Best practices to harden Nginx Proxy Manager container (rate-limits, brute-force bans, container/network security)

[rikrdo89]

What would be some ways to harden NPM, specifically to block credential-stuffing or brute-force logins and rate-limit noisy scanners?
Any guidance, sample configs, or pointers to existing docs much appreciated—happy to PR updated docs if this helps others.
Thanks!