Hello, I’m a web developer, not a server specialist, but I’ve had a dedicated server with Proxmox running for a year now. On one of the virtual machines I have Ubuntu with NoMachine. The people from Proxmox have always told me that I should close all outside ports and connect to the server only via tunneling, as it is the most secure option.
At the moment, I’m connecting to NoMachine through port :4000, but I want to close this port and the others. I want to be able to connect to NoMachine only via localhost:4000 when an SSH tunneling is active. What is the best practice for this?