Shill me your favorite resource for learning how to protect your web servers.

What kind of protection are you looking for? Run an up to date webserver, use an allowlist at the LB for paths you need to support, and then if you're having issues with DoS, you can add Cloudflare or an equivalent. That's the basics for a new prod webserver in my book.

Head of Engineering at Courtyard.io, bringing physical collectibles onchain. nf.td/joe /courtyard /backend

Allowlisting a load balancer is definitely a new concept to me so I'll read up on that!

The protections I'm looking for are basically just. Ensure the server can only be accessed from a specified domain. Ensure it can't be hit via curl. And probably some rate limiting for added protections.