Security Policy

Summary Overview

Overview of security controls, access policies, and incident response protocols.

Updated: 2025-01-20
securitypolicyaccess

Access Control

Access to the homelab environment is strictly controlled through Zero Trust principles.

Authentication

  • All public endpoints are protected by Authelia.
  • Multi-Factor Authentication (MFA) is required for administrative interfaces.
  • Passwords must adhere to NIST guidelines (min 12 chars, complex).

Network Security

  • No direct port forwarding on the home router.
  • All ingress traffic must pass through Cloudflare Tunnel.
  • Internal service-to-service communication is restricted via Docker networks.