My self hosting journey is limited mostly by time. When I have it, I try out new setups or tweak my current one. Otherwise it’s just lower end maintenance and updates.
The last time I had ample time I managed to get a double WireGuard (both in and out) working, so that’s something I suppose.
I can’t see anything disagreeable in this summary from my own experience so far though. Great stuff!
I would argue that Linux is inherently much more secure than windoze, simply because of how it handles user space vs. System (root access vs. User access). Also by how transparent its configuration is and how much information is readily accessible detailing how it works and how to adjust things.
However, when talking security for anything above the average user’s browsing needs, it can get very complicated depending on what you are trying to achieve.
Think of it like building something to keep out honest people vs. to keep out hardened, knowledgeable, clever thieves. Obviously the latter is going to take more time and resources to achieve, while the need to keep out more sophisticated bad actors would probably only be needed if you have something they might want.
Here are some suggestions for searching if actual security is your goal. Others can chime in with more things if they want. This is just some topics/programs you can read about to dip your toes in.
Best of luck!
I keep getting this sinking feeling that this is all leading up to a precise and coordinated attack of evil.
Russia bombards the EU, the US attacks Greenland and Canada, while Israel finally bulldozes Gaza and Iran. China takes Taiwan and the south sea.
All at the same time so NATO is overwhelmed and can’t decisively defend it all without risking spreading too thin. No matter what happens, one of the bad guys gains ground.
I honestly have no idea if this is even possible, it’s based on a dream I had a few weeks ago.
Disturbing thought though.
Would it be safe to assume their processor/gpu magic that brought us the deck has advanced enough since then to compensate?
I’m no hardware guru, but wouldn’t it be possible to use a swap file or other methods to simulate extra ram if optimized and efficient enough?