Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-04-15 05:33:00 -04:00
Code Issues Packages Projects Releases Wiki Activity
611 Commits 1 Branch 0 Tags
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Daniel Micay 0b6e5e017e sshd: use mlkem768x25519-sha256 for key exchange 
The default was switched from sntrup761x25519-sha512@openssh.com to
mlkem768x25519-sha256 in OpenSSH 10.0. It's much faster and also matches
the new default TLS key exchange algorithm for OpenSSL 3.5.0.
2025-04-12 11:37:03 -04:00
.github
add GitHub funding metadata
2021-07-19 23:02:29 -04:00
boot/loader
add systemd-boot configuration
2025-04-11 13:44:37 -04:00
certbot
add nominatim.grapheneos.org subdomain for network server
2024-11-20 02:40:40 -05:00
guide
add nftables dscp counter config to guide
2023-08-19 00:46:21 -04:00
home/.config
fish: add vi keybinding setup
2024-11-29 14:03:58 -05:00
logrotate.d
replace certbot log rotation with logrotate
2024-02-13 12:38:14 -05:00
mkinitcpio.d
disable mkinitcpio fallback image
2024-03-04 13:13:58 -05:00
modprobe.d
blacklist virtio_console module
2023-07-17 02:21:12 -04:00
modules-load.d
set up systemd runtime watchdog support
2025-02-12 08:23:11 -05:00
nftables
replace 0.releases.grapheneos.org server
2025-03-19 12:05:37 -04:00
packages
drop legacy OVH EU update servers
2025-04-10 11:07:31 -04:00
pacman.d
add directory structure for mirrorlist
2023-07-11 11:38:53 -04:00
ssh
sshd: use mlkem768x25519-sha256 for key exchange
2025-04-12 11:37:03 -04:00
sysconfig
chrony: save/restore measurement history for servers
2024-11-05 17:10:07 -05:00
sysctl.d
switch to BBR for congestion control
2025-04-03 17:08:49 -04:00
systemd
drop legacy OVH EU update servers
2025-04-10 11:07:31 -04:00
tmpfiles.d
add cleanup for chrony state
2024-11-05 16:59:54 -05:00
.gitignore
add authorized_keys configuration
2025-04-10 15:14:25 -04:00
certbot-ocsp-fetcher
Update certbot-ocsp-fetcher to match upstream
2024-07-01 21:37:10 -04:00
chrony.conf
chrony: save/restore measurement history for servers
2024-11-05 17:10:07 -05:00
connection-stats
clean up stats scripts
2023-07-16 01:25:27 -04:00
count
count: handle optimized factory image downloads
2025-01-02 23:39:25 -05:00
crypttab
drop discard for swapfile
2024-10-26 13:54:07 -04:00
deploy-initial
deploy-initial: handle fstab split
2025-04-05 09:57:18 -04:00
disconnect
add disconnect script
2024-09-25 17:44:13 -04:00
dns-stats
dns-stats: show total TCP and UDP queries
2024-03-28 11:38:06 -04:00
fetch-info
extend info fetching to sysctl values
2024-07-24 16:58:11 -04:00
for
add batch command script
2024-11-17 10:38:51 -05:00
fstab.metal
add 8.releases.grapheneos.org server
2025-04-02 14:47:25 -04:00
fstab.virtual
add 8.releases.grapheneos.org server
2025-04-02 14:47:25 -04:00
grub
disable autogroup since cgroups are used instead
2024-10-31 08:02:57 -04:00
hosts.sh
add authorized_keys configuration
2025-04-10 15:14:25 -04:00
LICENSE
update copyright notice
2025-02-05 04:40:50 -05:00
locale.conf
switch to C.UTF-8 locale
2023-01-10 14:09:06 -05:00
logrotate.conf
use standard log rotation approach for wtmp/btmp
2024-03-20 23:43:48 -04:00
mkinitcpio.conf
switch to systemd-based initramfs
2024-10-19 13:54:54 -04:00
nginx-create-session-ticket-keys
move umask to systemd unit configuration
2024-10-14 06:11:32 -04:00
nginx-rotate-session-ticket-keys
move umask to systemd unit configuration
2024-10-14 06:11:32 -04:00
nginx-stats
clean up stats scripts
2023-07-16 01:25:27 -04:00
ovh-mitigation
rename OVH mitigation script
2023-07-03 18:35:43 -04:00
ovh-mitigation.py
ovh-mitigation: add checking/toggling firewall
2024-07-05 00:40:20 -04:00
pacman.conf
update for pacman 7.0.0 download sandbox
2024-09-15 01:14:01 -04:00
pacreport.conf
pacreport: mark owners of more unowned files
2024-10-29 19:23:26 -04:00
README.md
Fix readme
2021-12-16 12:43:34 -05:00
reboot
improve reboot script confirmation message
2024-12-12 15:27:57 -05:00
requirements.in
add OVH mitigation control script
2023-02-22 16:22:47 -05:00
requirements.txt
update python dependencies
2025-02-04 03:23:13 -05:00
resolv.conf
add resolv.conf
2022-07-03 09:05:41 -04:00
setup
specify python3 in setup script
2023-07-06 22:12:26 -04:00
unbound.conf
force DMARC enforcement for hotmail.com and live.com
2024-09-15 01:31:08 -04:00

README.md

Information about GrapheneOS servers is available in the GrapheneOS servers article on grapheneos.org.

Description
Shared server infrastructure - https://grapheneos.org/articles/grapheneos-servers
grapheneos
Readme MIT 2.1 MiB
Languages
Shell 52.1%
Vim Script 43.7%
Python 2.4%
Erlang 1.4%
Metal 0.4%