Guessing it is more a habit from back in time when ssl certification wasn’t common. Panic of MITM attacks, friends sharing their trusted access to other friends, etc. all contributed to my actual status of paranoia.
Don’t make me reconsider my cybersec approach ;)
Rotating passwords only for web services. Vaultwarden does make it easy. Not all services allow 2FA.
I’m somewhat paranoid therefore running several isolated servers. And it’s still not bulletproof and will never be!
Possibly Home Assistant is able to cover your devices and needs.
Guessing, millions of people will feel obligated to share their ID. Not everyone can be saved
Check if Lidarr adds an artist* image in artist folder or add an integration for fetching images.
Make sure the SQL server is not writing/blocking any files: docker-compose stop vaultwarden
Backup that specific folder to another destination and restart docker-compose up -d
I used VMs some time ago but never managed to look deeper into separation of bare metal vs VMs. Hence I can’t assess this reasonably.
Docker got me interested when it started and after discovering its networking capabilities I never looked back.
Basically I’m trying to minimize the possibility that by intercepting one dockerized service the attacker is able to start interacting with all devices. And I have lots of devices because of a fully automated house. ;) My paranoia will ensure the constant growth of privacy and security :)