Hardening ABS

[darthrater78]

So I've exposed my ABS install to the internet via cloudflare DNS proxy that points to another NPM proxy in my DMZ to get to the server on my production Network. I've enabled prevent common exploits on npm, and set geoblocking on my inbound rule.

Are there any other common sense tactics I can employ to harden this further in terms of the server itself?

[jaycedk]

Fail2ban to block ip addresses, if they get through you geoblocking, and try to brute force there way in.

[jeeftor]

There are 2 VERY simple options:

1. Cloud Flare Tunnels - if you already have Cloudflare DNS then these are for free - look in the Zero Trust section
2. Tailscale ...