"Okay. This is the part where I put on my “I am a serious developer who cares about security” hat. Because running a publicly accessible server with an AI model on it that has the potential to run commands and access my data is... not something to be casual about.
The security philosophy I went with is called defense in depth. No single lock on the door. Instead we have multiple layers, so that if one thing fails, there are five more things between an attacker and anything interesting. The goal was zero public inbound ports. A server so quiet on the internet that it’s basically invisible."
https://melissanuval.substack.com/p/i-tried-to-build-my-o…