Launched in 2016, Let's Encrypt is a non-profit CA that provides basic domain-validated (DV) SSL certificates at no cost. Their goal is to encrypt the entire web by removing cost barriers that prevent some sites from enabling SSL. - Source: dev.to / 25 days ago

Traefik : A modern HTTP reverse proxy and load balancer that makes deploying microservices easy. Traefik integrates with your existing infrastructure components and configures itself automatically and dynamically. it's also well integrated with Let's Encrypt (Alternatives : HAProxy, Kong, NGINX). - Source: dev.to / about 1 month ago

Cert-manager is a CRD (Custom Resource Definition) that dynamically generates TLS/SSL certificates for our applications using Let's Encrypt (although it also supports other issuers). - Source: dev.to / 2 months ago

Letsencrypt.org — Free SSL Certificate Authority with certs trusted by all major browsers. - Source: dev.to / 4 months ago

Install Certbot Certbot is a CLI that helps to obtain and maintain Let's Encrypt cert. - Source: dev.to / 5 months ago

In this post we will discuss how to use efficiently IPSET with CSF (ConfigServer Security & Firewall) Firewall. Unfortunately, I will not discuss what CSF is because it's not within the scope, but you can read about it here. - Source: dev.to / 3 months ago

At the very least, the free ConfigServer CSF is a more robust firewall addon that blocks brute force attempts, mod security failures, and so on. It's relatively easy to install, has a ton of options, and it's easy to whitelist IPs if your users have trouble. The same dev has a virus & malware scanner that's available as a one-time purchase. Source: about 1 year ago

Use CSF (linux only) to cut down some basic attacks https://configserver.com/configserver-security-and-firewall/. Source: over 1 year ago

Seems like a GUI wrapper (other than the graphs) so may not solve the OPs issue of things like Docker complicating the firewall. Source: over 1 year ago

You should not have ANY ports on the home network open to the outside. NONE. If you insist on running a public-facing service at home, use a VPS with an ARGO tunnel. No SQL ports should be open to anywhere, not even on a private net. Use SSH tunnels to access if needed. As long as everything is closed to the outside, a consumer-grade firewall, along with every node on the home network protected by Configserver... Source: over 2 years ago