DEV Community: fab

Certificate expired?

fab — Thu, 17 Sep 2026 15:34:17 +0000

Download, install, run, enjoy CertMate.

CertMate issues and renews TLS certificates across 29 DNS providers and records every action in a tamper-evident, independently verifiable audit trail.

Free and open source: https://www.certmate.org

Source code on GitHub.

Web application firewall for Caddy

fab — Mon, 07 Sep 2026 12:23:44 +0000

Caddy-WAF is an HTTP handler middleware that inspects requests and responses across four well-defined phases, applies a regular-expression rule set with anomaly scoring, enforces IP/DNS/ASN/country blacklists and whitelists, performs token-bucket-style rate limiting, and exposes a JSON metrics endpoint.

A representative provisioning log:

INFO  Provisioning WAF middleware     {"log_level":"info","log_path":"debug.json","log_json":true,"anomaly_threshold":20}
INFO  http.handlers.waf  Tor exit nodes updated  {"count":1093}
INFO  WAF middleware version  {"version":"v0.4.14"}
INFO  Rate limit configuration  {"requests":100,"window":10,"cleanup_interval":300,"paths":["/api/v1/.*"],"match_all_paths":false}
WARN  GeoIP database not found. Country blacklisting/whitelisting will be disabled  {"path":"GeoLite2-Country.mmdb"}
INFO  IP blacklist loaded     {"path":"ip_blacklist.txt","valid_entries":223770,"invalid_entries":0,"total_lines":223770}
INFO  DNS blacklist loaded    {"path":"dns_blacklist.txt","valid_entries":854479,"total_lines":854479}
INFO  WAF rules loaded successfully   {"total_rules":33,"rule_counts":"Phase 1: 17 rules, Phase 2: 16 rules, Phase 3: 0 rules, Phase 4: 0 rules, "}
INFO  WAF middleware provisioned successfully

The middleware is implemented as a single Caddy module registered under the ID http.handlers.waf. It can be configured through the Caddyfile or directly via JSON.

Source code on GitHub: https://github.com/fabriziosalmi/caddy-waf

Proxmox LXC autoscale

fab — Thu, 13 Aug 2026 08:09:52 +0000

LXC AutoScale is an async resource management daemon for Proxmox environments. Install via oneliner, as systemd service or Docker.

It automatically adjusts CPU and memory allocations for LXC containers based on real-time usage metrics and predefined thresholds. It supports local execution, remote execution via SSH, or the Proxmox REST API as backend.

Container cloning (horizontal scaling) is also supported as an experimental feature.

Tested with Proxmox 8 and 9, 250+ stars on GitHub.

Enjoy and contribute: https://github.com/fabriziosalmi/proxmox-lxc-autoscale

Wildbox: all-in-one open security platform

fab — Fri, 07 Nov 2025 18:55:34 +0000

Hello here,

I just released a beta version of a complete security platform on GitHub. The intent is to get the community interest from day one to shape its future at the best possible level.

This project is open to your ideas, concerns and imagination.

No SaaS nor hidden traps in the plan, this IS AND WILL EVER BE managed and shaped by the community FOR the community itself.

Free for all, free for ever. I will be also focus to quick fix important concerns in the next 24hrs due to a bit of interest already on that :)

Enjoy and contribute: https://github.com/fabriziosalmi/wildbox