Security

Stop exposing services one by one. Set up WireGuard on a UniFi gateway so you reach every LAN-only service from anywhere through a single private door, with nothing else exposed.

A public service gets scanned within minutes. Here's how I put CrowdSec in front of my reverse proxy to detect attacks from the logs and ban the offenders automatically.