Meanwhile, I use -site:reddit.com more and more.
We are not the same. ;)

It’s unsafe for their profits.

Oh, true. I’ve read so many infos about different services lately, that I must have confused that with something else.

Thank you.

Thank you for the very comprehensive write up.

Authentication will be my very next project after I solved another minor problem I’ve become aware of just yesterday.

It’s at least the second time, someone mentioned Anubis in this thread.
I’ve checked the site but have to do further digging about the concept. Mostly because “AI” isn’t something I adore that much, but that’s a me problem. :)

Thanks for the suggestion, I will take a look at Anubis.

There are no SSH ports open to external, as everything I run is locally in my LAN, I do not have use for externals SSH access and don’t want to open that vector.

The services that I (want to) offer to the family, are the common selfhosters finest:

• immich
• Stirling PDF
• Jellyfin

As I do not have a authentication provider yet, the services which require an authentication by user/password are prone to brute force attacks, I want to mitigate that first and foremost.
In the mid to long run, I plan to also deploy an authentication provider for those services like Authelia, TinyAuth, PocketID, Authentik or <you name it>.
As there are so many of them and the opinion of which is best differ wildly, I have not yet decided and am in kind of a analysis paralysis. :)

Thank you for bringing that up, I was wondering that too. As in: “This one has something to hide. Let’s poke harder.”

Did you try CrowdSec as someone else suggested? Could that be a mitigation as those IPs could be filtered out in the long run, if I understand the concept of CS correct?

Thank you for suggesting the region block on Unifi, that’s a good tip.

I have that previously set in place globally under settings -> security -> protection -> region blocking.
So on a less sophisticated level and not as granular as you.
Yours seems to be much better and I will take a look at it later. At the moment I have way too many ideas and projects boiling, to add yet another one… ;)