I use fail2ban to ban IPs that fall to login and also IPs that perform common scans in the reverse proxy

On the other hand I value Authelia single configuration file which I can version control in git. Authentik is a click-ops burden.

I’ve tried the official WireGuard app and WG Tunnel, enabling unrestricted battery use, always on VPN, allowing notifications, etc. But since I upgraded to LineageOS 22.1, the app is always killed overnight.

It kills my VPN app every night.