Proxmox Hardening

Resources

Update

  1. Processor Microcode: bash -c "$(wget -qLO - https://github.com/tteck/Proxmox/raw/main/misc/microcode.sh)"
  2. Auto Host System Updater: (crontab -l 2>/dev/null; echo "0 0 * * 6 /usr/bin/pveupdate && /usr/bin/pveupgrade >> /var/log/pveupdate_upgrade.log 2>&1") | crontab -
  3. Auto LXC Updater: bash -c "$(wget -qLO - https://github.com/tteck/Proxmox/raw/main/misc/cron-update-lxcs.sh)"

2FA (TOTP) For Web Interface

Proxmox VE Hardening_2FA.png

SSH

  1. Setup Key-Based Authentication (see: Persistence#SSH Keys)
  2. Passwordless SSH

Relevant Note(s): HomeLab Networking