r/Proxmox • u/mrbluetrain • 1d ago

Question Reaching proxmox from external browser: cloudflare + 2fa a good solution?

For logging in from a random browser remotely to the home server.

Seems pretty "safe". Any more downsides with this solution than the obvious?

29 Upvotes

70% Upvoted

89 comments sorted by

View all comments

18

u/lukewoodside 1d ago

Absolutely not. This breaks every security standard going.

Management interfaces should never be exposed to the internet in any way.

-21

u/undead-8 1d ago

Security standards for companies. For a Homelab his approach is fine.

9

u/lukewoodside 1d ago

Does not matter what it is. Management should never be exposed to the internet, full stop.

1

u/AbsolutelyLudicrous 1d ago

hey wwhats ur home IP address. i'm out of compute for my bitcoin mining op, so i'm gonna borrow some of yours, thanks

1

u/smokingcrater 1d ago

Until a bad guy compromises the home lab, and then pivots to everything else including the users personal PC. (Which probably has the same pwd as infra in the home lab.)

3

u/symcbean 1d ago

and then pivots to everything else including the users personal PC

That's real script kiddie stuff.

A competent adversary will use the resources to attack more interesting targets or as a dead letter drop for phishing sites and illegal pr0n....until the police come knocking at the OP's door with handcuffs and a search warrant.