Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-03-09 08:19:44 -04:00
Code Issues Packages Projects Releases Wiki Activity
354 Commits 1 Branch 0 Tags
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Daniel Micay 455ef92c18 disable chrony client log 
This is only needed to support clients using the interleaved mode. We
only use chrony as a server on our network servers and the clients are
only using SNTP via xtra-daemon so we don't need this. This frees up a
little bit of memory and avoids having a list of recent clients stored
in memory.
2024-03-20 23:24:57 -04:00
.github
add GitHub funding metadata
2021-07-19 23:02:29 -04:00
certbot
switch main domain for ECDSA mail server cert
2024-01-25 12:55:57 -05:00
guide
add nftables dscp counter config to guide
2023-08-19 00:46:21 -04:00
logrotate.d
replace certbot log rotation with logrotate
2024-02-13 12:38:14 -05:00
mkinitcpio.d
disable mkinitcpio fallback image
2024-03-04 13:13:58 -05:00
modprobe.d
blacklist virtio_console module
2023-07-17 02:21:12 -04:00
modules-load.d
disable loose TCP connection tracking
2022-07-03 03:50:53 -04:00
packages
add sqlite-analyzer to attestation servers
2024-03-08 11:54:02 -05:00
pacman.d
add directory structure for mirrorlist
2023-07-11 11:38:53 -04:00
ssh
raise ssh background traffic priority to af11
2023-08-14 23:32:00 -04:00
sysconfig
enable chronyd seccomp filter
2023-05-07 00:02:51 -04:00
sysctl.d
disable currently unused energy aware scheduling
2024-02-12 16:13:45 -05:00
systemd
raise journal size for high log volume servers
2024-03-01 10:05:39 -05:00
.gitignore
add authorized_keys to gitignore
2024-02-03 17:48:56 -05:00
certbot-ocsp-fetcher
update certbot-ocsp-fetcher
2024-01-25 01:23:49 -05:00
chrony.conf
disable chrony client log
2024-03-20 23:24:57 -04:00
connection-stats
clean up stats scripts
2023-07-16 01:25:27 -04:00
count
count: drop 3rd gen Pixels
2024-02-24 19:19:59 -05:00
crypttab
enable discard support for swapfile dm-crypt
2023-07-18 16:41:35 -04:00
deploy-initial
lsof replaced with lsfd
2024-03-06 16:53:42 -05:00
deploy.sh
explicit set XFS allocation group count
2024-02-24 10:28:10 -05:00
dns-stats
add uptime to dns stats
2024-02-03 17:30:22 -05:00
environment
disable less history by default for login sessions
2022-10-26 04:35:23 -04:00
fetch-info
filter irrelevant module output
2024-01-03 10:18:15 -05:00
fstab
only discard swapfile at mount time
2023-07-18 16:41:39 -04:00
grub
disable sending console output to unused ttyS0
2024-02-01 16:39:33 -05:00
hosts
add subset of shared configuration files
2021-07-28 08:23:04 -04:00
hosts.sh
split grapheneos.org hosts array
2024-03-18 21:10:47 -04:00
inputrc
add basic inputrc
2024-03-14 15:48:53 -04:00
LICENSE
update copyright notice
2024-01-25 01:57:18 -05:00
locale.conf
switch to C.UTF-8 locale
2023-01-10 14:09:06 -05:00
logrotate.conf
replace certbot log rotation with logrotate
2024-02-13 12:38:14 -05:00
nftables-attestation.conf
reorder network allowlists for consistency
2022-08-10 11:13:31 -04:00
nftables-discuss.conf
disable services on IPv6 for discussion forum
2023-12-22 17:47:49 -05:00
nftables-mail.conf
prepare to move MTA-STS web server to mail server
2023-06-21 13:12:04 -04:00
nftables-matrix.conf
fix matrix.grapheneos.org loopback nftables rules
2022-12-25 19:03:41 -05:00
nftables-network.conf
nftables: drop unnecessary semicolons
2023-06-10 22:14:54 -04:00
nftables-ns1.conf
stop sending external ADoT queries through unbound
2024-01-19 13:44:47 -05:00
nftables-ns2.conf
stop sending external ADoT queries through unbound
2024-01-19 13:44:47 -05:00
nftables-social.conf
switch to unix domain sockets for mastodon
2023-02-17 16:24:35 -05:00
nftables-web.conf
baseline web server config doesn't use DNS
2023-02-11 03:26:25 -05:00
nginx-create-session-ticket-keys
clean up session ticket rotation scripts
2024-03-20 22:55:40 -04:00
nginx-rotate-session-ticket-keys
clean up session ticket rotation scripts
2024-03-20 22:55:40 -04:00
nginx-stats
clean up stats scripts
2023-07-16 01:25:27 -04:00
ovh-mitigation
rename OVH mitigation script
2023-07-03 18:35:43 -04:00
ovh-mitigation.py
rename OVH mitigation script
2023-07-03 18:35:43 -04:00
pacman.conf
disable unused multilib repository
2023-07-18 16:58:34 -04:00
pacreport.conf
add updatedb drop-in unit to pacreport exclusions
2024-02-01 18:01:06 -05:00
README.md
Fix readme
2021-12-16 12:43:34 -05:00
requirements.in
add OVH mitigation control script
2023-02-22 16:22:47 -05:00
requirements.txt
update python dependencies
2024-02-23 13:04:36 -05:00
resolv.conf
add resolv.conf
2022-07-03 09:05:41 -04:00
setup
specify python3 in setup script
2023-07-06 22:12:26 -04:00
unbound.conf
unbound: block dns rebinding
2023-10-04 10:26:16 -04:00

README.md

Information about GrapheneOS servers is available in the GrapheneOS servers article on grapheneos.org.

Description
Shared server infrastructure - https://grapheneos.org/articles/grapheneos-servers
grapheneos
Readme MIT 2 MiB
Languages
Shell 52.3%
Vim Script 43.9%
Python 2.4%
Erlang 1.4%