this post was submitted on 23 Nov 2023
1 points (66.7% liked)

Self-Hosted Main

502 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
[email protected]
1
I setup wg-easy, am I somehow exposed to attacks? (alien.top)
submitted 10 months ago by [email protected] to c/[email protected]
3 comments fedilink hide all child comments
 

I configured wg-easy on my home-server (docker installation) and want to check if I missed something security-wise:

  • I port-forwarded UDP 51820 on my router
  • I have a domain which I purchsed, it's managed in Cloudflare and I created an A record pointing to my WAN IP.
  • Not sure if it matters, but all I have for my wg.domain.com is a username/password authentication and it's secured with an SSL certificate, which is obviously only valid inside of my LAN.

I currently assume that since I port-forwarded a UDP port, people can't try and access MY_WAN:51820. Is it somewhat correct?

Any tips on this would be great. I'm not interested in exposing my setup to the internet, all I want is a secure VPN to sometimes access my network from my phone.

By the way, huge props to wg-easy, very quick and simple setup.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 10 months ago

agreed on all of this however updating the docker container feels a little pointless with this one.. it's not been updated in over a year..

Unless, by updating it is actually pulling an updated wireguard.. do you know if thats the case?