Polar Night starts
Polar Night starts
To day, the sun sets and will not rise before mid-January.
Read more
Securing a web facing VPS/VM
Setting up a VM or a VPS is easy. But you need to make it secure, and that is hard. Here we discover 2 of the basic tools UFW and Fail2ban. This post is about setup, making it safe and secure and the results running for a day. This is the first step when setting up a new web facing VM or a VPS.
Private Domain with Technitium
To use friendly names instead of IPs. Set up a Private Domain with Technitium. We set up a Domain Name Server ns1 and configure it to handle our domain, example.com or mylab.lan. Options for later: DHCP, a cluster with at least ns1 and ns2 for redundancy, and add ad-blocking if that's needed.
Security for SSH
SSH is the quintessential tool for server administration. But, most servers and VPS are installed with less than optimal settings for SSH. We don't want root to be able to log in, it's a security vulnerability. We don't want to allow the use of passwords for nobody to log in to our servers/VPS.
Tailscale running in a LXC
One way to use Tailscale on Proxmox servers for remote access is to use a Proxmox CT (LXC) and it will be unprivileged for security reasons. Using one LXC we can reach all our devices on the remote site securely. Tailscale makes WireGuard mesh networking easy.