If you’re self-hosting a Nostr relay, BTCPay, or even a blog paid in BTC, you’ll eventually meet the DDoS boss.

Quick anti-DDoS setup that saved me last month:

Use a reverse proxy like nginx with limit_req_zone

Geo-block countries irrelevant to your audience

Set fail2ban rules on nginx logs

Move your service behind a cheap VPS and change its IP weekly

Paid the VPS only in Bitcoin, so zero credit card trail.

This isn’t bulletproof, but it makes the attacker spend way more than you do.