701 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Tommy	ace87dc0af	Add missing -y for hardened_malloc removal on a LEMP stack ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-26 07:48:32 -07:00
Tommy	5a6e14ef9f	Fix SC2046 for RHEL-9-LEMP.sh ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-26 07:47:43 -07:00
Tommy	9c52039286	Add RHEL 9 LEMP setup	2024-07-26 07:28:58 -07:00
Tommy	83b4eec406	Remove leftover OCSP code	2024-07-26 07:28:50 -07:00
Tommy	1b00f35f8f	Remove OCSP from certbot command	2024-07-26 06:57:55 -07:00
Tommy	f2f21b3015	Remove OCSP Stapling	2024-07-26 06:55:05 -07:00
Tommy	636c9a92e9	Use mainline NGINX	2024-07-26 06:54:07 -07:00
Tommy	4cbbad5a7f	Add mainline NGINX repo	2024-07-26 05:51:18 -07:00
Tommy	d96f5a70da	Update modprobe url and bug fixes	2024-07-26 04:59:01 -07:00
Tommy	e04febb0fe	Add set -u ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-20 18:23:38 -07:00
Tommy	ba6116bf6f	Remove unnecessary command ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-09 22:46:07 -07:00
Tommy	d434af04b4	Not overwrite USERGROUP_ENAB on anything but Ubuntu ... The nonsense with umask is introduced by Canonical's infinite wisdom: https://git.launchpad.net/ubuntu/+source/pam/tree/debian/patches/pam_umask_usergroups_from_login.defs.patch?h=ubuntu/noble https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583958 We don't need to break sensible distributions because of Ubuntu nonsenses Signed-off-by: Tommy <contact@tommytran.io>	2024-07-09 15:07:40 -07:00
mce0	4809dcb4ce	Fix typo and notices (#15) ... * Fix typo in Fedora-Server-40.sh Signed-off-by: mce0 <contact@mce0.dev> * Fix notices in Fedora-Server-40.sh Signed-off-by: mce0 <contact@mce0.dev> --------- Signed-off-by: mce0 <contact@mce0.dev>	2024-07-08 11:10:27 -07:00
Tommy	9f429d1b75	Remove unnecessary groups ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-05 14:30:48 -07:00
Tommy	55c1da3f33	Clarify Drupal documentation ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-03 13:37:23 -07:00
Tommy	b0baa5a3c1	Bug fixes on Ubuntu ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-03 08:18:57 -07:00
Tommy	fe4205fe45	Suppress curl output ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-03 02:23:28 -07:00
Tommy	0b25901b86	Add set -e ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-02 16:48:15 -07:00
Tommy	5aa7838940	Remove unnecessary commands ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-02 15:50:44 -07:00
Tommy	4c9c1150be	Consistency fix	2024-07-02 15:14:43 -07:00
friendly-rabbit-35	ce964bcfe4	Fix typos in README (#13) ... Fix typos in Readme Signed-off-by: friendly-rabbit-35 <169707731+friendly-rabbit-35@users.noreply.github.com>	2024-07-02 02:18:21 -07:00
Tommy	fab1de02fd	Add notes on io_uring ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-01 17:56:13 -07:00
Tommy	98a59dec9a	Reorganization ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-01 17:52:06 -07:00
Tommy	97e596463a	Remove extra line ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-01 17:28:11 -07:00
Tommy	3be6ad0817	Even more SSHD Hardening ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-01 14:03:54 -07:00
Tommy	5eb1eea440	Allow Root login on Proxmox ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-01 13:45:00 -07:00
Tommy	a6a4f3085b	More SSH Hardening ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-01 13:42:21 -07:00
Tommy	70f007a264	More hardening options ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-01 12:57:20 -07:00
Tommy	55db69f9e2	Update SSH Hardening ... Signed-off-by: Tommy <contact@tommytran.io>	2024-07-01 12:36:36 -07:00
Tommy	563101601e	Use upstream certbot-ocsp-fetcher ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-30 12:47:13 -07:00
Tommy	aaa26ae2b9	FIx Drupal security headers ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 21:01:57 -07:00
Tommy	71eff3c907	Fix permissions ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 17:27:19 -07:00
Tommy	3c8d0df520	Add more instructions ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 17:18:35 -07:00
Tommy	dcdad473bf	Cleanup instructions ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 16:11:09 -07:00
Tommy	6c5b398620	Bug fixes & instructions for Drupal ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 15:27:01 -07:00
Tommy	87c18d4de2	Add cross-origin-security ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 12:25:13 -07:00
Tommy	9835d65dde	Remove old comment ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 12:13:26 -07:00
Tommy	c2ef5743a2	Improve unbound systemd hardening ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 12:12:54 -07:00
Tommy	af99058f4e	Fix incorrect file permissions ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 11:26:30 -07:00
Tommy	359d9a5fc1	Manual installation of mariadb-client not required ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 11:01:11 -07:00
Tommy	1467625dbf	Typo fix ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 10:57:40 -07:00
Tommy	4651135596	Add missing sudo ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 10:50:32 -07:00
Tommy	afe921fd0c	Typo Fix ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 10:28:27 -07:00
Tommy	67e2496435	Make sure snap is installed ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 10:07:45 -07:00
Tommy	3ff024e21b	Make sample script also POSIX compliant ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-26 00:12:29 -07:00
Tommy	e3104f037f	POSIX Compliance ... Signed-off-by: Tommy <contact@tommytran.io>	2024-06-25 22:24:45 -07:00
Tommy	a49ecc7dd5	Make sure NGINX works	2024-06-24 23:57:20 -07:00
Tommy	d0b40688a9	Trim down configs	2024-06-24 23:37:41 -07:00
Tommy	e0d297afa7	Add more .sources samples	2024-06-24 23:35:41 -07:00
Tommy	baeaf3a01d	Port NGINX configs	2024-06-24 23:23:41 -07:00