“But how do I access it?”

@gkd@lemmy.ml · 2 years ago

“But how do I access it?”

@blkpws@lemmy.ml · 2 years ago

I suppose you also configure some fail2ban rules to ban those bots. Seems to be the easier way.

@railsdev@programming.dev · 2 years ago

I’ve looked into it a few times and it just seemed complicated to do within a Docker container but I could be wrong. I might have ChatGPT guide me on that endeavor.

@blkpws@lemmy.ml · 2 years ago

There is a guide how to protect password brute force over SSH, which is the most attacked https://medium.com/@bnay14/installing-and-configuring-fail2ban-to-secure-ssh-1e4e56324b19

But I also recommend you to change the SSH port to another, is simple and pretty effective as all those bots are always using the default port and not doing a deep scan.

@railsdev@programming.dev · edit-2 2 years ago

Thanks! Though I’m mainly only wanting to protect ports 80 and 443. Usually when it comes to web apps I Dockerize it and call it a day, so there is no SSH daemon hanging around.

@blkpws@lemmy.ml · 2 years ago

Oh well, I only run services on my cloud, so I need to get SSH to manage them. hehehe 😄

@railsdev@programming.dev · 2 years ago

Yeah for personal stuff I prefer my own stuff, but for business I find Fly to be phenomenal. I can always “SSH” into a container if needed (though it’s definitely not SSH).