How to set up security for a white IP PC?

Question

VPN

Hello!

Please tell me what steps can be taken to set up security when using the following model:
There is a PC (home) on which a tunnel to VPS is configured via WireGuard, I actually receive a white IP from the server.

I would like to know a little more about what can be done to improve security when the computer, it turns out, is visible on the network.
Which way to look?
Do you need to configure something on the VPS in conditional iptables or on the home PC? Maybe there are competent manuals on network security that can be comprehended by a young mind? So far, I’ve thought of changing ports on my own, putting a ban on the ring and other little things.
Please point in the right direction.

Thank you in advance!

Answer 1

Or you didn’t agree on something, but according to your description, you don’t get a white IP.
"I get a white ip" is when there is a white subnet of addresses in Wireguard and the VPS routes it through wireguard to your computer.
And you have a white IP on the VPS, and you use address translation rules to make packets from your computer look like they were sent from the VPS. If this is the case - and if you are not using D NAT on the VPS - no additional security moves are required.

Answer 2

close all incoming ports on the computer for internet connection. Windows likes to stick out naked samba outside and much more than others.
close all unnecessary ports on vps, although I think it’s not Windows and that’s how it’s done ...
you still start the forwarded port on some kind of program (web server, as I understand it) there shouldn’t be any problems.