4 posts tagged with “security”
Every Docker host in my homelab had published container ports bound to the whole LAN with no firewall at all. Here's how I found it and fixed it with iptables DOCKER-USER rules.
Rolling out VLAN and firewall zone segmentation across a previously flat homelab network, plus the wireless side effect that took a night of live troubleshooting to actually root-cause.
Ansible's password lookup plugin was silently regenerating Zabbix PSK keys every time Semaphore ran the playbook, causing agents to lose encrypted connectivity. Here is the root cause and the fix.
Learn how to expose self-hosted services to the internet without opening firewall ports, using Cloudflare Tunnel for enhanced security and DDoS protection.