Thank you both, I’m starting to get it.

Thank you! I’ll start there and check that I can easily access the logs.

I’ll give it a look. No real reason for fail2ban specifically, it’s just often mentioned as an easy process for beginners.

I’m still not sure what this means. Run fail2ban on the router or on each VM? Caddy does have a fail2ban module if it makes more sense to run there?