DEV Community

Mustafa.Ramx
Mustafa.Ramx

Posted on

How I Secured My Self-Hosted Coolify Server With CrowdSec Firewall (Step-by-Step Guide)

Are you self-hosting Coolify as a Vercel or Netlify alternative? It’s an awesome platform, but security is key if you run it on your own VPS.

When I first deployed Coolify, I noticed that many guides ignore the topic of server security. Your Coolify server runs Traefik + Docker — and unless you secure it properly, you could be exposed to:

Port scanning
SSH brute force
HTTP probing (bots hitting your sites)
Path / CVE attacks
Or… even full server compromise

After testing different options, I found that CrowdSec + CrowdSec Traefik Bouncer is the best combo to protect your Coolify server & your websites. It works like a modern Fail2Ban but smarter.

I wrote a full step-by-step guide here:
Secure Your Coolify Server & Websites With CrowdSec and Traefik

It covers:
Protecting Traefik (global HTTP/HTTPS protection)
Firewall bouncer for server-level protection (SSH, ports)
Automatically block bots & attackers in real-time
That setup will protect all your websites and the server

If you’re self-hosting Coolify → this setup is a must-have in my opinion.

Feel free to ask me anything! ^_^

Top comments (0)