Hardening Your Homelab’s Public Edge: GeoIP Blocking, CrowdSec, and Syncing Fail2Ban with OPNsense
Exposing services to the internet means accepting a constant flood of automated attacks. Here’s how I cut that noise dramatically with GeoIP blocking, CrowdSec, and a Fail2Ban-to-OPNsense sync that turns one webserver’s detection into a network-wide block.