swifteh

joined 1 year ago
sorted by: new top controversial old
A is for Apple, B is for ______ in c/askouija@lemmy.world
Ford poised to fire all ~10,000 striking workers in Louisville, Kentucky and Sharonville, Ohio Plants in c/brainworms@lemm.ee
[–] swifteh@lemmy.ml 4 points 1 year ago

It’s a quote from the book 1984 by George Orwell

[Discussion] What is your go-to movie that you will never turn down? in c/moviesandtv@lemmy.film
[–] swifteh@lemmy.ml 11 points 1 year ago

Hackers. It’s so bad but I love it

How do you deal with malicious requests to your servers? in c/selfhosted@lemmy.world
[–] swifteh@lemmy.ml 7 points 1 year ago (3 children)

Any service I have that is public facing is proxied through Cloudflare. I run a firewall on the host that only allows traffic from Cloudflare IPs. Those IPs are updated via a cron job that calls this script: https://github.com/Paul-Reed/cloudflare-ufw I also have a rule set up in Cloudflare that blocks traffic from other countries.

For WAF, I use modsecurity with nginx. It can be a little time consuming to set up and weed out false positives, but it works really well when you get it configured properly.

Some of my applications are set up with Cloudflare Access. I use this with Azure AD free tier and SAML, but it could be set up with self hosted solutions like authentik.