I block huge data-center cidr ranges. Whole cidr yes. Not a single ip. But tens of thousands, most like more in the millions of IPs by now.

Then I also have rate limits installed. So it block users when a threshold is reached in Angie/Nginx via fail2ban.

Finally, depending on your software. I know that Forgejo and gitea can block access or limit access for non-registered/logged-out users. So visitors can only view the repos and some files. But maybe not scrape all the git commit hashes etc.

The latter I would call server hardening.

But it first starts with decent logging and displaying the data. Easy to drill down or filter. This is needed to identify the source /sources of the bad actors.

These are the basics. Even before I consider cloudflare or Anubis.

Yes so I use gitlab here. And I use the free version (community edition). I installed it directly on my VM. So I have proxmox. And within proxmox I have an Ubuntu server vm. Within this vm I installed the whole gitlab suite. Including my own gitlab runners. Love it.

See https://docs.gitlab.com/install/package/ubuntu/

Alternatives that I also donate to is Forgejo.

I run servers since 2007 in the Netherlands. Back in the days we had way more outages then today.

Today it was mainly planned outages of people working on the infrastructure. I still need to buy a UPS. But even without it it's fine here (Tiel, Gelderland).

I'm hosting mbin and tons of other services and websites at home.

(hoi)

Wrt dns there are better ways. Like auto updating a dns record that regulary checks what your public ip is. And then automatically update it. Services like ddns.

I myself also host everything at home. But since 3 years now I went to an official business internet subscription, which allows me to have a static ipv4 and ipv6 ip address from my isp.

Honest it's fine here. Even without ups. But you can buy a ups to avoid short term downages.

Storage is now more important than ever. Thank you for reminding me. Mbin should auto cleanup it's old storage.

👌

Yup I run my own server since 2008 actually. I first ran game servers. Later I started hosting other services and websites. And eventually basically everything you can think of. Storage (nextcloud), git server (gitlab with cicd), to do list, my own websites / blog /.... Mbin, matrix server (element), voip (mumble), block chain explore (bch explorer). So basically everything...

I'm so happy that I went for local hosting at home since 2008. I started with game servers.

Eventually hosting everything from git server to file storage. From todo list to my homepage. From my blog to voip server. From plantuml server to mbin. From Mastodon to my own search engine. From dashboarding to block chain explorer.

Over 9000