2
how safe i am?
(alien.top)
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
For Example
We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.
Useful Lists
You've already taken a great step by setting up Cloudflare tunnels, as that will obfuscate your WAN IP, but a common mistake I see a lot is having another random device on a network that is perhaps using a DDNS that doesn't obfuscate A records or something like that.
Basically, just make sure everything that is public/internet-facing is going through CF tunnels and you're as protected as you can (reasonably) can be - from that angle at least.
Keep in mind though, this just (largely) prevents one vector of attack - through your WAN IP - depending on your set-up, you could (and likely do) have other ways of penetration to get into your network.
I am a big proponent of getting something like a Firewalla to mitigate many other vectors. They're bit pricey (though for their capabilities relative to other "off the shelf" devices, not really, I suppose) but largely hands-off.