Hacker News Reader

Yeah I have 10+ machines with fail2ban configured and 0 of them on my LAN though.

well just whitelist your Public IPs or use a combo of IPset & port knockd. Works fine for me for variable IPs.