As the title says, I want to know the most paranoid security measures you’ve implemented in your homelab. I can think of SDN solutions with firewalls covering every interface, ACLs, locked-down/hardened OSes etc but not much beyond that. I’m wondering how deep this paranoia can go (and maybe even go down my own route too!).

Thanks!

  • ipipipEnglish
    80·
    8 months ago

    Always on wireguard kills battery life on mobile for me so I guess that’s a no.

    • ErwinLottemannEnglish
      60·
      8 months ago

      that should not be the case because wireguard only ‘runs’ when it sends or receives packets. try setting the keepalive time a bit higher, 5 minutes maybe.