@brownmustardminion DDoS usually involves attacks from multiple geographical locations simultaneously. You will eliminate a large threat surface by restricting which countries are allowed for incoming. Of course this won't prevent targeted attacks from hackers who know you and want revenge and can setup bots in a single location but these are rare. Most attempts are by script kiddies.

@brownmustardminion pfsense + incoming geo IP control (allow only from certain regions)

@Delusion6903 @incici element uses polling. Try using ntfy unified push along with it. <2% battery usage per day.