As the title says, I want to know the most paranoid security measures you’ve implemented in your homelab. I can think of SDN solutions with firewalls covering every interface, ACLs, locked-down/hardened OSes etc but not much beyond that. I’m wondering how deep this paranoia can go (and maybe even go down my own route too!).

Thanks!

  • @easeKItMAn
    link
    English
    611 months ago

    Rotating passwords only for web services. Vaultwarden does make it easy. Not all services allow 2FA.

    • @[email protected]
      link
      fedilink
      English
      211 months ago

      Sounds still excessive but that’s what the thread is here for.
      Would probably understand it more if I knew more aspects.

      Cheers to more cybersec :)

      • @easeKItMAn
        link
        English
        211 months ago

        Guessing it is more a habit from back in time when ssl certification wasn’t common. Panic of MITM attacks, friends sharing their trusted access to other friends, etc. all contributed to my actual status of paranoia.
        Don’t make me reconsider my cybersec approach ;)