nymnympseudonym

Honest question: Why fail2ban? Have you considered crowdsec ?

I used to use the former; I’ve found the latter to be easier to maintain and I like that it shares threats real-time

Do check OpenWRT again. These days even a network-ignorant person like myself can point and click to set up guest networks, configure individual devices’ access, adblock, crazy good firewalls, …

Very slick & professional

It reminds us we are on the side of The Good.

It is also wonderful schadenfreude to see scammers frustrated.

I too use my PiHole for this pleasurable activity

Look at all the bots and trolls that slammed against my Skynet OpenWRT module… and died.

I too run a PiHole in an RPi, physically plugged in to my OpenWRT router

My name registration with porkbun is cheap enough that I don’t remember exactly. Had no issues with them.

I feel bad for households without a nerd to set up the family pihole

Like families where nobody cooks

Could be hardware

TBH I chose Funkwhale for my solution because it looked easy and out of the box, I just add a single Docker and subdomain to my existing site.

It wound up being more or less what you describe.

I may well follow OP’s guide and nuke my Funkwhale despite the work I put into it and the fact that it does basically work for its intended purpose

Question: did you consider Funkwhale , and if so why did you choose this other stack instead?

EDIT: fix link sry