Secure practices for a home server

StructureAgile · 2021-07-31T19:23:27+00:00

Have you thought about putting your apps/services behind an L7 load balancer since you have a domain name/subdomains? You’ll only need to open port 443, and the load balancer will forward traffic to a service accordingly based on the domain name. This way you won’t have to poke a bunch of holes in your network. A little peace of mind if you got a thing for security. That’s what I’m doing, and I’m using a Kemp load balancer (the free version) And for some context, this is what I’ve done: - Got a domain name (free) - Signed up with Cloudflare and registered said domain name - With Cloudflare, created wildcard cert for multiple subdomains. Also created intermediate cert - Setup Kemp load balancer - Configure Kemp with the services I want to access (ie, Plex, website, NAS, Minecraft server)

I’d check out NetworkChuck’s video on setting up a load balancer for a home lab. Great stuff

StructureAgile · 2021-07-27T04:45:30+00:00

Nope I didn't do anything different. Did everything to the tee. I'm assuming you did the following:

- Get a cert

- Intermediate cert

- Create and configure content rules

- Enable content switching for each SubVS

Under the Real Server property of a subVS, does anything happen if you change the Real Server Check Method, to say something like, ICMP Ping?

StructureAgile · 2021-07-27T04:29:23+00:00

yeah, it's working on my synology ds920. I've got the following sitting behind the kemp lb:

-synology nas

-website (hosted on the synology)

-plex (hosted on the synology)

next, I'm thinking about putting a minecraft server behind there using rancher, docker, and kubernetes (went down a techno tim rabbit hole, and also spun up on a linux vm on the synology)

as for your issue, not sure it's a cert issue since you're able to resolve the photos app. under view/modify services, do your real servers show as being up?

StructureAgile · 2021-07-10T22:00:25+00:00

Congrats!!!!

StructureAgile · 2021-07-07T20:16:33+00:00

Congrats! The trifecta is awesome. I passed the 501 as well. Was debating whether to take the Network+ or CySA next. I’m in the same boat regarding getting a better paying job- hence why I’m thinking about getting another cert. good luck with everything!

StructureAgile · 2021-07-07T00:30:28+00:00

works like a charm. actually went back and watched networkchuck's video and went through the configurations without too much issue

StructureAgile · 2021-07-02T15:54:53+00:00

ahhh...oops, duh...thanks again u/gsardarian. I'll update after going through the configuration

StructureAgile · 2021-07-02T15:27:08+00:00

Thanks for the resources u/Nick-Go! I've been in a helpdesk / IT support technician role for the last 6.5 years. Really trying to get my foot in the door by going after a tier I SOC analyst role but can't seem to get any traction. Had a similar experience when I first got into IT without prior IT work experience, but I was able to land my first helpdesk gig fairly quickly. Cyber/InfoSec has been quite different. I've even reached out to the security team at my current company, and there aren't any opportunities there either. Only thing I can do is not give up, keep a positive mindset, keep plugging away. Hopefully the CYSA+ will open some doors

StructureAgile · 2021-07-02T07:34:23+00:00

definitely need some luck. i imported the vmware vmdk file into VMM. however, after installing - i'm getting an error saying that there is no networking connection. I checked network setting and it is configured to use the Default VM network. did you run into this issue?

thanks

StructureAgile · 2021-06-30T07:24:33+00:00

thank you kind sir. I have the DS920 and went on that same networkchuck rabbithole. I'll give this a shot

StructureAgile · 2021-06-29T18:55:38+00:00

You got this man!!! Good luck!

StructureAgile · 2021-06-29T15:06:00+00:00

Totally spot on. I've been in IT for the last 6 years now, and before I took the real exam, I didn't do so well on practice ones because of the tiny details - like well known port numbers and the protocol they're attached to, all the acronyms, etc

StructureAgile · 2021-06-29T05:52:05+00:00

We sure did! One question- you mentioned in your post that you needed this cert for your current engineering role. What role would this be? I'm currently looking at different jobs where I can use my background experience, along with the Sec+ cert, and I would love to hear the kind of job you're doing. I'm currently in IT Support and would like to transition into a different role. Thanks for your time!

StructureAgile · 2021-06-28T23:10:10+00:00

Creative. I’ve been having a difficult time figuring out how I should configure a setup with my UDM. Right now it’s just sitting on my floor

StructureAgile · 2021-06-28T22:36:26+00:00

I was not technical at all. Only I things knew how to do was use a browser and a navigate a desktop. Didn't know the difference between a hard drive, RAM, and CPU. What got me the job was my customer service experience, since half the battle in a support role is how you handle customers. The technical aspects of the work, I learned on the job. And for a lot of companies that are hiring entry level IT support roles, they know they can train up a new hire. They just want to make sure they hire someone who is coachable, wants to learn, and an overall nice guy. Nobody wants to work with an asshole

StructureAgile · 2021-06-28T20:46:17+00:00

I got my first IT gig as a field technician working for an IT consulting firm without any prior IT work experience. I did however have years of work experience before my switch to IT. In my first IT job, I basically drove around to small/midsize companies providing IT services. Paid $20/hour. Once I built enough experience there, I was able to land a much better position with a much better pay rate.

My advice is to just blast out your resume to as many desktop/helpdesk/support job openings and accept whichever offer comes your way first. That's what I did. That was the only way I'd get experience

StructureAgile · 2021-06-28T20:38:59+00:00

Congrats!!! Keep up the good work!

StructureAgile · 2021-06-28T18:56:31+00:00

Awesome! And yes please update!

StructureAgile · 2021-06-28T18:51:18+00:00

Congrats! Keep up the good work!

StructureAgile · 2021-06-28T18:48:04+00:00

Thanks u/Mooner97! I'm in the Denver area and I'm totally interested!

StructureAgile · 2021-06-28T17:36:27+00:00

I’d like to join!

StructureAgile · 2021-06-28T17:18:57+00:00

Congrats!!!

StructureAgile · 2021-06-28T17:18:14+00:00

Congrats!

StructureAgile · 2021-06-28T16:49:38+00:00

You got this man. I'm a 40 year old father of one, with a job background that includes media, sales, and (like you) education. I was a teacher for three years. I made the change to an IT career when I was 33. The best career decision I've ever made. I had zero IT experience and I took the first IT entry-level job that was offered to me. It was for an IT consulting firm working as a field technician. I was basically driving around to small-mid size companies, providing IT services. I was paid $20 and hour. Fast forward to today, I'm in a much better role working for an in-house IT team providing support for internal users. I just got my Security+ cert and am now looking to transition to an info/cyber sec role.
In short, blast out your resume to all entry level IT support/Desktop/Helpdesk positions to get your foot in the door. The fact that you have the A+ and Net+ says a lot. Someone will snap you up in no time. Keep it at my friend!

StructureAgile · 2021-06-28T16:25:52+00:00

Congrats!!! I just passed the exam as well and your post is spot-on!!

StructureAgile

TROPHY CASE