Page 1 of 1

Security and webservers

Posted: Wed Jun 18, 2014 1:21 pm
by user15163
I am thinking of turning my Pi into a webserver - nothing new here. But, I am concerned about the security side of running the server alongside a home network. Before I open up my pi to the web, what are the "do's and don't's" of setting a server up on the pi?

Re: Security and webservers

Posted: Wed Jun 18, 2014 1:24 pm
by RaTTuS
the same as any other computer ...
however disable the user pi
add another one
use keys to login not passwords
keep everything uptodate
only expose the services you need.

Re: Security and webservers

Posted: Thu Jun 19, 2014 8:10 am
by user15163
RaTTuS wrote:the same as any other computer ...
however disable the user pi
add another one
use keys to login not passwords
keep everything uptodate
only expose the services you need.

Ok, thanks.

Just in case anyone else is reading this, here are some links for the suggestions.
however disable the user pi
add another one
http://raspi.tv/2012/how-to-create-a-ne ... spberry-pi
http://raspberrypi.stackexchange.com/qu ... a-new-user
use keys to login not passwords
http://raspi.tv/2012/how-to-set-up-keys ... spberry-pi
keep everything uptodate
/ trying to find an auto-update tutorial..
only expose the services you need
Can you elaborate on this?