Put a crowd-sourced firewall in front of my exposed homelab, and it started blocking attacks on day one

Put a crowd-sourced firewall in front of my exposed homelab, and it started blocking attacks on day one, as a TechLatest/XDA writer describes how adding CrowdSec changed his security posture quickly. After exposing public-facing services via Pangolin, he realized that while his TP-Link Omada ER605 router’s default stateful firewall blocked unsolicited inbound traffic, it had no visibility once requests reached his reverse proxy. His homelab used a repurposed business laptop running Debian, with access via Tailscale and Pangolin, including Gerbil for WireGuard, Traefik for reverse proxying, and Newt as Pangolin’s WireGuard client to a VPS. He had opened ports 80 and 443 for Pangolin, leaving other traffic blocked. Within a few hours, CrowdSec flagged real exploit attempts.