(Follow Up) Securing Your self-hosted FoundryVTT instance

• fvtt-docker

  3 29 3.8 Dockerfile

  Foundry VTT - Docker

For people self hosting, I highly recommend running a swag container and a foundry container.

• docker-swag

  295 2,539 9.1 Dockerfile

  Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.

  

For people self hosting, I highly recommend running a swag container and a foundry container.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• oauth2-proxy

  98 8,712 9.0 Go

  A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

  

If you're already using Docker, I've had luck with https://github.com/oauth2-proxy/oauth2-proxy + Google (https://oauth2-proxy.github.io/oauth2-proxy/docs/configuration/oauth_provider/#google-auth-provider).

• Caddy

  403 53,904 9.5 Go

  Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

  

I use nginx and certbot for this, as you suggested, but it might be worth mentioning Caddy as another option. Some very enthusiastic users say it will do the same job with a lot less work for the admin, and I haven't seen a rebuttal to their claims, so it might be a better choice for folks who aren't already familiar with more traditional approaches.

Suggest a related project