route too!).

Thanks!

  • easeKItMAn@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    ·
    10 months ago

    Rotating passwords only for web services. Vaultwarden does make it easy. Not all services allow 2FA.

    • Appoxo@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      1
      ·
      10 months ago

      Sounds still excessive but that’s what the thread is here for.
      Would probably understand it more if I knew more aspects.

      Cheers to more cybersec :)

      • easeKItMAn@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        10 months ago

        Guessing it is more a habit from back in time when ssl certification wasn’t common. Panic of MITM attacks, friends sharing their trusted access to other friends, etc. all contributed to my actual status of paranoia.
        Don’t make me reconsider my cybersec approach ;)