I’d love to see your website btw!
I’d love to see your website btw!
Yeah! That’s cool, I haven’t had any issues so far.
Everyday I get a bunch of logs of bots trying to access files and folders that don’t exist. It seems that they are targeting wordpress sites because all the files start with ‘wp-’ for example, some tried to access ‘wp-admin/credentials’, but since my site isn’t wordpress I’m not worried. Besides, I’m pretty sure that I could implement some rules on the firewall or even on nginx to block access to said directories by (for example) redirecting them to a different page.
I’m learning docker now. I found a whole video about the reverse proxy capabilities of nginx and docker, so I’ll be checking that out.
My goal is to have my own homelab and expose some services to the internet, or maybe even set up my own vpn so that I may access and configure things on my network from somewhere else.
I’m still struggling with the port forward thingie, and while Cloudflare tunnels are a nice thing to have, they protect me too much. I want a public IP address that I can use and register on a DNS, or ssh directly into my network from anywhere in the world. As I mentioned, I want to be able to shoot myself in the foot without actually doing so, (hopefully).
Yeah, it was kinda scary. I had never hosted anything online, and all of the sudden I get bombarded with scans and attacks from everywhere.
But I know I can’t lose anything important, and that this is expected on the internet.
It was just, uh… You know the feeling when someone tells you something is heavy, then they give it to you, and it’s a bit heavier than you expected? And they go: “I told you it was heavy”. And it’s not a big deal, because in the end you just adjust your strenght to match that weight. But there’s that one second of realisation where you go “ooop! What’s this?”. Yeah, it was kinda that.
Thanks! I’ll keep all of that in mind. I knew there were a lot of bots and scripts running rampant on the internet, but I was really surprised when I put my website online and suddendly became a target.
It’s good to know I’m not really at risk and that this is expected. I’ll try to learn more about cybersecurity
RIP
(I’mma pray for you)
Also, is there any particular reason why my decision to use NGINX stood out to you? Is it a good start?
I wanted to use APACHE at first (really trying to go for that old internet experience) but decided to use NGINX because the learning resources were more readily available, (and I kept hearing “NGINX” everywhere)
Thanks! I appreciate your concern.
This website is just a personal fun project, and I haven’t got anything to lose if it gets compromised. On the contrary I’ve gained a lot so far, and I might gain even more if something bad were to happen to it.
No one can hack into the knowledge and experience I’ve gained so far.
If you’ve got any advice on security tools, good practices, etc. I’d appreciate them! I may lack the knowledge, but not the will to learn more
Thanks! I’ll check it out!
This is truly a treasure trove! Thanks a bunch. I read the intro and I completely agree with you. That’s the reason why I’m doing all this. I wan’t to be able to make my own website in the most self-sufficient way possible, and then share the knowledge with as many people as I can so that they may as well open their own websites.
I miss the old internet, hence the style of my website.
Thank you!
Thanks!
Uhhhh… Prayers?
So far the only protection I’ve got is running it through a cloudflare tunnel. And that’s it.
Nice!! I agree with you. The experience is more personalized. You can show people who you are, and show them that you’re not just another default template. I loved the gifs btw. Are you self hosting it or is it on a vps?
Btw, how did you do the side panel menu-thingy? I’d appreciate if you just pointed the direction, I’ll read the docs myself
You got me
I’ve been raw-blogging all week B)
Yes! I actually like that style a lot more. It’s lighter, without bloat, and minimalist. Only html and css.
And I’d like to say “yeah, I wrote it all by hand btw”
Sure thing! Also, when you’re prompted to input the protocol type use HTTP, not HTTPS, cloudflare will turn it into HTTPS. But my website gave me the error 502 because of that.
Thanks a bunch!
I will certainly consider this, I had no idea nginx created these log files.
If anything, I can just rm
them into oblivion right?
Now, I have a question.
If I port forward and someone gets into my kvm/qemu virtual machine, is there a way they could leave that environment and compromise the rest of my home network? The only port I’d be opening would be port 80, nothing more
Definitely!
You get to learn a lot, and most importantly, you become self suficient and free. No need to depend on corporations to manage your services, because you can do that yourself.
Want your own cloud? Just run and configure nextcloud on your server :D
Want your own personal blog? Make it yourself!
It’s so fun!