graphene-os-server-infrastructure

Git-Mirrors/graphene-os-server-infrastructure

Fork 0

mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-02-06 18:25:36 -05:00

Go to file

Daniel Micay e3c2c1565d ovh-mitigation: add checking/toggling firewall

2024-07-05 00:40:20 -04:00

.github

add GitHub funding metadata

2021-07-19 23:02:29 -04:00

certbot

short ISRG Root X1 chain is now the default

2024-06-04 13:26:50 -04:00

guide

add nftables dscp counter config to guide

2023-08-19 00:46:21 -04:00

home

add directory for home directory files

2024-06-27 10:13:15 -04:00

logrotate.d

replace certbot log rotation with logrotate

2024-02-13 12:38:14 -05:00

mkinitcpio.d

disable mkinitcpio fallback image

2024-03-04 13:13:58 -05:00

modprobe.d

blacklist virtio_console module

2023-07-17 02:21:12 -04:00

modules-load.d

disable loose TCP connection tracking

2022-07-03 03:50:53 -04:00

nftables

raise burst value for synproxy threshold

2024-04-26 16:30:49 -04:00

packages

add postfix-pcre package to mail.grapheneos.org

2024-05-30 12:12:05 -04:00

pacman.d

add directory structure for mirrorlist

2023-07-11 11:38:53 -04:00

ssh

reduce SSH liveness check timeout to ~2 minutes

2024-07-02 18:06:47 -04:00

sysconfig

enable chronyd seccomp filter

2023-05-07 00:02:51 -04:00

sysctl.d

disable io_uring without CAP_SYS_ADMIN or io_uring group

2024-07-01 23:15:38 -04:00

systemd

Add NoNewPrivileges=true for certbot

2024-06-24 11:55:59 -04:00

.gitignore

add authorized_keys to gitignore

2024-02-03 17:48:56 -05:00

certbot-ocsp-fetcher

Update certbot-ocsp-fetcher to match upstream

2024-07-01 21:37:10 -04:00

chrony.conf

chrony: raise minsources to 3

2024-03-31 14:03:16 -04:00

connection-stats

clean up stats scripts

2023-07-16 01:25:27 -04:00

count

count: add akita

2024-06-11 22:56:05 -04:00

crypttab

enable discard support for swapfile dm-crypt

2023-07-18 16:41:35 -04:00

deploy-initial

disable io_uring without CAP_SYS_ADMIN or io_uring group

2024-07-01 23:15:38 -04:00

dns-stats

dns-stats: show total TCP and UDP queries

2024-03-28 11:38:06 -04:00

environment

disable less history by default for login sessions

2022-10-26 04:35:23 -04:00

fetch-info

filter irrelevant module output

2024-01-03 10:18:15 -05:00

fstab

only discard swapfile at mount time

2023-07-18 16:41:39 -04:00

grub

disable sending console output to unused ttyS0

2024-02-01 16:39:33 -05:00

hosts.sh

increase journal file size for 3.grapheneos.network

2024-06-21 16:51:36 -04:00

LICENSE

update copyright notice

2024-01-25 01:57:18 -05:00

locale.conf

switch to C.UTF-8 locale

2023-01-10 14:09:06 -05:00

logrotate.conf

use standard log rotation approach for wtmp/btmp

2024-03-20 23:43:48 -04:00

nginx-create-session-ticket-keys

switch to noswap tmpfs from ramfs for session ticket keys

2024-06-28 12:44:31 -04:00

nginx-rotate-session-ticket-keys

replace urandom with random

2024-06-17 15:04:13 -04:00

nginx-stats

clean up stats scripts

2023-07-16 01:25:27 -04:00

ovh-mitigation

rename OVH mitigation script

2023-07-03 18:35:43 -04:00

ovh-mitigation.py

ovh-mitigation: add checking/toggling firewall

2024-07-05 00:40:20 -04:00

pacman.conf

disable unused multilib repository

2023-07-18 16:58:34 -04:00

pacreport.conf

add updatedb drop-in unit to pacreport exclusions

2024-02-01 18:01:06 -05:00

README.md

Fix readme

2021-12-16 12:43:34 -05:00

requirements.in

add OVH mitigation control script

2023-02-22 16:22:47 -05:00

requirements.txt

update python dependencies

2024-07-05 00:32:25 -04:00

resolv.conf

add resolv.conf

2022-07-03 09:05:41 -04:00

setup

specify python3 in setup script

2023-07-06 22:12:26 -04:00

unbound.conf

force DMARC enforcement for gmail.com

2024-04-15 11:42:03 -04:00

README.md

Information about GrapheneOS servers is available in the GrapheneOS servers article on grapheneos.org.