Public access is what is in immediate danger. Private services are safe from bots, but at risk from attacker on your network - a compromised IoT device or package on server could move laterally to vulnerable PHP services
Comment on PHP selfhosting list
DundasStation@lemmy.ca 3 hours ago
My Nextcloud is the only public facing service on the list. Is it sufficient to just disable public access via Nginx Proxy Manager and continue to permit local access for Nextcloud, or do I need to just shut down Nextcloud until it gets updated?
pound_heap@lemmy.dbzer0.com 2 hours ago
roofuskit@lemmy.world 1 hour ago
Nextcloud is updated, go ahead and update yours.