From 0f09f6b5c35e99f02e75de4d6baff587f82ed4aa Mon Sep 17 00:00:00 2001 From: Tommy Date: Sat, 29 Jul 2023 07:37:17 -0700 Subject: [PATCH] Fix unbound config Signed-off-by: Tommy --- GCP-Debian-11.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/GCP-Debian-11.sh b/GCP-Debian-11.sh index 21f5f6e..da27d63 100644 --- a/GCP-Debian-11.sh +++ b/GCP-Debian-11.sh @@ -10,7 +10,7 @@ sudo find /etc/apt/sources.list.d -type f -exec sudo sed -i 's/http:/https:/g' { sudo apt update sudo apt upgrade -y -sudo apt install -y --no-install-recommends tuned unbound ufw +sudo apt install -y --no-install-recommends tuned unbound resolvconf ufw sudo ufw enable sudo ufw allow 22/tcp @@ -20,6 +20,7 @@ sudo tuned-adm profile virtual-guest echo 'server: trust-anchor-signaling: yes root-key-sentinel: yes + tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt hide-identity: yes hide-trustanchor: yes @@ -86,6 +87,7 @@ BindReadOnlyPaths=-/dev/urandom:@UNBOUND_CHROOT_DIR@/dev/urandom BindPaths=-/dev/log:@UNBOUND_CHROOT_DIR@/dev/log' | sudo tee /etc/systemd/system/unbound.service.d/override.conf sudo systemctl restart unbound +sudo systemctl disable --now systemd-resolved sudo mkdir -p /etc/systemd/system/sshd.service.d sudo curl https://raw.githubusercontent.com/GrapheneOS/infrastructure/main/systemd/system/sshd.service.d/limits.conf -o /etc/systemd/system/sshd.service.d/limits.conf @@ -107,4 +109,4 @@ sudo curl https://gitlab.com/divested/brace/-/raw/master/brace/usr/lib/systemd/s echo "* hard core 0" | tee -a /etc/security/limits.conf # Enable fstrim.timer -sudo ystemctl enable --now fstrim.timer \ No newline at end of file +sudo ystemctl enable --now fstrim.timer