As noted, I am looking for safe ways to "verify" that any open port is secure. I have OMV 7 setup, using docker, and have setup Mealie, Jellyfin, Nextcloud AIO, etc. all following walkthroughs and months of research (so ports 80, 443, 3478 and 51280 are forwarded to the server). I have a DNS sub-domain and Nginx Proxy Manager for reverse proxy to the server destination of the containers mentioned. Currently I have NPM setup with SSL Let's Encrypt with an access list assigned to each proxy host only letting access from my Local LAN IP range (which I verified by switching to mobile network on my phone and can no longer access), but I can change it to public and access all these instances outside the LAN. Everything is secured with passwords, etc. So it all works. Yay!
So I *think* I have everything setup correct *BUT* I am new to all this and don't know what I don't know, so I am hoping there are trusted ways to test or scan if all my open/forwarded ports and public instances are reasonably secure? From all the reading I have done I know there is always more security that can be added, but it is for home use so HTTPS/reverse proxy, strong passwords, and dual authentication (at least on nextcloud) seem sufficient. I just want to make sure it's all setup fully.
Nextcloud AIO has a security scanner (scan.nextcloud.com) which gives my private cloud server an A+ rating. But that seems to be focused on the patch level/version of nextcloud.
Anyway, I don't want this new hobby to turn into a problem! I'd rather learn the slow, steady way, not the painful, made a mistake way! Thanks for any suggestions!
submitted by
/u/Augurbuzzard [link] [comments]