Cool! ufw supports nftables too.

Please tell me more, which firewall would you recommend that plays nice with Docker?

No NAT? Hahaha that’s a big if, and why would you copy paste a docker compose without reading it?

Docker is going to undo your port iptable rules with or without ufw

Running rm -rf ~ isn’t that hard to do either just don’t do it.

Your router’s NAT should save you if that happens on the wrong port anyway.

Fail2ban ufw

port forward only the bare minimum (80 443)

Expose docker ports with 127.0.0.1:8000:8000 then port forward with caddy server on the host

Caddy

It’s three lines of configuration

jellyfin.example.com {
  reverse_proxy http://localhost:8083/
}

Automatic https with let’sencrypt, simplicity of a single binary, downgrade is as simple as replace binary & restart service.

All the developers that care about not being on a Nazi platform have already moved to mastodon or bluesky.

Those that haven’t yet Imo, can suck Goebbels cock.

I love how all the developers working on it only have twitter links /s 🚩