Why Raspberry Pi/Linux
- I find that services can be run easily, such as a web server (which is what is serving these pages)
- Easy to be command line driven
SSH keys and passwordless remote logins.
Because this is on the internet directly, you should disable password remote logins and use SSH keys.
- ssh-keygen -C “Label”
- Using the .pub key as part of the Raspberry Pi Setup
Setting Up 44Cloud
- Create an account https://dashboard.44net.cloud
- Choose to create a tunnel. At this point, start the Wireguard configuration below, you’ll get some of the required details from the script.
Hardening Pi
- Wireguard, either manual or via script. The script below configures the raspberry pi to connect to Wireguard, sets up the firewall and other hardening.
- https://github.com/n3bkv/44net-cloud-wireguard-rpi
Network concerns and caveats
- There is no firewall between you and the internet once the tunnel is established.
- Don’t bridge between your home network, use a separate network or VLAN.
- The script above hardens your Pi.