@niclas@infosec.exchange I had never thought about adding a WAF to nginx in my homelab. I spent a little bit of time today and got ModSecurity added to it, plus a bit of tuning and defining exclusions for a couple apps. Thanks for mentioning it! This feels like a good addition to the stack.