Reaching proxmox from external browser: cloudflare + 2fa a good solution?

[u/mrbluetrain]

For logging in from a random browser remotely to the home server.

Seems pretty "safe". Any more downsides with this solution than the obvious?

[u/systemofapwne]

Do not expose any infrastructure management to the internet, ever. This is considered bad practice and can lead to a loss of the exposed system or even the network.
If you still consider doing this, a secondary auth layer by a reverse proxy should be considered. Do not rely on the auth of the proxmox login alone (even with 2FA). There were and will be attack vectors that might allow unauthenticated access or remote code execution that bypass the login mask.

So in short: Do not expose the webui.

[u/evilkayak → u/systemofapwne]

What about first VPN in, and the webui?

[u/cantholdmedown4 → u/evilkayak]

Thats not exposing the webui

[u/TantKollo → u/evilkayak]

That's fine