Self-Hosting Security Guide for your HomeLab
When most people think about self-hosting services in their HomeLab, they often think of the last mile. By last mile I mean the very last hop before a user accesses your services. This last hop, whether that’s using certificates or a reverse proxy, is incredibly important, but it’s also important to know that security starts at the foundation of your HomeLab. Today, we'll work our way up from hardware security, to OS, to networking, to containers, to firewalls, IDS/IPS, reverse proxies, auth proxies for authentication and authorization, and even lean in to an external provider like Cloudflare.
A HUGE thanks to Micro Center for sponsoring this video!
New Customers Exclusive – Get a Free 240gb SSD at Micro Center: https://micro.center/0ef37a (paid)
★ Subscribe! https://l.technotim.live/subscribe
★ I'm Live on Twitch https://l.technotim.live/twitch
★ Get Help in Our Discord Community! https://l.technotim.live/discord
★ Subscribe to Techno Tim Talks! https://l.technotim.live/subscribe-ttt
★ Documentation found here https://l.technotim.live/docs
__________________________________________
⚙ Gear Recommendations ⚙
► https://l.technotim.live/gear
(Affiliate links may be included in this description. I may receive a small commission at no cost to you.)
__________________________________________
♦ Patreon https://l.technotim.live/patreon
♦ GitHub https://l.technotim.live/github
♦ Twitch https://l.technotim.live/twitch
♦ Twitter https://l.technotim.live/twitter
♦ Discord https://l.technotim.live/discord
♦ Instagram https://l.technotim.live/instagram
♦ Facebook https://l.technotim.live/facebook
♦ TikTok https://l.technotim.live/tiktok
__________________________________________
00:00 - Intro
01:10 - Advertisement
02:06 - Don't Self-Host
02:27 - Disclaimer
02:33 - Self-Hosted VPN
02:57 - Public Cloud
03:24 - The Last Mile
03:50 - Hardware
04:28 - Virtual vs. Bare Metal
04:56 - Operating System
05:47 - Container Security
06:58 - Container Tags
08:07 - Network Segmentation
09:32 - Firewall & Port Forwarding
10:11 - Cloudflare (Reverse Proxy)
11:26 - Cloudflare Settings & Stats
11:58 - Cloudflare + Conditional Port Forwarding
13:24 - Cloudflare Firewall Rules
13:46 - IDS and IPS
15:03 - Internal Reverse Proxy
15:53 - Auth Proxy (Authentication and Authorization)
16:42 - Security Overview
17:07 - Are you going to Self-Host?
17:41 - Stream Highlight "I'm big in the Netherlands (not)"
#SelfHosted #HomeLab #Security
"Overzealous Punch" is from Harris Heller's album Sunset.
https://l.technotim.live/sb-music-license
Icons in this video have been created by Freepik from flaticon https://www.flaticon.com/authors/freepik
Видео Self-Hosting Security Guide for your HomeLab канала Techno Tim
A HUGE thanks to Micro Center for sponsoring this video!
New Customers Exclusive – Get a Free 240gb SSD at Micro Center: https://micro.center/0ef37a (paid)
★ Subscribe! https://l.technotim.live/subscribe
★ I'm Live on Twitch https://l.technotim.live/twitch
★ Get Help in Our Discord Community! https://l.technotim.live/discord
★ Subscribe to Techno Tim Talks! https://l.technotim.live/subscribe-ttt
★ Documentation found here https://l.technotim.live/docs
__________________________________________
⚙ Gear Recommendations ⚙
► https://l.technotim.live/gear
(Affiliate links may be included in this description. I may receive a small commission at no cost to you.)
__________________________________________
♦ Patreon https://l.technotim.live/patreon
♦ GitHub https://l.technotim.live/github
♦ Twitch https://l.technotim.live/twitch
♦ Twitter https://l.technotim.live/twitter
♦ Discord https://l.technotim.live/discord
♦ Instagram https://l.technotim.live/instagram
♦ Facebook https://l.technotim.live/facebook
♦ TikTok https://l.technotim.live/tiktok
__________________________________________
00:00 - Intro
01:10 - Advertisement
02:06 - Don't Self-Host
02:27 - Disclaimer
02:33 - Self-Hosted VPN
02:57 - Public Cloud
03:24 - The Last Mile
03:50 - Hardware
04:28 - Virtual vs. Bare Metal
04:56 - Operating System
05:47 - Container Security
06:58 - Container Tags
08:07 - Network Segmentation
09:32 - Firewall & Port Forwarding
10:11 - Cloudflare (Reverse Proxy)
11:26 - Cloudflare Settings & Stats
11:58 - Cloudflare + Conditional Port Forwarding
13:24 - Cloudflare Firewall Rules
13:46 - IDS and IPS
15:03 - Internal Reverse Proxy
15:53 - Auth Proxy (Authentication and Authorization)
16:42 - Security Overview
17:07 - Are you going to Self-Host?
