What are the most paranoid network/OS security measures you've implemented in your homelab?

MigratingtoLemmy@lemmy.world to Selfhosted@lemmy.world – 180 points –

As the title says, I want to know the most paranoid security measures you've implemented in your homelab. I can think of SDN solutions with firewalls covering every interface, ACLs, locked-down/hardened OSes etc but not much beyond that. I'm wondering how deep this paranoia can go (and maybe even go down my own route too!).

Thanks!

131

You are viewing a single comment
View all commentsShow the parent comment

Rotating passwords only for web services. Vaultwarden does make it easy. Not all services allow 2FA.

Sounds still excessive but that's what the thread is here for.
Would probably understand it more if I knew more aspects.

Cheers to more cybersec :)

Guessing it is more a habit from back in time when ssl certification wasn’t common. Panic of MITM attacks, friends sharing their trusted access to other friends, etc. all contributed to my actual status of paranoia.
Don’t make me reconsider my cybersec approach ;)