If you run a homelab or self-host apps like Vaultwarden, Immich, Home Assistant, or Nextcloud, you've probably watched your reverse proxy access logs get hammered 24/7 by bots probing for:
/.env and .git/config
wp-login.php (even when you don't even run PHP!)
Database dumps and exposed admin panels
We built RouteWarden with self-hosters front and center:
Zero Cloudflare dependency (no 100MB upload caps breaking your Immich/Nextcloud 4K videos, no corporate traffic decryption).
Tailscale & WireGuard friendly (one-line subnet bypass for 100.64.0.0/10 and your home LAN).
Featherweight (<15MB RAM on Raspberry Pis and N100 mini PCs).
Active defense (drop connections or hit bots back with memory-exhausting gzip bombs).
