Self-Hosted Alternatives to Popular Services

This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Kazumadesu76 on 2025-02-03 11:28:55+00:00.

I’ve gotten a ton of unwanted traffic to my Jellyfin website and have had some brute force attacks, and I need to come up with some cloudflare rules to make them stop.

I currently have 3 rules:

1. Allow my IP address
2. Block all countries except my own
3. Block all types of verified bot categories and HTTP versions 1, 1.1, 1.2, 2.

That last one seems to mess with my Jellyfin configuration a bit, because I can’t get Jellyseerr to submit requests to Prowlarr. It also prevents the Jellyfin app from working on my tv.

I’d like to see what rules you guys use so that I can improve my own and stop getting so many attack attempts.