undefined | Better HN

0 pointssildur4y ago0 comments

> That dedicated server you have to manage (ensure security, install the software you need, keep it updated and secure etc). It’s not for everyone.

apt install unattended-upgrades. And Hetzner's firewall.

0 comments

dx0344y ago

And cloudflare tunnel which allows you to block even ports 80 and 443. The only attack vector is then through ssh but with passwords disabled I wouldn't worry too much about that.

speedgoose4y ago

By the way, unattended-upgrades is enabled by default nowadays.

j / k navigate · click thread line to collapse

0 comments

dx0344y ago

And cloudflare tunnel which allows you to block even ports 80 and 443. The only attack vector is then through ssh but with passwords disabled I wouldn't worry too much about that.

speedgoose4y ago

By the way, unattended-upgrades is enabled by default nowadays.

j / k navigate · click thread line to collapse