 Ruakij
|
49834b858b
|
common: remove fail2ban only with fail2ban_remove set for the host
|
2026-10-24 16:11:36 +00:00 |
|
|
Ruakij
|
19a62a43ca
|
common: remove fail2ban where CrowdSec agent and bouncer run, stop installing it
|
2026-10-24 15:57:34 +00:00 |
|
|
Ruakij
|
1ede3d3329
|
Read the fail2ban sshd jail from the journal, Debian 12+ has no auth.log and the jail failed to start
|
2026-10-13 16:36:08 +00:00 |
|
|
Ruakij
|
6390e6288b
|
Disable SSH password auth in the common role only when sshd is active
|
2026-10-09 14:37:24 +00:00 |
|
|
Ruakij
|
13d60c4f9b
|
Install nmon and fail2ban and upgrade packages on every distribution in the common role
|
2026-10-09 14:37:24 +00:00 |
|
|
Ruakij
|
cb09f77b68
|
Enable TCP BBR with the fq qdisc on kernels from 4.9 in the common role
|
2026-10-09 14:37:23 +00:00 |
|
|
Ruakij
|
84fd52b678
|
Generate a random IPv6 stable secret once per host for the default interface in the common role
|
2026-10-09 14:37:23 +00:00 |
|
|
Ruakij
|
c7eceae087
|
Ensure the .bashrc exists, expand aliases after sudo and color grep in the common role aliases
|
2026-10-09 14:37:23 +00:00 |
|
|
Ruakij
|
b62992f21e
|
Cap the systemd journal at 512M on disk, 128M in memory and two weeks in the common role
|
2026-10-09 12:53:44 +00:00 |
|
|
Ruakij
|
9ded6814c3
|
Pin the fstrim timer and the monthly ZFS trim and scrub per host in the common role to keep them out of the backup window
|
2026-10-07 22:42:08 +00:00 |
|
|
Ruakij
|
a9a60e3106
|
Keep the clock on systemd-timesyncd and the timezone on UTC in the common role
|
2026-10-07 21:22:01 +00:00 |
|
|
Ruakij
|
975746e7d7
|
Add IPv6-network to common
|
2022-11-02 10:27:06 +01:00 |
|
|
Ruakij
|
e7b0549468
|
Add role common
|
2022-10-17 12:59:33 +02:00 |
|