1
0
mirror of https://github.com/tommytran732/Linux-Setup-Scripts synced 2024-12-26 08:41:57 -05:00

Force DNSSEC for Debian

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2023-01-18 07:27:49 -05:00
parent 9c88b60fcc
commit 0d3f632801
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2
2 changed files with 7 additions and 1 deletions

View File

@ -26,3 +26,6 @@ curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/chrony.con
echo "* hard core 0" | tee -a /etc/security/limits.conf
sed -i 's/#GSSAPIAuthentication no/GSSAPIAuthentication no/g' /etc/ssh/sshd_config
sed -i 's/#DNSSEC=no/DNSSEC=yes/g' /etc/systemd/resolved.conf
systemctl restart systemd-resolved

View File

@ -54,4 +54,7 @@ bash <(curl -s https://raw.githubusercontent.com/Weilbyte/PVEDiscordDark/master/
systemctl restart pveproxy.service
echo "GSSAPIAuthentication no" > /etc/ssh/ssh_config.d/10-custom.conf
echo "VerifyHostKeyDNS yes" >> /etc/ssh/ssh_config.d/10-custom.conf
echo "VerifyHostKeyDNS yes" >> /etc/ssh/ssh_config.d/10-custom.conf
sed -i 's/#DNSSEC=no/DNSSEC=yes/g' /etc/systemd/resolved.conf
systemctl restart systemd-resolved