I'm currently thinking about turning my dedicated machine i own in a datacenter into my new unRAID machine. This would serve me some shares that store data and some VMs for development purposes.
This will by no means have any sensitive data on it, basically nothing of value that i would cry after when i lose it or that anyone could do anything with.
I know that using a VPN would be the better way, but this is not possible in this case due to my router not supporting it and needing the software on every device that needs access, which is not possible.
Currently i have planned the following:
- Turning off anything on the server that i wont use (SSH/ Telnet/ FTP/ NetBIOS)
- Using my hardware firewall to filter out any traffic except the necessary ones (Open ports will be 80/ 443/ 445)
- Using a very strong password for root and any user that is connecting to my shares
- Not having any public shares
- Completely hiding the flash drive from being shared to anything, in the event where i would need to access it and cant connect to the server, i can have physical access by driving there
Is there anything i could do additionally to improve the security even further? Also is there any other ports unRAID needs to work correctly? I cant think of any but maybe someone with more experience has some in mind.
Greetings
