this post was submitted on 28 Nov 2023
3 points (100.0% liked)

Self-Hosted Main

21 readers
1 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

For Example

We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Also include hints and tips for less technical readers.

Useful Lists

founded 1 year ago
MODERATORS
communick@selfhosted.forum
3
Looking for suggestions to limit access to a public self-hosted page (alien.top)
submitted 1 year ago by roomabuzzy@alien.top to c/main@selfhosted.forum
8 comments fedilink hide all child comments
 

I'm looking to open up a site with a login portal to the internet, but I'm hoping to avoid the page getting scanned too much and avoid bruteforce attempts on the login. I know there are some solutions that already exist like Fail2Ban, but I'm hoping for something different if it exists.

My thinking is that I'd like to put an IP filter on the page, but that I could "automate" adding IP addresses somehow. I was thinking I could have some sort of authentication server where I could email someone a unique URL that they would click on and provide some kind of information confirming that they're who they say they are. Once confirmed, the public IP that was used to access the unique URL would be added to a whitelist that would allow access to the login portal.

Is there a service that exists that could do something like this? I had a quick look at Authelia and SuperTokens, but I'm not sure if that's what I'm looking for.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] shaunjanssens@alien.top 1 points 1 year ago (1 children)

I'm using Cloudflare Applications (part of Zero Trust) for this. You can add multiple login methods (email, Google, Facebook, Github, ect) and also IP addresses. I think it's also possible to accept someone when they request access. It's very easy to set-up and will also prevent brute force attacks. You can protect a whole application but it's also possible to protect specific paths.

[โ€“] 80Ships@alien.top 1 points 1 year ago

Can you restrict access to certain Google accounts?