I really do not think anyone should trust a vibe coded repo that launched 1 minute ago as a viable defense for any service.

Yes, you should vibe-code your own instead.

(Not even joking, if you're going to go hog go whole-hog.)

You're right, you should just leave your PHP totally unprotected.

I would recommend running this binary as a user that has no access to any files, it can just proxy traffic through a port. I will put that in the README.

You should follow the NSA's advice or the Prime Minister of Japan's advice and take the service offline: https://x.com/NSACyber/status/2112903220209098897

Yes. Take your PHP service offline for the next year, until you can find a way to migrate it off your host and rebuild the PHP yourself on your environment. That'll help.