Post #1454635
2026-04-19 04:55 UTC
@RyeNCode oh, how do you secure that exposed reverse proxy? (well, besides graylog, ofc)
I have one where I just setup mTLS auth for non-local access. No log monitoring. No fail2ban or the likes... Am I asking for (too much) trouble?
Replies (1)
-
@RyeNCode@mstdn.ca 2026-04-19 11:38
@tinsuke That endpoint gets a LetsEncrypt cert, anything with auth usually requires openId. I've got fail2ban on one service as it came as a feature. Been contemplating putting it in more globally. Also, as much as possible, single responsibility services. The proxy does proxy stuff. The web server does static pages. Other services are containerized and individually secured and isolated as much as possible. GrayLog is for monitoring, doesn't itself secure anything. But does let me know what to focus on.. (when I monitor the relevant info 😁)