Protect Your Services with an Immutable Reverse Proxy, Fail2Ban, and Cloudflare (Part 3)

If you missed part 1, I highly recommend reading through it first to understand the concepts and theory behind the tools we’ll be using, and this part doesn’t make a lot of sense without part 2. Jump back to part 1 or part 2 . Configuring your Firewall to safely point traffic to your services through a reverse proxy In the last post, we completed configuring a fully functional CoreOS reverse proxy in a VM, but we didn’t finish configuring network, so it doesn’t do much for us yet....

October 22, 2024 · Seth Brasile

Protect Your Services with an Immutable Reverse Proxy, Fail2Ban, and Cloudflare (Part 2)

If you missed part 1, I highly recommend reading through it first to understand the concepts and theory behind the tools we’ll be using. Jump back to part 1 . Before we dive in, let’s ask a couple of important questions: Why are you doing this? - Why do you want to host a web service at home? Who is going to use this service? - Is this service going to be available for the public or to friends and family?...

October 18, 2024 · Seth Brasile

Protect Your Services with an Immutable Reverse Proxy, Fail2Ban, and Cloudflare (Part 1)

If you’re looking for the step-by-step guide, you can skip to part 2 here (but I highly recommend reading through this post first to understand the concepts and theory behind the tools we’ll be using). If you’re looking for a guide on how to set up an enterprise-grade firewall with pfSense, you can skip to part 4 here. The idea of hosting a web service in your own home can be simultaneously exciting and absolutely horrifying… On the one hand, you’d like to learn more about web technologies and devops, learn how to create robust services, and learn how to secure them....

May 21, 2024 · Seth Brasile

How to Run Multiple Dockerized Proxied SPDY'd and Pagespeedified Ghost Blogs with 4 Commands

First, the tl;dr version for folks who are familiar with Docker and Ghost: (for those who aren’t as familiar, scroll past the break or click here, also a disclaimer: You won’t be able to use SPDY out of the box as you’ll still need to install a signed SSL cert) git clone https://github.com/sethbrasile/blog.git && cd blog Now anything in the blog directory will end up overwriting it’s match in the default Ghost installation....

July 26, 2014 · Seth Brasile