[-] psoul@lemmy.world 3 points 2 days ago

Alright everyone, thank you so much for your thoughtful recommendations! To sum it up, here's what I have done:

  • I used let's encrypt's Certbot to get my SSL certs and setup https, auto-renew every 3 months and I setup a reminder to update Certbot every month.
  • I setup a permanent redirect from http to https in Apache
  • I installed a firewall on the Pi, only 80, 443 and [22 from my computer to the RPi] are open. I couldn't find the firewall settings on my router but I assume they exist since I had to forward 80 and 443 there.
  • installed the following plugins: WordFence and WP Fail2Ban
  • changed the user password on the pi to a better longer one

I think I should be all set, shouldn't I?

[-] psoul@lemmy.world 1 points 2 days ago

Sweet thanks! Will add that ASAP

[-] psoul@lemmy.world 1 points 2 days ago

Noted ! I’ll make sure to set https up.

Tbh, I haven’t heard the word firewall since probably 2005… would my router have a firewall built in or is that something I need to add on, let’s say, the RPi ?

[-] psoul@lemmy.world 1 points 3 days ago

What does WordFence provide that makes it a must have?

[-] psoul@lemmy.world 2 points 3 days ago

Wow lots of info. I’ll check all of this out. You have a good point that I don’t need wordpress. Hugo looks interesting, thanks for the advice!

And yes, as said above, I’ll look into the free SSL certs to setup https.

[-] psoul@lemmy.world 1 points 3 days ago

Your first point is a good point. I guess it’s ok for now if my rough location is accessible. It’s not like my art is worth anything.

Regarding upload speed, yeah I know it could become an issue but since it’s just a portfolio website, I don’t expect more than a dozen visits a month.

[-] psoul@lemmy.world 1 points 3 days ago

Thanks, I’ll look into it. I didn’t know there were free SSL certs out there

45

Hello. I’m pretty new here. I just managed to get my Raspberry Pi setup at home to selfhost a simple website that will act as my portfolio for some art I do.

I’m using WordPress to make the content of the website, meaning it runs on Apache, MariaDB and MySQL in the background. It’s connected via port 80 since I don’t want to pay for SSL certificates to setup https. There will be no accounts or transactions happening on my website. I don’t have anything to manage my dynamic IP but I’ll figure that out later. I’ve deleted the default Pi user on the RPi.

Are there security issues I should address preemptively? I’m worried for instance that I am exposing my home network, making it easier for someone to breach into whatever is connected there.

Any tips on making sure my setup is secure?

[-] psoul@lemmy.world 5 points 4 days ago

Probably a computer. I still don’t know if I want a laptop or a desktop. Still don’t know if I want to stay with Apple products or try something new. The frameworks laptops look cool but not the best bang for the buck. I also assume the tariff will kill the supply chain of spare parts which makes them attractive in the first place.

[-] psoul@lemmy.world 46 points 1 month ago

Girl, step into any sports themed gay bar. We are still dressing like this.

[-] psoul@lemmy.world 45 points 1 month ago

As the waves from ocean, the music crashes on the beaches in your ears

[-] psoul@lemmy.world 47 points 1 month ago

And in the darkness of the earth, Melkor twisted the bees with all his malice. This is how the race of wasp came to be.

[-] psoul@lemmy.world 59 points 6 months ago

The title is the first punch but this line is the KO.

I can either get shot in a war overseas or I can get shot by some active shooter while I do a lesson about the Revolutionary War.

view more: next ›

psoul

joined 9 months ago