Security setup

Kaffee4Eck
PC setupWindows 11

Kaffee4Eck's PC Security Config

Kaffee4Eck ·
Go to thread
Layout

Imported from an earlier discussion · awaiting owner confirmation

Feedback welcomeRevision 1What changed
Community rating Not rated yet
Staff assessment Advanced Security

Earlier staff assessment. The reviewer, date and configuration version were not recorded. It has not been verified against the current Hub setup.

Device & operating system2
Operating system
Windows 11
OS version and support details
Arch Linux | MacOS
Protection & updates11
Real-time protection
Service / ToolFunctionality
ESET Smart Security (Hardened)Signature and behavior-based protection, sample submission disabled, firewall enabled
Device firewall
Other - Next-generation Firewall (NGFW)
Security updates
Check for updates and Notify
Update channels
Allow stable updates only
User Account Control (UAC)
Notify me only when programs try to make changes to my computer (do not dim my desktop)
Smart App Control
Off
Network firewall
Enabled
Router and network details
Fritzbox (as DSL / Fiber Modem)
Custom security settings
Service / ToolFunctionality
ESET Smart Security (Hardened)Signature and behavior-based protection, sample submission disabled, firewall enabled
AdGuard Home + Unbound DNSLocal DNS filtering combined with privacy-focused DNS (DNSSEC, DNS-over-TLS/DoH optional)
SearXNG (Docker Instance)Private, self-hosted meta search engine – anonymous, no telemetry, no tracking
TailScaleVLAN-isolated remote access with ACLs and detailed audit logging
Sample Testing VLANIsolated network segment with virtual machines for malware, phishing, and exploit simulations
IP / DNS Blocklists (Threat Feeds)Includes ThreatFox, AbuseIPDB, FireHOL, MalwareDomains, AdGuard lists, and custom feeds
Periodic malware scanners
Nothing right now
Environment for malware testing
Virtualization Environment: Malware test VMs are deployed in dedicated, air-gapped VLANs to ensure complete network isolation.
Browser & privacy4
Browsers and extensions
Brave / Firefox: Bitwarden, AdGuard Assistant, Imagus
Secure DNS
AdGuard Home + Unbound DNS
Desktop VPN
ProtonVPN
Password and passkey manager
Bitwarden / Vaultwarden
Backup & recovery2
File and photo backups
Nextcloud
Immich
UrBackup
Macrium Reflect
System recovery
Macrium Reflect Backups on Home Server + External Server
UrBackup Home Server + External Server
Device & usage3
Main use of this computer
For work or educational use
Subscriptions
None
Computer specs

🖥️ Workstation​


ComponentSpecification
CPUIntel Core i9-14900K (planned upgrade: AMD Ryzen 9 9950X3D)
GPUNVIDIA RTX 3080 Ti (planned upgrade: AMD RX 9070 XT)
RAM128 GB DDR4
Storage4 × 2 TB Samsung 990 Pro (NVMe) 1 × 4 TB Transcend SSD


🖴 Server (Storage & Docker)​


ComponentSpecification
CPUIntel Core i5-14500K
GPUIntegrated GPU (iGPU 😄)
RAM128 GB DDR4
Storage16 × 16 TB Toshiba MG08ATA (HDDs) 2 × 2 TB Samsung 970 Evo (NVMe) 2 × 2 TB WD RED NVMe SSDs


🌐 Firewall – OPNsense Appliance​


ComponentSpecification
CPUIntel Core i5 (11th Gen)
GPUIntegrated GPU (iGPU)
RAM32 GB DDR4
Storage2 × 1 TB Samsung 980 Pro (redundant setup 😄)

Community rating

How members rate the shared configuration. This is community feedback, not a security test.

Not rated yet
An open invitation for useful feedback.

Sign in to rate this setup

Shared by the member. This is a configuration record, not a device scan.

Comments and feedback belong in the forum discussion. Open it to join the conversation.

Back
Top