Software Engineer & DevOps Architect. Mbin creator/maintainer.

I host many server instances and websites. To cover all the costs, please donate me. Thank you!

HomepageMastodonMatrixTelegramDonate me

Ps. No the photo is not from my holiday, I just wish it.

  • 1 Post
  • 14 Comments
Joined 2 years ago
cake
Cake day: June 20th, 2023

help-circle










  • Yes, I run many services and website on the public web from my homelab. Harden your server first. Like disabling root ssh login.

    Also enable auto updates on your server. Use your router/server to block some counties using geoip (especially if those services are meant for only a couple of people within your county maybe?). You could also use block lists, there any many bad ip lists out there.

    Configure rate limits in Nginx.

    You also mentioned fail2ban. You can define many rules and actions. Like blocking ips that might go over your previously defined rate limits. Or 4xx action for ips that request a lot of non existing pages (404 errors) .

    Also captcha won’t cut it anymore today. Try https://github.com/TecharoHQ/anubis

    Of course expose only what you want to expose, so only open ports in your firewall you really want to open. Ideally put everything behind a reverse proxy like Nginx.

    Let’s start with all of the things mentioned above. Ping me later if want to know more or have questions.