wolfgirl.bar update: i added the cloudflare IP ranges to the fail2ban exclude list
before that it would have been technically possible for someone to break all media by sending a specific HTTP GET request to media.wolfgirl.bar and getting the CDN servers banned