2025-02-18, 01:49 PM
Caddy has pretty secure defaults. The only thing I can think of off the top of my head is to hide user names from the login screen. This will need to be turned off for all users. This would result in users having to type in their user name, but this means that an attacker trying to get in doesn't have a starting point.
Also make sure that your Jellyfin users have a max password failure attempts value set.
Also make sure that your Jellyfin users have a max password failure attempts value set.