So I’m relatively new to server hosting. (But experienced with remote web hosting from providers.) After about a year of fighting to run Nextcloud on a hosting company and finally losing everything from the cPanel vulnerability a few months ago, I broke down and launched my own home server. I’m looking for advice to maximize security.

CachyOS Linux with ClamAV Docker via Portainer Nextcloud (E2EE), Immich, DocuSeal and NoteTrace Routed through a domain and subdimains via Zero Trust Cloudflare Tunnel and Cloudflare DNS.

I have regular redundant backups both onsite and offsite with Duplicati.

My passwords for OS and all admin dashboards are extremely long, unique, random strings managed by Bitwarden.

I know just enough about this stuff to get into trouble. What else should I setup? I have little to no monitoring going on and don’t know much about that direction.

  • Possibly linux@lemmy.zipEnglish
    2·
    17 hours ago

    I’m not sure you know what SNMP is

    Also Iot devices aren’t really much of a threat. It doesn’t hurt much to put them on a separate vlan but the security issues are mostly unrelated to a local home network.

    Also don’t put things on the internet. That is generally a really bad idea and will bite you in the butt eventually.

    • NaibofTabr@infosec.pubEnglish
      1·
      9 hours ago

      I’m not sure you know what SNMP is

      Oops, I was definitely confusing that with ICMP. Good point.

      https://oneuptime.com/blog/post/2026-03-20-block-icmp-firewall-risks/view

      Also Iot devices aren’t really much of a threat.

      I consider it a threat if a device maps my local network, identifies the other devices I have connected, and/or monitors my network traffic and then sends a report on that back to its control server.

      Also don’t put things on the internet. That is generally a really bad idea and will bite you in the butt eventually.

      Ain’t that the truth. We really should just not.