• 0 Posts
  • 4 Comments
Joined 2 years ago
cake
Cake day: September 14th, 2023

help-circle

  • Daily on my Gentoo server, through a Cronjob every morning. It’s a custom script though, so there’s more than just doing an emerge update. It’ll send me ntfy notifications for the update results, if there are new news items, and if there are any time config merge updates to make. A few other things as well but that’s the main stuff.

    Other servers, typically weekly or only manually when I ssh into them (for the ones I don’t really feel the need to update frequently).



  • My personal advice, secure it down to only permitting what needs it, regardless of your trust to the network.

    Treat each device as if they’ve been compromised and the attacker on the compromised device is now trying to move laterally. Example scenario: had you blocked all devices except your laptop or phone to your server, your server wouldn’t have been hacked because someone went through a hacked cloud-connected HVAC panel.

    I lock down everything and grant access only to devices that should have access. Then on top of that, I enable passwords and 2FA on everything as if it were public… Nothing I self host is public. It’s all behind my network firewall and router firewall, and can only be accessed externally by a VPN.