I am not literate when it comes to servers, but I like the idea of having my own cloud storage for privacy reasons. OwnCloud is targeting (at least a little bit) the "DIY-home-user" so it seemed to be worth a try. After some hours I managed to have a working OwnCloud server that is accessible from the internet.
Now that everyone can access it from anywhere I should probably start thinking about security. Not that there is very sensitive data on this server or there is a concrete threat. But I would like to cover the most obvious vulnerabilities because it is in the home network. So far I have scanned it with nmap and nikto. The output generated seems to be as expected.
Are there other important measures I can take to have a decent level of security?
- OS: Raspberry Pi 2 with Raspbian
- Server: Nginx and self generated 2048-bit SSL-Certificate
- DB: MySQL
- Cloud Software: OwnCloud 8