Editing Introduction to a Self Managed Life: a 13 hour & 28 minute presentation by FUTO software (section)

==== Don’t use your server as an HTPC at the same time; attack surface &amp; why you should care ====

The '''attack surface''' (or threat surface) refers to all the different points where a hacker could potentially gain unauthorized access to your system. This means that the more you install onto your machine, the greater the likelihood you turn into one of the poor schmucks in <code>/r/asustor</code> who got [https://www.reddit.com/r/asustor/top/?t=all owned by ransomware]. The more things a machine does, the larger its attack surface becomes &amp; the more opportunities attackers have to exploit vulnerabilities.

If you use the same PC for Kodi ''and'' services like Mailcow (mail server), FreePBX (phone system), Immich (photos), or Nextcloud (notes), you’re mixing a '''home theater interface''' with '''mission-critical infrastructure.''' Bad idea.

<span id="why"></span>
===== Why? =====

# '''Increased Exposure:''' Running Kodi means more risk of vulnerabilities from media files, plugins, user interaction, etc. If exploited, it could compromise your entire server &amp; everything running on it.

# '''Conflicting Security Needs:''' A server for mail and photos requires high uptime, strict access control &amp; limited exposure. A home theater PC is inherently less secure because it’s meant to interact with more devices, networks, &amp; potentially risky media.
# '''Damage Scope:''' If someone hacks your Kodi system, do you really want that person having backdoor access to your email, phone, or photos? Keep the two separate &amp; isolate them for better security.

<span id="why-not-use-it-as-a-router"></span>