Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-11-19 22:42:24 -05:00
Code Issues Projects Releases Packages Wiki Activity
Shared server infrastructure - https://grapheneos.org/articles/grapheneos-servers
797 commits 1 branch 0 tags 3.3 MiB
Find a file
Daniel Micay 8697cf2a2d switch back to unified journald rotation/retention 
Since we're no longer storing nginx logs in journald, we no longer need
to use journald configuration to control nginx log rotation/retention.

We switched from nginx to dnsdist for the authoritative DNS servers and
are therefore no longer logging any of the queries persistently since we
can rely on the PowerDNS and dnsdist in-memory buffers and stats.

We can use nginx-specific logrotate configuration on a per-server basis
based on balancing the usefulness of access logs with storage space and
getting rid of slightly sensitive data faster (mainly IP addresses).
2025-11-03 20:03:59 -05:00
.github add GitHub funding metadata 2021-07-19 23:02:29 -04:00
boot/loader disable timeout for systemd-boot by default 2025-05-21 21:48:54 -04:00
certbot add --copy-links to certbot dnsdist deployment 2025-08-17 03:03:33 -04:00
etc switch back to unified journald rotation/retention 2025-11-03 20:03:59 -05:00
guide DSCP debugging replaced with counter on map 2025-09-04 00:53:20 -04:00
home/.config update LS_COLORS configuration 2025-10-30 16:17:33 -04:00
packages merge website and network servers 2025-11-03 00:33:30 -05:00
.gitignore gitignore: add /lock 2025-10-20 21:46:56 -04:00
certbot-replicate add script for deploying certbot replication setup 2025-10-30 14:22:32 -04:00
connection-stats clean up stats scripts 2023-07-16 01:25:27 -04:00
count count: fix counting 9th gen Pixel updates 2025-10-06 14:36:23 -04:00
deploy-bootloader add bootloader deployment script 2025-10-29 18:32:52 -04:00
deploy-certbot deploy-certbot: avoid syncing replicate.conf 2025-11-03 00:33:30 -05:00
deploy-initial-vps rename deploy-initial to deploy-initial-vps 2025-10-19 14:58:36 -04:00
deploy-nftables add nftables deployment script 2025-10-19 15:35:13 -04:00
deploy-primary simplify deploy-primary 2025-10-30 17:06:07 -04:00
deploy-secondary add initial session ticket key synchronization 2025-10-30 14:22:55 -04:00
deploy-web set up syslog-ng for nginx access log 2025-11-03 00:33:28 -05:00
disconnect disconnect: handle separate non-interactive sessions too 2025-10-11 18:04:48 -04:00
dns-stats dns-stats: show total TCP and UDP queries 2024-03-28 11:38:06 -04:00
fetch-info fetch-info: enable standard error detection setup 2025-09-25 15:50:14 -04:00
for add batch command script 2024-11-17 10:38:51 -05:00
hosts.sh switch back to unified journald rotation/retention 2025-11-03 20:03:59 -05:00
LICENSE migrate to new tlsserver Let's Encrypt profile 2025-05-08 22:26:43 -04:00
nginx-stats clean up stats scripts 2023-07-16 01:25:27 -04:00
ovh-mitigation rename OVH mitigation script 2023-07-03 18:35:43 -04:00
ovh-mitigation.py drop code for toggling OVH permanent mitigation 2025-08-09 17:41:33 -04:00
README.md Fix readme 2021-12-16 12:43:34 -05:00
reboot improve reboot script confirmation message 2024-12-12 15:27:57 -05:00
requirements.in add OVH mitigation control script 2023-02-22 16:22:47 -05:00
requirements.txt update python dependencies 2025-10-21 13:21:17 -04:00
session-ticket-keys-create use consistent naming for session ticket key scripts/units 2025-10-30 17:06:07 -04:00
session-ticket-keys-rotate use consistent naming for session ticket key scripts/units 2025-10-30 17:06:07 -04:00
session-ticket-keys-sync add initial session ticket key synchronization 2025-10-30 14:22:55 -04:00
session-ticket-keys-sync-deploy add initial session ticket key synchronization 2025-10-30 14:22:55 -04:00
setup specify python3 in setup script 2023-07-06 22:12:26 -04:00
shared.sh add certbot and web deployment scripts 2025-10-19 12:30:53 -04:00
tcp-fastopen-rotate-keys switch to xxd for converting random bytes to hex 2025-09-23 19:56:42 -04:00

README.md

Information about GrapheneOS servers is available in the GrapheneOS servers article on grapheneos.org.