Hi all,
I’ve built a personal portfolio website for my photography hobby and as a side project for myself to learn.
I’m using Node JS and Express to run a basic server on my raspberry pi plugged into my home network. I’m using Nginx for proxy and SSL encryption as well as UFW for firewall. This is as far as I know how to do it safely, but I’m curious if there’s anything I should be wary about as I plan on having this site up 24/7.
Any advice is welcome, thanks!
There’s an NGINX container which has a bunch of security features (i.e. WAF with OWASP, auto ban of strange actors, bot challenges, integrated blocklists of bad actors, request limits etc) built-in, is well documented and even has an optional GUI.
It’s called Bunkerweb and they’re also at /r/BunkerWeb and on Discord.