Post #3758259

2026-07-12 09:19 UTC

I read very interesting article about securing servers from #ddos attacks and #ai bots scraping at https://www.fsf.org/blogs/community/blocking-botnets-with-reaction. Admins uses fail2ban, UFW and reaction to mitigate them. Based on that I have a question to people who have #selfhosted #NextCloud and/or just run a #Homelab : how do you secure your servers?

Replies (1)

@advaita_services@mastodon.social 2026-07-12 10:01

@krystian_kulesz@mastodon.com.pl For a self-hosted Nextcloud or homelab, I would separate the layers: keep services behind a VPN or access gateway, expose as little as possible, use firewall rules plus fail2ban or reaction, patch regularly, and maintain tested offline backups. Monitoring failed logins and unusual traffic matters just as much as blocking them. What setup are you currently using?

Open ##3763165