I configured wg-easy on my home-server (docker installation) and want to check if I missed something security-wise:
- I port-forwarded UDP 51820 on my router
- I have a domain which I purchsed, it's managed in Cloudflare and I created an A record pointing to my WAN IP.
- Not sure if it matters, but all I have for my
wg.domain.com is a username/password authentication and it's secured with an SSL certificate, which is obviously only valid inside of my LAN.
I currently assume that since I port-forwarded a UDP port, people can't try and access MY_WAN:51820. Is it somewhat correct?
Any tips on this would be great. I'm not interested in exposing my setup to the internet, all I want is a secure VPN to sometimes access my network from my phone.
By the way, huge props to wg-easy, very quick and simple setup.