Inspired by this comment to try to learn what I’m missing.

  • Cloudflare proxy
  • Reverse Proxy
  • Fail2ban
  • Docker containers on their own networks

Another concern I have is does it need to be on a separate machine on a vlan from the rest of the network or is that too much?

  • InvertedParallax@lemm.eeEnglish
    41·
    2 days ago

    Yeah, there were other countries to ban, but those 2 cut my attacks down 90%.

    Also consider a honeypot that triggers when anyone tries to ssh it at all.