Docker WAF vs single-binary WAF — how I choose for a single VPS

Homelab and small-prod threads keep landing on the same question: “I want a self-hosted WAF....