<![CDATA[For #homeLab and #SelfHosting people, I have a question - and that's when do you feel ready to make something available on the open web (even just hosting a static site)?]]>For and people, I have a question - and that's when do you feel ready to make something available on the open web (even just hosting a static site)?

I'm perhaps too much of a perfectionist or worry-wort, but I'm not sure I know when I'm 'safe' to do so. I'm doing the basics like:
- Regular updates/patching
- SSH passkey authentication
- Firewall

Is there anything else you think is essential to be safe, or do you just YOLO some containers up and assume it'll be OK and I'm being far too paranoid?

]]>https://board.circlewithadot.net/topic/b0dc5d01-4707-45e2-a386-39c6636b8757/for-homelab-and-selfhosting-people-i-have-a-question-and-that-s-when-do-you-feel-ready-to-make-something-available-on-the-open-web-even-just-hosting-a-static-siteRSS for NodeFri, 15 May 2026 06:29:54 GMTThu, 16 Apr 2026 18:14:08 GMT60<![CDATA[Reply to For #homeLab and #SelfHosting people, I have a question - and that's when do you feel ready to make something available on the open web (even just hosting a static site)? on Thu, 16 Apr 2026 18:43:40 GMT]]>@hl

I typically don't these days due to the proliferation of bullshit machine scrapers.

Everything is behind a VPN.

However, I'd definitely be using a robust full-ASN blocklist to firewall off the known bad actors before considering it, just from the noise perspective.

]]>https://board.circlewithadot.net/post/https://infosec.space/users/fennix/statuses/116415857961842762https://board.circlewithadot.net/post/https://infosec.space/users/fennix/statuses/116415857961842762Thu, 16 Apr 2026 18:43:40 GMT<![CDATA[Reply to For #homeLab and #SelfHosting people, I have a question - and that's when do you feel ready to make something available on the open web (even just hosting a static site)? on Thu, 16 Apr 2026 18:25:05 GMT]]>@hl If any of this sounds too tricky, reach out and we can talk and get this sorted via a call

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/heysupratim/statuses/116415784902841741https://board.circlewithadot.net/post/https://fosstodon.org/users/heysupratim/statuses/116415784902841741Thu, 16 Apr 2026 18:25:05 GMT<![CDATA[Reply to For #homeLab and #SelfHosting people, I have a question - and that's when do you feel ready to make something available on the open web (even just hosting a static site)? on Thu, 16 Apr 2026 18:24:41 GMT]]>@hl here is what you are going to do

You'll get a simple VPS. 2GB 2-4 core server.

You'll install Pangolin on it - https://pangolin.net

once pangolin is setup , add your home machine as a site on it. You will NOT open home machine to the public.

The pangolin client on your home machine will talk to VPS

On pangolin, you'll create a site - service.domainname.com that routes to your home machine at the docker containers local port number. You can easily add auth via pangolin too.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/heysupratim/statuses/116415783362030530https://board.circlewithadot.net/post/https://fosstodon.org/users/heysupratim/statuses/116415783362030530Thu, 16 Apr 2026 18:24:41 GMT<![CDATA[Reply to For #homeLab and #SelfHosting people, I have a question - and that's when do you feel ready to make something available on the open web (even just hosting a static site)? on Thu, 16 Apr 2026 18:21:28 GMT]]>@hl I was a yolo type, then I was 'forced' to add a badbotblocker + fail2ban + anubis. And reverse proxy, of course.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/po3mah/statuses/116415770711014005https://board.circlewithadot.net/post/https://mastodon.social/users/po3mah/statuses/116415770711014005Thu, 16 Apr 2026 18:21:28 GMT