Comment

Comment by tbyehl

In colo:

  nginx
  Plex
  Radarr / Sonarr / SABnzbd / qBittorrent / ZeroTier -> online.net server
  FreeNAS x2
  Active Directory

At home:

  nginx
  vCenter
  urbackup
  UniFi SDN, Protect
  Portainer / unms / Bitwarden
  Wordpress (isolated)
  Guacamole
  PiHole
  InfluxDB / grafana
  Active Directory
  Windows 10 VM for Java things
  L2TP on my router

Everything I expose to the world goes through CloudFlare and nginx with Authenticated Origin Pulls [0], firewalled to CF's IPs [1], and forced SSL using CF's self-signed certs. I'm invisible to Shodan / port scans.

Have been meaning to move more to colo, especially my Wordpress install and some Wordpress.com-hosted sites, but inertia.

[0] https://support.cloudflare.com/hc/en-us/articles/204899617-A...

[1] https://www.cloudflare.com/ips/

parent tbyehl 7 years ago

Comment by tbyehl

Discussion