We are using SWAG for reverse proxy

Docker Compose File

version: "2.1"
services:
  swag:
    image: lscr.io/linuxserver/swag:latest
    container_name: swag
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Sofia
      - URL=stefangenov.site
      - SUBDOMAINS=wildcard
      - VALIDATION=dns
      - DNSPLUGIN=cloudflare
      - [email protected]
      - STAGING=false
    volumes:
      - ./config:/config
    ports:
      - 443:443
        #- 80:80

Crowdsec

https://www.linuxserver.io/blog/blocking-malicious-connections-with-crowdsec-and-swag