17:41 - Stream Highlight "I'm big in the Netherlands (not)"
#SelfHosted #HomeLab #Security
"Overzealous Punch" is from Harris Heller's album Sunset.
https://l.technotim.live/sb-music-license
Icons in this video have been created by Freepik from flaticon https://www.flaticon.com/authors/freepik
Видео Self-Hosting Security Guide for your HomeLab канала Techno Tim
Показать
Комментарии отсутствуют
Информация о видео
Другие видео канала
![Unlock the Power of Your Mac with This Case](https://i.ytimg.com/vi/70Ad49CkPms/default.jpg)
![Build your own DVR with Plex Server! #plex #homeserver #antenna](https://i.ytimg.com/vi/0HxtccUFtm8/default.jpg)
![NEW 45 HomeLab HL15 at the Creator Storage Summit](https://i.ytimg.com/vi/CUvtDV6_AcE/default.jpg)
![45 Homelab HL15 by 45Drives - First Look #homelab #homeserver](https://i.ytimg.com/vi/edDxYXgN4R4/default.jpg)
![The BEST Tools for Windows! - PowerToys Tutorial](https://i.ytimg.com/vi/aynPEUO3fl0/default.jpg)
![Power Over Ethernet is AWESOME! #homelab #minipc #poe](https://i.ytimg.com/vi/qM1HUfcQJvA/default.jpg)
![My New Mini PC #homelab #minipc](https://i.ytimg.com/vi/clWEqMfnoV4/default.jpg)
![I Automated Watering My Lawn & Garden! #lawncare #automation](https://i.ytimg.com/vi/jjUxJH3NWRs/default.jpg)
![Meet Renovate - Your Update Automation Bot for Kubernetes and More!](https://i.ytimg.com/vi/5CkCr9U_Q1Y/default.jpg)
![I Built My Own Access Point #homelab #minipc](https://i.ytimg.com/vi/kd1QRnwwRKY/default.jpg)
![My Mobile HomeLab! (Travel Router with Proxmox, Docker, and OpenWRT)](https://i.ytimg.com/vi/02gYwJ2G-vE/default.jpg)
![Low Power, Efficient, but Powerful Mini Cluster! #homelab #minipc](https://i.ytimg.com/vi/H1uCUO1XrBU/default.jpg)
![Silent, Efficient, Low power PC or Server #homelab #automation](https://i.ytimg.com/vi/fWhu7Ou6jZc/default.jpg)
![Meet Scrypted - Stream ANY Camera to ANY Home Hub](https://i.ytimg.com/vi/x1xsFRQYSv0/default.jpg)
![Low Power Cluster - Small, Efficient, BUT Powerful!](https://i.ytimg.com/vi/8DeG3qO-HIA/default.jpg)
![Building a Low Power, All-in-One, Silent Server](https://i.ytimg.com/vi/Aq6eoMjW7V0/default.jpg)
![Automate Cloudflare with Terraform and GitHub Actions! - Terraform Tutorial for Beginners](https://i.ytimg.com/vi/FmYvrxYvBP0/default.jpg)
![Configuring VLANs, Firewall Rules, and WiFi Networks - UniFi Network Application](https://i.ytimg.com/vi/v0B2IDEfnjA/default.jpg)
![Scaling the PiKVM - Using the Raspberry Pi PiKVM with Multiple Machines](https://i.ytimg.com/vi/aOgcqVcY4Yg/default.jpg)
![Deploying Machines with MaaS and Packer - Metal as a Service + Hashicorp Packer Tutorial](https://i.ytimg.com/vi/lEqD3mRcqSo/default.jpg)
![The EASIEST way to Expand Your ZFS Pool in TrueNAS (But is it the Best?)](https://i.ytimg.com/vi/Uzk6Janio0g/default.jpg)