162 karma · joined May 5, 2020
[1] https://projects.propublica.org/nonprofits/organizations/824...
"If this Court prohibits Google from sharing revenue for search distribution, Apple would have two unacceptable choices. It could still let users in the United States choose Google as a search engine for Safari, but Apple could not receive any share of the resulting revenue, so Google would obtain valuable access to Apple's users at no cost. Or Apple could remove Google Search as a choice on Safari. But because customers prefer Google, removing it as an option would harm both Apple and its customers."
and "... it is unlikely that Apple will decide to create a search engine in the future, regardless of what remedies are ordered in this case."
Source: https://fingfx.thomsonreuters.com/gfx/legaldocs/zgvoalybovd/...
It was true when they accepted the offer, time passes and things changed (e.g., got a better offer), now it's not true.
I'm definitely going to add fail2ban and UFW rate limiting to start with, and look into a firewall on the edge in the unlikely event that GoAccess shows a deluge of traffic. I feel a bit better at least knowing now what the weak point is, so thanks!
- Port forwarding only 80 and 443 on my router to the RPi. That should be the only incoming traffic allowed through my regular home router. What would a more advanced router add?
- Setup firewall on the RPi using ufw to allow 80 and 443 to Nginx. Port 22 also allowed for SSH only on the local network (I can't edit my site away from home). I think ufw also allows some rate limiting, so will set that up next too.
- Nginx only listens to 80 and 443 to serve content.