jerry/private-schrijfsels-en-notities
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

vault backup: 2025-08-30 12:15:30

Browse Source
This commit is contained in:
Jerry Jacobs
2025-08-30 12:15:30 +02:00
parent 5238d8ac61
commit 4feccd716c
2 changed files with 27 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
2025/durian.srv.xor-gate.org.md
View File

@ -1,7 +1,25 @@
## OS
* Debian 13 trixie AMD64
## Firewall
* Iptables (native)
* https://wiki.debian.org/iptables
* <https://packages.debian.org/trixie/iptables-persistent>
## VPN
Wireguard
## SSH
* Key only
* Key non-root only (global config)
* `PasswordAuthentication no`
* `PubkeyAuthentication yes`
* `PermitRootLogin no`
## Containers
The host OS will be kept clean and all services go into there respective containers. SystemD will be used for frugal container management:
* `systemd-container` pkg
* `systemd-nspawn` feature