punkskunk

Great work! Looks efficient and accessible.

Thanks, I agree with you and have a similar approach. I'm mostly interested in learning best practices, I don't bother hosting juicy targets like Bitwarden. If an attacker really wants to put in the work to get the scanned manual for my 2009 Black & Decker toaster oven I probably can't stop them.

Question from someone learning security - if no firewall ports are opened and UPnP is off, does running these sorts of services on your LAN substantially increase your attack surface? I imagined risks were minimal outside of running a compromised application.