Hey all! For the longest time I’ve had a server that hosts some things (eg Syncthing), but is only available via SSH tunneling.
I’ve been thinking of self-hosting more things like Nextcloud and Vaultwarden. I can keep my SSH tunneling setup but it might make it difficult to do SSL.
How do you manage the security of having public-facing servers?
thank you so much for all the suggestions!
My biggest takeaway from all this is managed VPN solutions like Tailscale are cheap ($0), easy to set up, and lets me not expose ports to the outside world.