Documents the 2026-04-09 scanner incident where 301-redirected PHP probes bypassed the existing apache-404scan jail, leaving the scanner unbanned and firing Netdata web_log_1m_redirects alerts. New jail catches 301/302/ 403/404 PHP responses while excluding legitimate WordPress endpoints. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
42 lines
1.6 KiB
Markdown
42 lines
1.6 KiB
Markdown
---
|
|
created: 2026-04-13T10:15
|
|
updated: 2026-04-13T10:15
|
|
---
|
|
# 🏠 Self-Hosting & Homelab
|
|
|
|
Guides for running your own services at home, including Docker, reverse proxies, DNS, storage, monitoring, and security.
|
|
|
|
## Docker & Containers
|
|
|
|
- [Self-Hosting Starter Guide](docker/self-hosting-starter-guide.md)
|
|
- [Docker vs VMs for the Homelab](docker/docker-vs-vms-homelab.md)
|
|
- [Debugging Broken Docker Containers](docker/debugging-broken-docker-containers.md)
|
|
|
|
## Reverse Proxies
|
|
|
|
- [Setting Up Caddy as a Reverse Proxy](reverse-proxy/setting-up-caddy-reverse-proxy.md)
|
|
|
|
## DNS & Networking
|
|
|
|
- [Tailscale for Homelab Remote Access](dns-networking/tailscale-homelab-remote-access.md)
|
|
|
|
## Storage & Backup
|
|
|
|
- [rsync Backup Patterns](storage-backup/rsync-backup-patterns.md)
|
|
|
|
## Monitoring
|
|
|
|
- [Tuning Netdata Web Log Alerts](monitoring/tuning-netdata-web-log-alerts.md)
|
|
- [Tuning Netdata Docker Health Alarms](monitoring/netdata-docker-health-alarm-tuning.md)
|
|
- [Deploying Netdata to a New Server](monitoring/netdata-new-server-setup.md)
|
|
|
|
## Security
|
|
|
|
- [Linux Server Hardening Checklist](security/linux-server-hardening-checklist.md)
|
|
- [Standardizing unattended-upgrades with Ansible](security/ansible-unattended-upgrades-fleet.md)
|
|
- [Fail2ban Custom Jail: Apache 404 Scanner Detection](security/fail2ban-apache-404-scanner-jail.md)
|
|
- [Fail2ban Custom Jail: Apache PHP Webshell Probe Detection](security/fail2ban-apache-php-probe-jail.md)
|
|
- [Fail2ban Custom Jail: WordPress Login Brute Force](security/fail2ban-wordpress-login-jail.md)
|
|
- [SELinux: Fixing Fail2ban grep execmem Denial](security/selinux-fail2ban-execmem-fix.md)
|
|
- [UFW Firewall Management](security/ufw-firewall-management.md)
|