Hacker News new | ask | show | jobs
by capableweb 1290 days ago
First step if you're hosting it at home is separating your home connection from your business connection, physically. If you don't have that, do at least two VLANs.

Second step, don't expose anything unless you explicitly know what it's for. Start with everything 100% locked down, and only open things up you know want to be open. If you're just hosting a "home" cloud, nothing have to be exposed externally, so expose nothing. Otherwise go service/port by service/port to expose things.