How "secure" is your setup?

What setups/softwares do you use to secure your server?

All I do is run the process as user with no login shell.

The topic came to mind after reading this post Is Authelia enough without fail2ban or crowdsec?

My stuff is only accessible from my LAN (because I haven’t figured out how to set up a tunnel or reverse proxy yet).

Tailscale is your friend.

Screw Tailscale, ZeroTier and specially cloudflare, all centralized, all with changable terms.

Use a VPS, lowest spec but good bandwidth, and use Wireguard VPN for your VPS and homeserver, and nginx or caddy to make a Reverse Proxy

All agreed but not every homelabber can spend money for something that is not the main job or contributed to work. Tailscale for now works well enough for free.

Cloudflare agreed is not something I would trust.

You can get some pretty cheap ones like sub $10/year. My current ones 2 cpu 3.5gb ram 64gb ssd for $33 a year.