• cm0002OP
      link
      fedilink
      English
      arrow-up
      4
      ·
      3 days ago

      Good thing I built my own so I don’t gotta ask…unless…I was sleep coding…

      • ByteOnBikes@discuss.online
        link
        fedilink
        arrow-up
        2
        ·
        3 days ago

        Would love how you approached it.

        I’m stuck where I want security, but my family wants ease. So while I’m okay with tunneling into my own private network, my family struggles and don’t even use something if it’s not stupidly simple.

        • cm0002OP
          link
          fedilink
          English
          arrow-up
          4
          ·
          3 days ago

          I just throw everything behind my reverse proxy and work on hardening that server and then wrapping authentication with Authentik SSO. Then I just block anything outside the US at CF. You really just need to worry about making it too difficult for the script kiddies and mass scanners. People with real skill are going to focus their time on businesses and other high value targets

          But if I didn’t want to do all that, I already have a device management platform deployed out (ManageEngine Endpoint Central (free for up to 25 devices)) so I’d just enforce a VPN that way then they wouldn’t have to think about it

    • ByteOnBikes@discuss.online
      link
      fedilink
      arrow-up
      6
      ·
      3 days ago

      Does any of the data go into the cloud? If so, assume it’s being shared.

      Even if they say they don’t share it, or that it’s anonymous, or that a company “values privacy” – assume the worst.

      • hesh@quokk.au
        link
        fedilink
        English
        arrow-up
        3
        ·
        edit-2
        3 days ago

        Guaranteed they will use all cloud-connected data how they want behind the scenes, no matter what they promise

  • reddig33@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    3 days ago

    Currently only with a warrant. But who knows what the future holds.

    Keeping my eye out to see if someone spins up an open source solution to repurpose these for local encrypted storage, rather than creating ewaste out of them.