someone in a Facebook group just share a screenshot of his…
Nguyễn Minh Hiếu@homelab_hieu
someone in a Facebook group just share a screenshot of his Portainer, on public IP, no login, asking "how to secure?" bro. it is already too late. wipe it, put it behind Tailscale or WireGuard, then we talk. please :(
Get the best of #self_hosted weekly
One email each Monday with the most useful posts. No spam; unsubscribe in one click.
Comments
Sign in to join the conversation.
Sign in to commentArash Karimi@arash_403
Half of the exposed servers I see in Shodan from our region are exactly this. My friend, Docker socket open to the internet is root on the host. There is no "secure it" after that, only reinstall.
Nguyễn Minh Hiếu@homelab_hieu
no no, his server become part of a botnet and then attack MY server. his freedom is my problem :D
Brett Hollister@brett_hsv
simple rule in my house: if it has a web UI, it does not get a port forward. period. VPN first, then you can look at it. my 2 cents
Wolfgang Engel@dsgvo_wolf
And check for data. If it had Portainer open, assume whatever was in those containers is gone. If any of it is other people's personal data, that is a breach, not a bad day.