2 related articles

In-depth analysis of Authentik security with port forwarding for self-hosted services, covering NPM reverse proxy architecture, risks, and hardening with CrowdSec, MFA, VPN, and defense in depth.

A real homelab case: a UGREEN NAS used UPnP to automatically expose SSH port 22 to the internet, triggering brute-force attacks. Full breakdown of the incident, UPnP risks, and NAS security tips.