# Notes
> 9/9/2026

Ok so I started doing some research about hosting Gitea but went down quite the rabbit hole about network security.
Before setting up Gitea and all that, I want to make sure I have a secure network that I really understand well.
Some notions to check out:
[x] port forwarding
    [] security risks
[] VPN (tailscale)
[] network-level firewall (opnsense/pfSense/UDM ??)
[x] external/internal reverse proxies (cloudflare/traefik/nginx)
[] IDS & IPS (Intrusion Detection/Prevention System)
[] VLANs
[] auth proxy?
[] managed switch
[] pfSense router
[] SSL certs? (certbot)
[] SSH