Straight talk for securing and using HA publicly. Need advice, not hate.
I am not trying to start a firestorm here, and I appreciate all of your input.
Im techy, homelabber etc. I do IT for a living, but security is generally not my strongest part (and not part of my day job in its nitty gritty form.
Ive had HA now for many years, love it to peices. Many thanks to you all that help me all the time, even by just reading everything here.
I have my HA box on an intel NUC, behind an NPM instance, and the firewall is opnsense with geoip blocking nothing but my country, and crowdsec on it as well.
I have my device(s) and my wife and two kids phones on it. I use GPS and all sorts of stuff on their devices to do automations. Its been great, and they are on board.
I have over the last number of years observed about a dozen failed attempts to login into my instance. Thats it.
But it seems like thats changing, getting alerts every 12-24 hours that its being attempted.
So, I think its time to rethink the whole thing and get straight talk on it all.
Looking into it, I have a few options but I want to have everyone chime in.
Nabu Casa - pay and just do that. Homelabber in my fights it, but ive spent more on dumber things...
Tailscale. Im already using it personally. Put it on my kids/wife phone and setup the proper ACL and move on with life. Should just function like normal, right?
Ive read a bit about crowdsec being installed on HA and talking to my opnsense router to pass on the blocks etc. Seems this is just kicking the can down the road though.
4.?
Again, not trying to start a war, just want some good discussion on the whys.
Appreciate it!