

All I do:
- Run updates daily
- Disable password logins
- Run sshguard
- Daily backups to a cloud and off-site host
I think that’s it. I have my host exposed to the Internet. As far as I know, it’s fine.
BTW, sshguard is for the IMAP and SMTP that run on the host, which do allow password logins. But it helps reduce load from brute force attacks on port 22 (which are pointless anyway).
I’m much more worried about my son installing dodgy Minecraft mods, or my wife installing another app that she saw on TikTok. I really should put them each on a separate VLAN…




Unproven assertion.
Capitalism happened to be the dominant ideology (due to violent suppression of alternatives) during a period when many people were brought out of poverty.
Some other system or collection of systems might have worked worse, or better, or exactly the same.