nibbler

Credit who provided the info in the first place, not the ‘ai’ that spat it out.

But you still will not be notified when this changes?

Admittedly the dev maintaining the aur sounds better than random person…

By your definition not even twitter or Facebook is a walled garden.

Your definition sucks

Take a photo on mobile, ai will guesstell you the answer

‘Bring maintained by their dev’ sounds kind of redundant. As long as you are not close with them that sounds like a bad take

The selfhosted guys are correct with that. Of course its not a magic pill, but it can help to minimize the attack surface immensely with little effort.

Edit: while open ports can easily be enumerated, a reverse proxy often requires knowledge of the right server name. In tls1.3 those are not transferred in clear. Depending on your threat scenario you might want to consider doh/dot etc.

Reverse proxies can require client certs, which lift the security benefit to something like a vpn. Even basic auth adds a high threshold to attackers and is simple even for random users to work with. All this is functionality many services don’t offer natively - as they assume a reverse proxy anyway I guess.