mosiacmango

Youve minimized login risk, but not any 0 days or newly discovered vulnerabilites in your ssh server software. Its still best to not directly expose any ports you dont need to regularly interact with to the internet.

Also, Look into crowdsec as a fail2ban replacement. Its uses automatically crowdsourced info to pre block IPs. A bit more proactive compared to abuseipdb manual reporting.

They have. Nebula is one platform, floatplane is another.

Does NixOs have a set of good documentation yet, or is it still “just read these 6 different articles/ebooks, but dont listen do the what the 3rd book talks about in its second half, except for chapter 7. Do chapter 7, but how guide 4 describes it. Then you should have a default config and everything will be perfect.”