Comment on Is it normal to not have any malicious login attempts?
Shimitar@downonthestreet.eu 2 weeks ago100% agree.
One point: use an SSO like authelia or authentic. Way better than basic auth and you get the fancy login form too preserving all the benefits, and you can also use OIDC with those services that require more complex setup for proper auth