|
83b4eec406
|
Remove leftover OCSP code
|
2024-07-26 07:28:50 -07:00 |
|
|
1b00f35f8f
|
Remove OCSP from certbot command
|
2024-07-26 06:57:55 -07:00 |
|
|
f2f21b3015
|
Remove OCSP Stapling
|
2024-07-26 06:55:05 -07:00 |
|
|
636c9a92e9
|
Use mainline NGINX
|
2024-07-26 06:54:07 -07:00 |
|
|
4cbbad5a7f
|
Add mainline NGINX repo
|
2024-07-26 05:51:18 -07:00 |
|
|
d96f5a70da
|
Update modprobe url and bug fixes
|
2024-07-26 04:59:01 -07:00 |
|
|
e04febb0fe
|
Add set -u
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-20 18:23:38 -07:00 |
|
|
ba6116bf6f
|
Remove unnecessary command
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-09 22:46:07 -07:00 |
|
|
d434af04b4
|
Not overwrite USERGROUP_ENAB on anything but Ubuntu
The nonsense with umask is introduced by Canonical's infinite wisdom: https://git.launchpad.net/ubuntu/+source/pam/tree/debian/patches/pam_umask_usergroups_from_login.defs.patch?h=ubuntu/noble
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583958
We don't need to break sensible distributions because of Ubuntu nonsenses
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-09 15:07:40 -07:00 |
|
mce0
|
4809dcb4ce
|
Fix typo and notices (#15)
* Fix typo in Fedora-Server-40.sh
Signed-off-by: mce0 <contact@mce0.dev>
* Fix notices in Fedora-Server-40.sh
Signed-off-by: mce0 <contact@mce0.dev>
---------
Signed-off-by: mce0 <contact@mce0.dev>
|
2024-07-08 11:10:27 -07:00 |
|
|
9f429d1b75
|
Remove unnecessary groups
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-05 14:30:48 -07:00 |
|
|
55c1da3f33
|
Clarify Drupal documentation
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-03 13:37:23 -07:00 |
|
|
b0baa5a3c1
|
Bug fixes on Ubuntu
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-03 08:18:57 -07:00 |
|
|
fe4205fe45
|
Suppress curl output
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-03 02:23:28 -07:00 |
|
|
0b25901b86
|
Add set -e
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-02 16:48:15 -07:00 |
|
|
5aa7838940
|
Remove unnecessary commands
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-02 15:50:44 -07:00 |
|
|
4c9c1150be
|
Consistency fix
|
2024-07-02 15:14:43 -07:00 |
|
friendly-rabbit-35
|
ce964bcfe4
|
Fix typos in README (#13)
Fix typos in Readme
Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>
|
2024-07-02 02:18:21 -07:00 |
|
|
fab1de02fd
|
Add notes on io_uring
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-01 17:56:13 -07:00 |
|
|
98a59dec9a
|
Reorganization
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-01 17:52:06 -07:00 |
|
|
97e596463a
|
Remove extra line
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-01 17:28:11 -07:00 |
|
|
3be6ad0817
|
Even more SSHD Hardening
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-01 14:03:54 -07:00 |
|
|
5eb1eea440
|
Allow Root login on Proxmox
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-01 13:45:00 -07:00 |
|
|
a6a4f3085b
|
More SSH Hardening
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-01 13:42:21 -07:00 |
|
|
70f007a264
|
More hardening options
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-01 12:57:20 -07:00 |
|
|
55db69f9e2
|
Update SSH Hardening
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-07-01 12:36:36 -07:00 |
|
|
563101601e
|
Use upstream certbot-ocsp-fetcher
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-30 12:47:13 -07:00 |
|
|
aaa26ae2b9
|
FIx Drupal security headers
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 21:01:57 -07:00 |
|
|
71eff3c907
|
Fix permissions
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 17:27:19 -07:00 |
|
|
3c8d0df520
|
Add more instructions
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 17:18:35 -07:00 |
|
|
dcdad473bf
|
Cleanup instructions
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 16:11:09 -07:00 |
|
|
6c5b398620
|
Bug fixes & instructions for Drupal
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 15:27:01 -07:00 |
|
|
87c18d4de2
|
Add cross-origin-security
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 12:25:13 -07:00 |
|
|
9835d65dde
|
Remove old comment
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 12:13:26 -07:00 |
|
|
c2ef5743a2
|
Improve unbound systemd hardening
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 12:12:54 -07:00 |
|
|
af99058f4e
|
Fix incorrect file permissions
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 11:26:30 -07:00 |
|
|
359d9a5fc1
|
Manual installation of mariadb-client not required
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 11:01:11 -07:00 |
|
|
1467625dbf
|
Typo fix
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 10:57:40 -07:00 |
|
|
4651135596
|
Add missing sudo
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 10:50:32 -07:00 |
|
|
afe921fd0c
|
Typo Fix
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 10:28:27 -07:00 |
|
|
67e2496435
|
Make sure snap is installed
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 10:07:45 -07:00 |
|
|
3ff024e21b
|
Make sample script also POSIX compliant
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-26 00:12:29 -07:00 |
|
|
e3104f037f
|
POSIX Compliance
Signed-off-by: Tommy <contact@tommytran.io>
|
2024-06-25 22:24:45 -07:00 |
|
|
a49ecc7dd5
|
Make sure NGINX works
|
2024-06-24 23:57:20 -07:00 |
|
|
d0b40688a9
|
Trim down configs
|
2024-06-24 23:37:41 -07:00 |
|
|
e0d297afa7
|
Add more .sources samples
|
2024-06-24 23:35:41 -07:00 |
|
|
baeaf3a01d
|
Port NGINX configs
|
2024-06-24 23:23:41 -07:00 |
|
|
deb4cf4ce7
|
Use snap certbot
|
2024-06-24 23:12:53 -07:00 |
|
|
ba4f51674a
|
Add MariaDB
|
2024-06-24 23:06:38 -07:00 |
|
|
00c53f3ee8
|
Initial code for Ubuntu LEMP stack
|
2024-06-24 22:38:51 -07:00 |
|