… None of these five things guarantees you’ll never have a problem — security doesn’t work that way. What they do is make your lab significantly harder to compromise, and if something does get in, they limit how far it can go and make sure you can recover. …
… These five changes will make your home lab harder to compromise, easier to recover, and safer to run day-to-day. Quick disclaimer: security is never guaranteed and it’s always changing. …
… You can conduct a failover from the destination NAS if the source data is compromised. …
… A security change that you can make to toughen the security if you leave SSH enabled is to enable autoblock . …
… Security is a moving target. If you think that you’re secure today, that doesn’t mean that you’ll be secure tomorrow. That’s why keeping your NAS up to date is incredibly important since updates can patch security flaws. …
… If you’re running a publicly accessible server, isolating it in a DMZ in pfSense limits how far an attacker can move if that server gets compromised. Keep pfSense updated. Security patches matter when you’re running an internet-facing firewall. …
… Two-factor authentication ensures that if your password is compromised, you have an additional layer of security that ensures your account cannot be accessed. …