Home lab

Restricting access to Proxmox

I restricted access to the lab’s Proxmox management services and tested the rules from both an approved workstation and a regular network device.

What changed

I restricted the Proxmox web console and SSH to approved management access. For Linux administration, I set up a named account that uses SSH keys and can elevate privileges when needed.

What I checked

The approved workstation could open the Proxmox console and connect over SSH. A regular LAN device could not open the console. I also confirmed that the named account logged in with its key and could elevate with sudo.

What I learned

A successful admin connection only proves the allowed path. I also test from a regular device to check the restriction and keep a recovery route available while changing access rules.