This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/Unreal_Unreality on 2025-06-23 06:33:02+00:00.

Hello there,

Long time lurker, first time asking something here.

I’ve created a website that I’m self hosting, and I am planning to release it to the public (it’s a social game, I intend to have users that I can’t trust).

I’m wondering how can I protect my website from DDoS, bots, or malicious users ? From what I have seen, I think I’m going for Fail2ban + Nginx, but I have no idea how effective this is, or if there are other solutions.

Furthermore, are there common ways to prevent users from creating multiple accounts with bots ? Right now, I have little to no protection (I’ve mostly been working on the proof of concept to see if it works) and I’m kind of scared that the moment I’ll publish it, people will attempt to break it in every way.

Does any of you guys have experience with this ?

Thanks in advance, Cheers!