They say it’s the breast, but they’re likely not fans of the motto either.

And since i don’t post my valid urls anywhere no web-scraper can find them

You would ah… be surprised. My urls aren’t published anywhere and I currently have 4 active decisions and over 300 alerts from crowdsec.

It’s true none of those threat actors know my valid subdomains, but that doesn’t mean they don’t know I’m there.

I use it for all of my external services. It’s just wireguard and traefik under the hood. I have no familiarity with bunkerweb, but pangolin integrates with crowdsec. Specifically it comes out of the box with traefik bouncer, but it is relatively straightforward to add the crowdsec firewall bouncer on the host machine which I have found to be adequate for my needs.

It’s not, though?

I use Pangolin (https://github.com/fosrl/pangolin)