Proxmox Hardening

Resources

• decalage2/awesome-security-hardening

Update

1. Processor Microcode: bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/pve/microcode.sh)"
2. Auto LXC Updater: bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/pve/cron-update-lxcs.sh)"
3. Auto Host System Updater: (crontab -l 2>/dev/null; echo "0 0 * * 6 /usr/bin/pveupdate && /usr/bin/pveupgrade >> /var/log/pveupdate_upgrade.log 2>&1") | crontab -

2FA (TOTP) For Web Interface

SSH

1. Setup Key-Based Authentication (see: SSH Keys)
2. Passwordless SSH

---

Relevant Note(s): HomeLab Networking