protect signup
requires hCaptcha to signup (even with SSO)
protect /login page
set maximum vigilance level in CF for this path
set low-level for other pages for better experience
prevent ddos by logged-in users (highly unlikely)
whos-online does not show those hidden profile
query them using:
https://xjtu.app/admin/plugins/explorer?id=42
limit public port listening
currently only sshd, netdata, cloudflared listens :: / 0.0.0.0
limit CPU/memory usage of minor service
prioritize resource provision of core service (this website)
docker update --memory-swap "2g" --memory "2g" --cpuset-cpus "1" webnp
docker update --memory-swap "1g" --memory "1g" --cpuset-cpus "1" datanp