3 ms·
what's the point putting it behind an NGINX proxy as opposed to exposing it directly? Rate-limiting or fail2ban or something?
by DaSHacka 3y ago
what's the point putting it behind an NGINX proxy as opposed to exposing it directly? Rate-limiting or fail2ban or something?
- justsomehnguy 3y agoNot the parent, but: Hosting multiple services behind one ip:443 and having a valid LE certificate is surely a nice thing. You can even add a simple URI knocking if you wish.
- tredre3 3y agoQbittorent in particular has had several webui exploits in the past. The most recent was a few months ago and it was pretty bad: https://github.com/qbittorrent/qBittorrent/issues/18618 https://github.com/qbittorrent/qBittorrent/issues/18618 Putting nginx in front with http basic auth would prevent all of them.