2·
1 day agoIf you have a UniFi gateway, you can enable region based firewall on your port forward ip. This then blocks most of the world (incoming) as a first step. Then like others suggest, a reverse proxy. I use Caddy built with the Maxmind geolocation plugin, and I also run fail2ban on my exposed service.
I figure if you don’t need most of the world accessing your services, it is best to exclude them
For me, it is because I don’t want to leave my power hungry desktop running 24/7 to just capture feeds… I already self host, so I let that do the fetching on a schedule, then my rss client just fetches from my server