graphene-os-server-infrastructure

Git-Mirrors/graphene-os-server-infrastructure

mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-03-12 10:06:37 -04:00

Go to file

Daniel Micay e40fb1bd4e add chronyd.service hardening based on not using sendmail

This reverts the extra directives included in the standard
chronyd.service for supporting sendmail.

2024-12-19 11:35:51 -05:00

.github

add GitHub funding metadata

2021-07-19 23:02:29 -04:00

certbot

add nominatim.grapheneos.org subdomain for network server

2024-11-20 02:40:40 -05:00

guide

add nftables dscp counter config to guide

2023-08-19 00:46:21 -04:00

home/.config

fish: add vi keybinding setup

2024-11-29 14:03:58 -05:00

logrotate.d

replace certbot log rotation with logrotate

2024-02-13 12:38:14 -05:00

mkinitcpio.d

disable mkinitcpio fallback image

2024-03-04 13:13:58 -05:00

modprobe.d

blacklist virtio_console module

2023-07-17 02:21:12 -04:00

modules-load.d

disable loose TCP connection tracking

2022-07-03 03:50:53 -04:00

nftables

update for pacman 7.0.0 download sandbox

2024-09-15 01:14:01 -04:00

packages

drop unused bash-completion package

2024-12-03 01:10:49 -05:00

pacman.d

add directory structure for mirrorlist

2023-07-11 11:38:53 -04:00

ssh

reduce SSH liveness check timeout to ~2 minutes

2024-07-02 18:06:47 -04:00

sysconfig

chrony: save/restore measurement history for servers

2024-11-05 17:10:07 -05:00

sysctl.d

handle kernel.sched_energy_aware being unavailable

2024-10-26 13:10:36 -04:00

systemd

add chronyd.service hardening based on not using sendmail

2024-12-19 11:35:51 -05:00

tmpfiles.d

add cleanup for chrony state

2024-11-05 16:59:54 -05:00

.gitignore

extend info fetching to sysctl values

2024-07-24 16:58:11 -04:00

certbot-ocsp-fetcher

Update certbot-ocsp-fetcher to match upstream

2024-07-01 21:37:10 -04:00

chrony.conf

chrony: save/restore measurement history for servers

2024-11-05 17:10:07 -05:00

connection-stats

clean up stats scripts

2023-07-16 01:25:27 -04:00

count

add 9th gen Pixels to count script

2024-10-21 05:22:59 -04:00

crypttab

drop discard for swapfile

2024-10-26 13:54:07 -04:00

deploy-initial

fix setting fish as default shell for new installs

2024-11-20 16:14:40 -05:00

disconnect

add disconnect script

2024-09-25 17:44:13 -04:00

dns-stats

dns-stats: show total TCP and UDP queries

2024-03-28 11:38:06 -04:00

fetch-info

extend info fetching to sysctl values

2024-07-24 16:58:11 -04:00

for

add batch command script

2024-11-17 10:38:51 -05:00

fstab

drop discard for swapfile

2024-10-26 13:54:07 -04:00

grub

disable autogroup since cgroups are used instead

2024-10-31 08:02:57 -04:00

hosts.sh

replace grapheneos.social server

2024-11-20 19:00:49 -05:00

LICENSE

update copyright notice

2024-01-25 01:57:18 -05:00

locale.conf

switch to C.UTF-8 locale

2023-01-10 14:09:06 -05:00

logrotate.conf

use standard log rotation approach for wtmp/btmp

2024-03-20 23:43:48 -04:00

mkinitcpio.conf

switch to systemd-based initramfs

2024-10-19 13:54:54 -04:00

nginx-create-session-ticket-keys

move umask to systemd unit configuration

2024-10-14 06:11:32 -04:00

nginx-rotate-session-ticket-keys

move umask to systemd unit configuration

2024-10-14 06:11:32 -04:00

nginx-stats

clean up stats scripts

2023-07-16 01:25:27 -04:00

ovh-mitigation

rename OVH mitigation script

2023-07-03 18:35:43 -04:00

ovh-mitigation.py

ovh-mitigation: add checking/toggling firewall

2024-07-05 00:40:20 -04:00

pacman.conf

update for pacman 7.0.0 download sandbox

2024-09-15 01:14:01 -04:00

pacreport.conf

pacreport: mark owners of more unowned files

2024-10-29 19:23:26 -04:00

README.md

Fix readme

2021-12-16 12:43:34 -05:00

reboot

improve reboot script confirmation message

2024-12-12 15:27:57 -05:00

requirements.in

add OVH mitigation control script

2023-02-22 16:22:47 -05:00

requirements.txt

update python dependencies

2024-12-14 23:20:04 -05:00

resolv.conf

add resolv.conf

2022-07-03 09:05:41 -04:00

setup

specify python3 in setup script

2023-07-06 22:12:26 -04:00

unbound.conf

force DMARC enforcement for hotmail.com and live.com

2024-09-15 01:31:08 -04:00

README.md

Information about GrapheneOS servers is available in the GrapheneOS servers article on grapheneos.org.