So I’m relatively new to server hosting. (But experienced with remote web hosting from providers.) After about a year of fighting to run Nextcloud on a hosting company and finally losing everything from the cPanel vulnerability a few months ago, I broke down and launched my own home server. I’m looking for advice to maximize security.

CachyOS Linux with ClamAV Docker via Portainer Nextcloud (E2EE), Immich, DocuSeal and NoteTrace Routed through a domain and subdimains via Zero Trust Cloudflare Tunnel and Cloudflare DNS.

I have regular redundant backups both onsite and offsite with Duplicati.

My passwords for OS and all admin dashboards are extremely long, unique, random strings managed by Bitwarden.

I know just enough about this stuff to get into trouble. What else should I setup? I have little to no monitoring going on and don’t know much about that direction.

I hope this sort of post is ok. I’m looking for a comic strip I saw the other day (which may or not been here, I follow comics in multiple places) which depicted a woman walking her dog and stopping at a food truck and still buying the food even after she found out that they kill puppies with every purchase, because “it’s sooo good!”

It could have been a metaphor for many things going on today, but I can’t remember where I saw it and can’t find it here. Can anyone help find it?

(And sorry if this is not allowed.)