As the title says, I want to know the most paranoid security measures you’ve implemented in your homelab. I can think of SDN solutions with firewalls covering every interface, ACLs, locked-down/hardened OSes etc but not much beyond that. I’m wondering how deep this paranoia can go (and maybe even go down my own route too!).

Thanks!

  • lntlEnglish
    2·
    11 months ago

    npftables blocks all incoming except a particular set of ips. any connections from those ips hit pubkey authentication.

    I’ve never had a problem