Open-ended question, not seeking advice. In practice this is extremely specific to use-case, but there are some patterns that are broadly useful or partially transferable to other domains. Hoping to generate discussion.
Do you use a XMR VPN at any point? e.g. User -> Tor -> XMR VPS -> XMR VPN
Do you use encrypted filesystems at any point (e.g. LUKS, FUSE like securefs)? And how do you handle logs, sanitizing details, and securing between users? What secrets (passwords, keys, etc) do you store, and more importantly where (e.g. decryption key on local tails USB, but most passwords for accounts/etc accessed by VPS on VPS)?
If you need an interactive browser, X11 forwarding, VNC/RDP over e.g. SSH, or some web interface e.g. NoVNC or Kasm Workspaces?
Do you try to find insecure devices for a final, or near-final hop? If so, for backhaul do you setup simple proxying, encrypted VPN like wireguard, or something additionally obfuscated like xray-core or AmneziaWG?
What do you use a base OS? Standard distro e.g. debian to avoid fingerprinting? Automated configuration with e.g. Ansible? Or NixOS or other methods of creating well-defined, immutable images?
Hacking / Opsec
How do you (personally) configure a XMR VPS and related networking
Started by yutrix768 · Jun 21, 2026