Guide: TLS Reverse Proxy with Let's Encrypt and CrowdSec
The front door pattern: Nginx terminating TLS with automated Let's Encrypt renewal via Certbot, hardened by CrowdSec WAF/IPS with the nginx bouncer, kept fresh by Watchtower. One compose file in front