|
.github
|
add GitHub funding metadata
|
2021-07-19 23:02:29 -04:00 |
|
certbot
|
short ISRG Root X1 chain is now the default
|
2024-06-04 13:26:50 -04:00 |
|
guide
|
add nftables dscp counter config to guide
|
2023-08-19 00:46:21 -04:00 |
|
home
|
add directory for home directory files
|
2024-06-27 10:13:15 -04:00 |
|
logrotate.d
|
replace certbot log rotation with logrotate
|
2024-02-13 12:38:14 -05:00 |
|
mkinitcpio.d
|
disable mkinitcpio fallback image
|
2024-03-04 13:13:58 -05:00 |
|
modprobe.d
|
blacklist virtio_console module
|
2023-07-17 02:21:12 -04:00 |
|
modules-load.d
|
disable loose TCP connection tracking
|
2022-07-03 03:50:53 -04:00 |
|
nftables
|
nftables: use allowlist for ICMP types
|
2024-07-25 23:13:29 -04:00 |
|
packages
|
add mutt to mail.grapheneos.org for inspecting service accounts
|
2024-07-13 19:39:31 -04:00 |
|
pacman.d
|
add directory structure for mirrorlist
|
2023-07-11 11:38:53 -04:00 |
|
ssh
|
reduce SSH liveness check timeout to ~2 minutes
|
2024-07-02 18:06:47 -04:00 |
|
sysconfig
|
enable chronyd seccomp filter
|
2023-05-07 00:02:51 -04:00 |
|
sysctl.d
|
disable io_uring without CAP_SYS_ADMIN or io_uring group
|
2024-07-01 23:15:38 -04:00 |
|
systemd
|
Add NoNewPrivileges=true for certbot
|
2024-06-24 11:55:59 -04:00 |
|
.gitignore
|
extend info fetching to sysctl values
|
2024-07-24 16:58:11 -04:00 |
|
certbot-ocsp-fetcher
|
Update certbot-ocsp-fetcher to match upstream
|
2024-07-01 21:37:10 -04:00 |
|
chrony.conf
|
chrony: raise minsources to 3
|
2024-03-31 14:03:16 -04:00 |
|
connection-stats
|
clean up stats scripts
|
2023-07-16 01:25:27 -04:00 |
|
count
|
count: add akita
|
2024-06-11 22:56:05 -04:00 |
|
crypttab
|
enable discard support for swapfile dm-crypt
|
2023-07-18 16:41:35 -04:00 |
|
deploy-initial
|
disable io_uring without CAP_SYS_ADMIN or io_uring group
|
2024-07-01 23:15:38 -04:00 |
|
dns-stats
|
dns-stats: show total TCP and UDP queries
|
2024-03-28 11:38:06 -04:00 |
|
environment
|
disable less history by default for login sessions
|
2022-10-26 04:35:23 -04:00 |
|
fetch-info
|
extend info fetching to sysctl values
|
2024-07-24 16:58:11 -04:00 |
|
fstab
|
only discard swapfile at mount time
|
2023-07-18 16:41:39 -04:00 |
|
grub
|
disable sending console output to unused ttyS0
|
2024-02-01 16:39:33 -05:00 |
|
hosts.sh
|
raise journal file size for grapheneos.social
|
2024-07-25 11:59:56 -04:00 |
|
LICENSE
|
update copyright notice
|
2024-01-25 01:57:18 -05:00 |
|
locale.conf
|
switch to C.UTF-8 locale
|
2023-01-10 14:09:06 -05:00 |
|
logrotate.conf
|
use standard log rotation approach for wtmp/btmp
|
2024-03-20 23:43:48 -04:00 |
|
nginx-create-session-ticket-keys
|
switch to noswap tmpfs from ramfs for session ticket keys
|
2024-06-28 12:44:31 -04:00 |
|
nginx-rotate-session-ticket-keys
|
replace urandom with random
|
2024-06-17 15:04:13 -04:00 |
|
nginx-stats
|
clean up stats scripts
|
2023-07-16 01:25:27 -04:00 |
|
ovh-mitigation
|
rename OVH mitigation script
|
2023-07-03 18:35:43 -04:00 |
|
ovh-mitigation.py
|
ovh-mitigation: add checking/toggling firewall
|
2024-07-05 00:40:20 -04:00 |
|
pacman.conf
|
disable unused multilib repository
|
2023-07-18 16:58:34 -04:00 |
|
pacreport.conf
|
add updatedb drop-in unit to pacreport exclusions
|
2024-02-01 18:01:06 -05:00 |
|
README.md
|
Fix readme
|
2021-12-16 12:43:34 -05:00 |
|
requirements.in
|
add OVH mitigation control script
|
2023-02-22 16:22:47 -05:00 |
|
requirements.txt
|
update python dependencies
|
2024-07-05 00:32:25 -04:00 |
|
resolv.conf
|
add resolv.conf
|
2022-07-03 09:05:41 -04:00 |
|
setup
|
specify python3 in setup script
|
2023-07-06 22:12:26 -04:00 |
|
unbound.conf
|
force DMARC enforcement for outlook.com
|
2024-07-08 10:38:42 -04:00 |
