Hi, my current setup is the following

Windows server pc with hyperV (it’s a weird choice I know but I wanted to experiment with stuff I’m also using at work) hosting some VMs:

  • OPNSense (doing dhcp server)
  • owncloud (personal cloud)
  • pihole

Till yesterday I had a fix public IP to reach my owncloud via port forwarding from my work laptop and as well my two desktop (outside my network)

Can you suggest a more secure way of doing it? Any general other suggestion to make my setup better?

Thank you

PS: i have no budget constrain but I’m usually not prompt to waste money :D

  • N0x0nEnglish
    01·
    10 months ago

    Till yesterday I had a fix public IP to reach my owncloud via port forwarding from my work laptop and as well my two desktop (outside my network)

    Disable that port forwarding on your router, and install a wireguard server and forward that port only.

    It’s free and works like a charm. It’s simple and elegant, and I can access all my containers from everywhere in the world!

    Dunno your work policies, and what you’re allowed to setup or not, but this is the “best way” I know.

    • PeroBasta@lemmy.worldOPEnglish
      1·
      10 months ago

      Any guide you suggest? I don’t speak very well “Linux” but I can follow procedures and build on that

      • N0x0nEnglish
        1·
        10 months ago

        It has been a while since I setup my wireguard server, if you host it on a linux system It can be easy as:

        • Install wireguard on your system
        • generate private/public key
        • create a wireguard config file with iptables rules
        • net.ipv4.ip_forward=1 on your server (yeah very important part)
        • open the wireguard UDP port on your router
        • configure clients

        The first time you delve into, it can be Intimidating (at that time I was a total CLI/linux noob) if you are a beginner, but I think you will easily find your way :)

        This tutorial seems rather complete and easy to follow with comments. Also, if you didn’t know, do not blindly copy/past the commands from the web directly in your CLI.