In my homelab environment I run several services on TrueNAS SCALE, including several WordPress sites and Nginx Proxy Manager. Instead of exposing application ports directly, I route external traffic through a reverse proxy and Cloudflare DNS.
Many homelab guides treat TrueNAS like an appliance: install it, create a pool, and start storing data. That works at first, but problems appear later when you need to expand storage, rebuild a failed disk, replicate backups, or reorganize datasets.
Security in a homelab is about controlled risk, not maximum control.
Segment the network and protect management infrastructure.
Minimize exposed services and centralize TLS termination.
Keep systems patched and backups tested.
Design for containment and recovery, not perfection.
