

All I do:
- Run updates daily
- Disable password logins
- Run sshguard
- Daily backups to a cloud and off-site host
I think that’s it. I have my host exposed to the Internet. As far as I know, it’s fine.
BTW, sshguard is for the IMAP and SMTP that run on the host, which do allow password logins. But it helps reduce load from brute force attacks on port 22 (which are pointless anyway).
I’m much more worried about my son installing dodgy Minecraft mods, or my wife installing another app that she saw on TikTok. I really should put them each on a separate VLAN…




Hold it… are all of these government workers being paid to go to a prayer meeting? 🤔