fail2ban
How to configure Fail2ban
Fail2ban turns brute-force noise on SSH and your reverse proxy into a boring automated reaction. A practical setup for a VPS or homelab: sane jail config, testing before trusting, notifications without a siren, and where it fits in the wider security story.