

All I do:
- Run updates daily
- Disable password logins
- Run sshguard
- Daily backups to a cloud and off-site host
I think that’s it. I have my host exposed to the Internet. As far as I know, it’s fine.
BTW, sshguard is for the IMAP and SMTP that run on the host, which do allow password logins. But it helps reduce load from brute force attacks on port 22 (which are pointless anyway).
I’m much more worried about my son installing dodgy Minecraft mods, or my wife installing another app that she saw on TikTok. I really should put them each on a separate VLAN…








I believe it.
I worked with an Englishman who has lived in the Netherlands for more than 20 years without learning Dutch.
We had a work trip to Madrid, and he went the weekend beforehand for a short vacation. I ran into him on Sunday night and asked him how it went. He said it was terrible, because he’s a vegetarian and couldn’t eat anything because nobody spoke English. He didn’t know what to order or how to ask if something was vegetarian. He was outraged that nobody spoke English. In Madrid. The capital of Spain. 🙈