# Network Planning

## Current Network Setup
- Document your current router/modem setup
- Note internal IP range (usually 192.168.1.x or 10.0.0.x)

## SSH Access Planning
### Local Network Access
- [ ] Assign static IP to ThinkPad
- [ ] Configure SSH key authentication
- [ ] Test SSH from WSL machine

### External Access (Optional)
- [ ] Research dynamic DNS services (DuckDNS, No-IP)
- [ ] Configure router port forwarding (if needed)
- [ ] Set up VPN for secure remote access

## Domain Setup Options
### Local Domain
- [ ] Configure local DNS (Pi-hole, router settings)
- [ ] Use .local domain for internal services

### Public Domain
- [ ] Register domain name
- [ ] Configure DNS records
- [ ] Set up reverse proxy (nginx, Caddy)

## Security Considerations
- [ ] Change default SSH port
- [ ] Disable root SSH login
- [ ] Configure fail2ban
- [ ] Set up firewall rules (iptables/ufw)
- [ ] Regular security updates