Security and webservers
I am thinking of turning my Pi into a webserver - nothing new here. But, I am concerned about the security side of running the server alongside a home network. Before I open up my pi to the web, what are the "do's and don't's" of setting a server up on the pi?
-
RaTTuS
- Posts: 10563
- Joined: Tue Nov 29, 2011 11:12 am
- Location: North West UK
- Contact: Twitter YouTube
Re: Security and webservers
the same as any other computer ...
however disable the user pi
add another one
use keys to login not passwords
keep everything uptodate
only expose the services you need.
however disable the user pi
add another one
use keys to login not passwords
keep everything uptodate
only expose the services you need.
How To ask Questions :- http://www.catb.org/esr/faqs/smart-questions.html
WARNING - some parts of this post may be erroneous YMMV
1QC43qbL5FySu2Pi51vGqKqxy3UiJgukSX
Covfefe
WARNING - some parts of this post may be erroneous YMMV
1QC43qbL5FySu2Pi51vGqKqxy3UiJgukSX
Covfefe
Re: Security and webservers
RaTTuS wrote:the same as any other computer ...
however disable the user pi
add another one
use keys to login not passwords
keep everything uptodate
only expose the services you need.
Ok, thanks.
Just in case anyone else is reading this, here are some links for the suggestions.
http://raspi.tv/2012/how-to-create-a-ne ... spberry-pihowever disable the user pi
add another one
http://raspberrypi.stackexchange.com/qu ... a-new-user
http://raspi.tv/2012/how-to-set-up-keys ... spberry-piuse keys to login not passwords
/ trying to find an auto-update tutorial..keep everything uptodate
Can you elaborate on this?only expose the services you need