This site is hosted on the same server as The New Leaf Journal, and I use Cloudron to manage the server. Beginning around early spring last year, The New Leaf Journal began to crash once every few days when Cloudron health checks failed (I have not had any similar issues with this site, which is much lower traffic). I attributed the problems to bot traffic, and I think I was correct to do so. I tried many fixes, some of which worked for a time before the downtime problems returned. After having a few too many incidents in January, I bit the bullet and moved up a tier on our Hetzner VPS server (I had been on the higher resource tier prior from February 2022 through May 2023 before downgrading to a smaller VPS to save a small amount money, initially without any problems). I thought all was well until NLJ crashed again for three hours yesterday morning. I am not inclined to go up another tier, so I decided to see if I could find a more durable solution that did not involve changing how I run NLJ (I do not have time to sit down and work on that now) or spending more money (I would rather eat the occasional downtime at a point). I poked around and noticed that Cloudron has a built-in firewall separate from app-level settings (I use Jeff Starr’s 8G Firewall in the .htaccess files for both this site and NLJ for app-level protection). I figured that preventing the bots from hitting NLJ at all may reduce strain on the site, which was pushing my server’s CPU limits far more often than I would like. I found an up-to-date list of bad IPs from AbuseIPD maintained in a GitHub repository and dumped them into my Cloudron firewall (I noted that all of the recent malicious bots that had hit NLJ that day were included on the list). Did it have an effect? I present the following chart showing CPU and RAM usage for NLJ over the previous seven days.

What do you think? Thoughts? As an aside, I will note that Koko Analytics, the free and open source local page visit counting solution I use here and on NLJ, shows no noticeable drop in legitimate visitor traffic since I started using Cloudron’s firewall yesterday. I am crossing my fingers that keeping the Cloudron firewall up to date will resolve the NLJ issues I have been having.
