Manage Firewall Settings / Network Security / SSH-Settings through Coolify

[niklaslrksallguth]

In an attempt to cover all of my VPS-Management needs via Coolify, I'd love if i could manage the network security and firewall settings through Coolify. Firstly having a UI for this is great in my opinion, but it could also help uncover some pitfalls like falsely setting up a service with a public port and enforcing Network Policies. Also managing SSH-Users, Publickeys etc. would be great. Some features I thought about;

• A set of common firewall policies i can enforce
• Monitoring of a server's ports with notifications when policies are breached
• Managing the most common SSH settings and monitoring SSH access
• Status of fail2ban
• A real gem would be an easy way to setup Security Scans like ZAP or NMAP scans (kind of similar to the point above about monitoring the ports) to run on a regular basis. Having this integrated would be lovely.

[bingfenghd]

Useful ask. A few practical angles if you go for this:

• Treat host firewall as fail-closed defaults (deny inbound except SSH + Coolify proxy ports you intentionally publish), and keep app exposure as Docker/proxy publish rules rather than opening broad host ranges.
• Port-breach alerts are most useful when they compare observed listening sockets against an allowlist Coolify already knows (deployed service ports), so noise from outbound-only listeners stays low.
• For SSH: prefer key-only, disable password auth, and surface fail2ban/sshd status as read-only health rather than letting the UI rewrite /etc/ssh/sshd_config without a dry-run + rollback.
• Scheduled nmap/ZAP is powerful but easy to DoS yourself—gate it behind explicit opt-in, rate limits, and exclude the Coolify UI/API endpoints from active scans.

Happy to iterate on a minimal MVP (firewall profiles + port drift alerts) before full SSH user management.