Hello guys, I’m have little to no experience when i have to deal with networking or cybersecurity.
I recently created a backend RESTful API on my Ubuntu VM on my personal desktop and dockerized the app, connecting it to a bridge network named ‘tunnel.’ I also have the Cloudflare Docker hosted in the same ‘tunnel’ network, which allows my local RESTful API Docker to be accessible via my domain and exposed to the internet.
Can anyone help me understand if this setup poses any security risks to my home network?
If so, what should I do to help reduce the risk? I have read that firewall helps, but does a restful api container developed with golang requires it?
Realistically, if its an API you created yourself, then no hacker is going to waste their time targetting your bespoke api. Its just too much effort for a single target.
However, if you happen to be on a 3 letter agency’s shit list, then they may spend some time investigating your API for weaknesses. But they will get in either way, so it really doesnt matter.
You mentioned that the API controls a VM, does it let you run scripts or commands on a target? Is it authenticated?