Using Fail2ban to protect exposed services | arvind.io
arvind.io
Fail2ban is a software application that protects you from brute-force attacks. The most common use-case is to protect your server's publicly exposed SSH service from being an easy target. If that is your only goal, you might find it quicker to follow the steps from this article by Linode for...

I’m wondering if I’m starting to outgrow Tailscale… my wife keeps having networking issues on Android due to Tailscale, the Nvidia Shield kills the Tailscale app randomly, and my parents’ TV doesn’t have a Tailscale app…

I feel like the time is approaching to publicly expose some of my services to the internet…

Any other tips?

  • Fedegenerate@lemmynsfw.comEnglish
    5·
    8 days ago

    I use tailscale for my non-tech family.

    I run a rPi with tailscale, pihole and nginx on it in their house. They connect to the their WiFi, get adblocking for free. They go to “http://homarr.sever/” pihole captures this sends it to nginx and gets reverse proxies to a homarr LXC on my server. From their they can click links to the services which are at on “https://service/.######.xyz”. Again pihole captures the request, sends it to nginx which reverse proxies it over tailscale to the appropriate LXC.

      • Fedegenerate@lemmynsfw.comEnglish
        3·
        8 days ago

        Honestly, I wouldn’t.

        I only run it this way because a VPS had 0 WAF, and I’m terrified of opening ports. VPS is the well trodden ground, there’s tonnes of guides. Mines a hack job borne of necessity, it works though, and I am proud of what I cobbled together.

        It was my first time solving my own problems. I had my meager skill set, a basic idea of what I wanted, some vague notion of how I was going to achieve it, and a thick forehead to smash against the problem till it gave way for me.