zlacker

It's also common practice to do what everyone here recommends and out things behind a firewall.

The seperation of control and function has been a security practice for a long time.

Port 80 and 443 can be open to the internet, and in 2024 whatever port wireguard uses. All other ports should only be accessible from the local network.

With VPS providers this isn't always easy to do. My preferred VPS provider. However provides a separate firewall which makes that easier.