Today security is more important than ever in the history of computing. Take it seriously and be prepared - a security breach is to happen any day. Hardening servers is the key to create secure environments where data is secure and systems work 24/7. Remember it's not if, but when.
Build
Security is very important, especially for home labs, we don't have the 24/7 IT-Security Staff to handle things. Several large attacks have recently been utilizing stolen credentials from home users. Yes, home labs are low-hanging fruit for hackers and especially wannabees.
Install
As SSH is our mostly used tool, we need to make it safe.
Install
We do not want to use root for everything, actually we can't allow it. We need admin groups and administration accounts. Furthermore, we need to segregate and use other users and groups with lesser privileges on our cluster and servers.
Install
It's common practice to harden any server beyond the typical 60-70% state they are at end of installation. Fail2ban is one of the tools. As all a home lab is a prime target, we need to take extra steps to secure the servers we have, exposed and not exposed ones alike.
Install
There is easy ways and there is smart ways. Today we take a look at the smart way. Usage of SSH-keygen and the config-file. Instead of typing: ssh [email protected] -p 12345, just type: ssh newwebsite.
News
SSH-keygen changed default algorithm and fixed security issues.
Remote Access
Configure SSH Tunnel (Port Forwarding) on macOS, Linux and Windows using OpenSSH. In this example, I will show how to tunnel an RDP connection traffic over OpenSSH.
Basics
Do you know who's on your network? Set up a Network Intrusion Monitor and you know. Used Pi.Alert but found an alternative, WatchYourLAN with Telegram or something.
Basics
Proxmox monitoring using #influxdb and #grafana running in a LXC container. Monitoring is a key part of the security and hardening process.
Basics
To secure the Proxmox node or cluster we need to set some user things on the OS level (Debian) and some more then in Proxmox. Having servers in a Data Center also needs some more security measures to be in place. Servers are key targets for hackers, gain access to thousands accounts in one go.
Remote Access
The Jump Box, Host or Server or a Bastion Host or Server. By create a highly secured, The Jump Box with web access and use it to jump to servers on a internal and dedicated network we only have 1 server exposed to the web not 5. #2FA #TUI #TOTP
Build
Yes, you need more than root. Security says busing root everyware isn't safe and that segregating of duty is a good way to hardening security.