Go to file
Daniel Micay 320ad2e3a8 replace tmpfiles.d with RuntimeDirectory for nginx
This is much more robust because nginx will fail to start after being
killed or crashing due to only removing old Unix domain sockets when it
stops cleanly. It ends up owned by root:root instead of root:http which
is fine because only the master process opens it.
2022-09-26 16:43:17 -04:00
.github add GitHub funding metadata 2021-07-19 23:02:29 -04:00
modprobe.d blacklist legacy ip_tables module 2022-08-31 05:19:40 -04:00
modules-load.d disable loose TCP connection tracking 2022-07-03 03:50:53 -04:00
pam.d update system-login 2021-11-21 22:38:36 -05:00
sysctl.d vm.max_map_count to 1048576 2022-09-25 07:48:50 -04:00
systemd replace tmpfiles.d with RuntimeDirectory for nginx 2022-09-26 16:43:17 -04:00
.gitignore add packages, modules and logs to gitignore 2022-07-27 02:16:04 -04:00
certbot-ocsp-fetcher add subset of shared configuration files 2021-07-28 08:23:04 -04:00
chrony.conf use production time.nl hostname 2022-08-30 14:51:44 -04:00
grub set preempt=none for PREEMPT_DYNAMIC kernels 2022-08-07 19:26:29 -04:00
hosts add subset of shared configuration files 2021-07-28 08:23:04 -04:00
locale.conf add locale configuration 2022-02-15 01:03:56 -05:00
locale.gen add locale configuration 2022-02-15 01:03:56 -05:00
mirrorlist simplify mirrorlist 2022-09-15 23:13:28 -04:00
mkinitcpio.conf Revert "hard-wire ext4 as the only initramfs filesystem" 2022-07-27 02:47:20 -04:00
nftables-attestation.conf reorder network allowlists for consistency 2022-08-10 11:13:31 -04:00
nftables-discuss.conf reorder network allowlists for consistency 2022-08-10 11:13:31 -04:00
nftables-dns.conf remove PowerDNS for unbound nftables allowlist 2022-09-10 18:11:58 -04:00
nftables-mail.conf reorder network allowlists for consistency 2022-08-10 11:13:31 -04:00
nftables-matrix.conf reorder network allowlists for consistency 2022-08-10 11:13:31 -04:00
nftables-web.conf reorder network allowlists for consistency 2022-08-10 11:13:31 -04:00
pacman.conf add subset of shared configuration files 2021-07-28 08:23:04 -04:00
pacreport.conf add pacreport.conf 2022-07-24 20:55:47 -04:00
README.md Fix readme 2021-12-16 12:43:34 -05:00
resolv.conf add resolv.conf 2022-07-03 09:05:41 -04:00
sshd_config sshd: reduce MaxAuthTries to 1 2022-07-22 20:00:52 -04:00
unbound.conf allow unbound to use more outbound ports 2022-09-22 13:41:47 -04:00

Information about GrapheneOS servers is available in the GrapheneOS servers article on grapheneos.org.