diff --git a/deploy-initial-vps b/deploy-initial-vps index 80941bd..b8c6681 100755 --- a/deploy-initial-vps +++ b/deploy-initial-vps @@ -62,7 +62,7 @@ rsync tmp $remote:/mnt/etc/ssh/sshd_config rm tmp cp etc/nftables/nftables-${hosts_firewall[$host]:-web}.conf tmp -sed -i "s/{{synproxy_threshold}}/$(( ${hosts_conntrack_size[$host]} / 64 ))/g" tmp +sed -i "s/{{synproxy_threshold}}/$(( ${hosts_conntrack_size[$host]:-65536} / 64 ))/g" tmp sed -i "s/{{ssh_ipv4}}/$ssh_ipv4/g" tmp sed -i "s/{{ssh_ipv6}}/$ssh_ipv6/g" tmp rsync tmp $remote:/mnt/etc/nftables.conf diff --git a/deploy-nftables b/deploy-nftables index a90787d..9270021 100755 --- a/deploy-nftables +++ b/deploy-nftables @@ -12,7 +12,7 @@ for host in ${hosts_all[@]}; do echo cp etc/nftables/nftables-${hosts_firewall[$host]:-web}.conf tmp - sed -i "s/{{synproxy_threshold}}/$(( ${hosts_conntrack_size[$host]} / 64 ))/g" tmp + sed -i "s/{{synproxy_threshold}}/$(( ${hosts_conntrack_size[$host]:-65536} / 64 ))/g" tmp sed -i "s/{{ssh_ipv4}}/$ssh_ipv4/g" tmp sed -i "s/{{ssh_ipv6}}/$ssh_ipv6/g" tmp rsync tmp $remote:/etc/nftables.conf diff --git a/hosts.sh b/hosts.sh index 31d809c..314c750 100644 --- a/hosts.sh +++ b/hosts.sh @@ -167,34 +167,10 @@ declare -Ar hosts_tcp_fastopen=( ) declare -Ar hosts_conntrack_size=( - [ns1.staging.grapheneos.org]=65536 - [bom.ns1.grapheneos.org]=65536 - [fra.ns1.grapheneos.org]=65536 - [lax.ns1.grapheneos.org]=65536 - [lon.ns1.grapheneos.org]=65536 - [mia.ns1.grapheneos.org]=65536 - [nyc.ns1.grapheneos.org]=65536 - [sea.ns1.grapheneos.org]=65536 - [sin.ns1.grapheneos.org]=65536 - [syd.ns1.grapheneos.org]=65536 - [tyo.ns1.grapheneos.org]=65536 - [brn.ns2.grapheneos.org]=65536 - [las.ns2.grapheneos.org]=65536 - [mia.ns2.grapheneos.org]=65536 - [nyc.ns2.grapheneos.org]=65536 [mail.grapheneos.org]=131072 - [staging.grapheneos.org]=65536 - [brn.grapheneos.org]=65536 - [las.grapheneos.org]=65536 - [mia.grapheneos.org]=65536 - [nyc.grapheneos.org]=65536 - [sea.grapheneos.org]=65536 - [sin.grapheneos.org]=65536 - [syd.grapheneos.org]=65536 [lax.releases.grapheneos.org]=12582912 [lon.releases.grapheneos.org]=8388608 [mia.releases.grapheneos.org]=12582912 - [staging.attestation.app]=65536 [attestation.app]=131072 [matrix.grapheneos.org]=131072 [discuss.grapheneos.org]=131072