Self-Hosting Security Guide for your HomeLab

Video Description

When most people think about self-hosting services in their HomeLab, they often think of the last mile. By last mile I mean the very last hop before a user accesses your services. This last hop, whether that’s using certificates or a reverse proxy, is incredibly important, but it’s also important to know that security starts at the foundation of your HomeLab. Today, we'll work our way up from hardware security, to OS, to networking, to containers, to firewalls, IDS/IPS, reverse proxies, auth proxies for authentication and authorization, and even lean in to an external provider like Cloudflare. Video Notes: https://technotim.live/posts/self-hosting-security/ Support me on Patreon: https://www.patreon.com/technotim Sponsor me on GitHub: https://github.com/sponsors/timothystewart6 Subscribe on Twitch: https://www.twitch.tv/technotim Become a YouTube member: https://www.youtube.com/channel/UCOk-gHyjcWZNj3Br4oxwh0A/join Merch Shop 🛍️: https://l.technotim.live/shop Gear Recommendations: https://l.technotim.live/gear Get Help in Our Discord Community: https://l.technotim.live/discord 2nd channel: https://www.youtube.com/@TechnoTimTalks A HUGE thanks to Micro Center for sponsoring this video! New Customers Exclusive – Get a Free 240gb SSD at Micro Center: https://micro.center/0ef37a (paid) (Affiliate links may be included in this description. I may receive a small commission at no cost to you.) 00:00 - Intro 01:10 - Advertisement 02:06 - Don't Self-Host 02:27 - Disclaimer 02:33 - Self-Hosted VPN 02:57 - Public Cloud 03:24 - The Last Mile 03:50 - Hardware 04:28 - Virtual vs. Bare Metal 04:56 - Operating System 05:47 - Container Security 06:58 - Container Tags 08:07 - Network Segmentation 09:32 - Firewall & Port Forwarding 10:11 - Cloudflare (Reverse Proxy) 11:26 - Cloudflare Settings & Stats 11:58 - Cloudflare + Conditional Port Forwarding 13:24 - Cloudflare Firewall Rules 13:46 - IDS and IPS 15:03 - Internal Reverse Proxy 15:53 - Auth Proxy (Authentication and Authorization) 16:42 - Security Overview 17:07 - Are you going to Self-Host? 17:41 - Stream Highlight "I'm big in the Netherlands (not)" #SelfHosted #HomeLab #Security "Overzealous Punch" is from Harris Heller's album Sunset. https://l.technotim.live/sb-music-license Icons in this video have been created by Freepik from flaticon https://www.flaticon.com/authors/freepik