Inspired by this comment to try to learn what I’m missing.
- Cloudflare proxy
 - Reverse Proxy
 - Fail2ban
 - Docker containers on their own networks
 
Another concern I have is does it need to be on a separate machine on a vlan from the rest of the network or is that too much?


Thanks!
Here’s the setup I followed. It seems like it might take away some manual work for you: https://m.youtube.com/watch?v=Ha8NIAOsNvo&t=1294s&pp=ygUIRmFpbDJiYW4%3D