Hardening Proxmox: Locking Down SSH, the Web UI, and Root Access on Your Homelab Host
Every other security decision in your homelab is scoped to one service. If Vaultwarden gets popped, you lose your passwords. If Jellyfin gets popped, someone can watch your movies. If your Proxmox host gets popped, the attacker owns every VM and LXC running on it, plus whatever network access those guests have. The hypervisor is the one layer where “harden it properly” isn’t optional homelab polish, it’s the thing that determines whether a bad day stays contained to one service or takes out the whole stack. ...