39
Where to install fail2ban? (lemmy.world)
submitted 7 months ago by to c/selfhosted@lemmy.world
16 comments fedilink hide all child comments
 

I've been doing some selfhosting and want to setup fail2ban for my exposed apps, but am unsure if that should be setup on my router (OpenWRT), on each server that may be exposed, or just in the Caddy container?

My setup right now is: TP-Link router with OpenWRT Lenovo M910q with Proxmox, which hosts the following:

  • Caddy in a container for reverse proxies to hosted apps
  • Home Assistant OS in VM#1
  • Other apps in docker containers on VM#2
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 7 months ago

Linuxserver SWAG container has fail2ban and Nginx built into the same container. It can read your nginx logs and modify the servers firewall rules to ban them.

  • permalink
  • fedilink
  • source
    •