A Raspberry Pi 5 in a 10 inch rack, built to learn networking and cyber security hands-on. Click any part of the rack to zoom in.
This site reaches you through a Cloudflare Tunnel. The Pi connects out to Cloudflare, so nothing on my home network is open to the internet.
Password logins are turned off. You can only log in with my key, and I tested that passwords get rejected.
UFW drops everything coming in, apart from the few things I've allowed from my home network and over Tailscale.
I manage the Pi from anywhere with Tailscale, an encrypted private network with 2FA on the account.
unattended-upgrades installs security fixes every day without me having to remember.
No IP addresses, hostnames or software versions are shown here, because those help attackers.
# Nmap scan of every TCP port from another device on my network $ sudo nmap -p- <the pi> Not shown: 65531 filtered tcp ports (no-response) PORT STATE SERVICE 22/tcp open ssh 53/tcp open domain 80/tcp open http 443/tcp open https # only what I opened in the firewall. Everything else gets no reply.