Commit Graph

167 Commits

Author SHA1 Message Date
dc9f8b0ab5 sort sshd_config 2015-09-06 08:12:41 +03:00
c3f351d21f sshd_config: add commented AcceptEnv
and reason why it's commented, security, ShellShock worked with remotely
sent environent variables even with restricted accounts.
2015-09-06 07:33:32 +03:00
90c86466dd ssh_config: also sendenv LANGUAGE 2015-09-06 07:30:41 +03:00
6fc4b6a29b ssh_config: add missing dot 2015-09-05 23:50:31 +03:00
28c2f0b8d8 ssh_config: SendEnv LANG LC_* 2015-09-05 23:46:00 +03:00
c50516ced3 etc/xdg/autostart: add redshift-gtk 2015-09-05 22:57:45 +03:00
c2b93abe27 relevant systemd services: after network-online 2015-09-05 09:07:41 +03:00
bd3ee60e61 ssh_config: fix paste fail 2015-09-02 08:33:02 +03:00
66f604a6dd ssh_config: add UpdateHostKeys yes 2015-09-02 08:15:16 +03:00
c05b52354f sshd_config: restore Client*
I am sure I committed them already, but they have disappeared somewhere.
Maybe I accidentally overwrote them.
2015-09-01 17:37:33 +03:00
888686ef48 etc/ssh/copy: add verbosity 2015-09-01 17:32:56 +03:00
c2c0c4fa08 etc/ssh: add copy script 2015-09-01 17:31:42 +03:00
25bf96e30a ssh_config: my ssh key is not system-wide 2015-09-01 17:16:37 +03:00
96dfc06668 ssh_config: remove unrelated comments 2015-09-01 17:06:33 +03:00
defa0b9df1 etc/ssh: add ssh_config 2015-09-01 16:48:27 +03:00
4cdf8dfe71 sshd_config: add ClientAliveCountMax ClientAliveInterval 2015-09-01 16:40:56 +03:00
73e9e99d9c sshd_config: cleaning up 2015-08-30 16:54:21 +03:00
c922d0aa37 etc/ssh/sshd_config: fix banner 2015-08-28 19:25:26 +03:00
7e4bbfba5a sshd_config: also remove ecdsa keys 2015-08-28 14:29:34 +03:00
04df2e532b update sshd_config from Arch
OpenSSH 7.1p1-1

Note the sftp subsystem which differs between at least Debian and Arch.
2015-08-28 14:00:25 +03:00
f69a361ed1 sshd_config: deprecate dsa 2015-08-28 13:54:36 +03:00
ae6651cd47 systemd: add reflector.service 2015-08-25 14:13:44 +03:00
7ff510b42b add etc/install
Closes #74
2015-08-22 15:10:01 +03:00
bec7aced22 etc/systemd/system: README updates 2015-08-21 19:27:40 +03:00
76633ba61d add etc/unbound/dnscrypt-proxy.conf 2015-08-21 19:16:12 +03:00
18931c320a add dnscrypt proxy services
Thanks @Fusl

Fixes #63
2015-08-21 19:09:39 +03:00
dc5531dfcd cleaning etc/systemd/system 2015-08-21 19:06:11 +03:00
c4dcb39b8c nginx: remove the neverused vhost 2015-08-20 20:47:18 +03:00
3a32185433 etc/nginx/sites-availble: add X-Frame-Options 2015-08-20 20:36:32 +03:00
a06465d161 unbound: move forwards.conf under unbound.conf.d 2015-08-20 18:39:40 +03:00
2ab0601c8d systemd: remove dnscrypt-proxy & add miredo 2015-08-20 18:29:00 +03:00
3065c552da resolv.conf: add ::1 anyway 2015-08-20 15:24:57 +03:00
c8dcba24a3 major cleaning 2015-08-20 15:22:22 +03:00
baff3f7dd1 clean resolv.conf 2015-08-20 15:09:13 +03:00
e3b067cf5d etc/resolv.conf: swap Google DNS
I prefer them to be in order primary and seconary if I use both and as
IPv6 is above it should be the primary making IPv4 below secondary.
2015-08-16 12:07:59 +03:00
a55ab90ca3 resolv.conf: replace OpenDNS with Google
If both Google servers go down, there are still the others which unbound
that I run on all devices is using.
2015-08-16 12:05:50 +03:00
f6b562f517 comment on etc/resolv.conf 2015-08-16 11:30:06 +03:00
518a5c2a17 sources.list: add (Ubuntu) devel 2015-08-06 12:01:21 +03:00
93d775c3a5 fix etc/profile.d/mikaela.sh 2015-07-29 10:16:30 +03:00
632f2f2b6b sources.list: clean Ubuntu ones 2015-07-29 10:04:54 +03:00
741c6a8571 sources.list/ubuntu: add commented proposed
Closes #79
2015-07-28 19:23:48 +03:00
aeeed423df sources.list/ubuntu: coment ddebs 2015-07-28 19:09:26 +03:00
95dc6cfa17 sources.list: ubuntu: add ddebs.ubuntu.com
https://wiki.ubuntu.com/DebuggingProgramCrash
2015-07-28 19:06:38 +03:00
fa44f85e48 sources.list: chmod +x install* 2015-07-28 18:59:03 +03:00
6b527a87cb sources.list: 14.10 is EOL 2015-07-24 09:06:19 +03:00
2ba606cce6 nginx: HSTS: subdomains & preload 2015-07-22 12:55:51 +03:00
ff94369b6d sources.list/README: add missing rm 2015-07-12 11:52:28 +03:00
93e5eab3f5 sources.list: fix install scripts 2015-07-12 11:39:41 +03:00
b4f3ac370e sources.list/install: add missing shebang 2015-07-12 11:36:38 +03:00
87ffc8515e sources.list: improve README 2015-07-12 11:35:53 +03:00
8783d0d5b7 sources.list: add install scripts
Closes #78
2015-07-12 11:26:47 +03:00
2fd3c3986b sources.list: add README & touch scripts
ref: #78
2015-07-12 11:21:38 +03:00
60402c6999 sources.list: add forgotten stretch 2015-07-12 11:06:03 +03:00
abc4060a3a sources.list: add sid so both scripts work 2015-07-12 11:03:51 +03:00
6400fd909e sources.list: rename debian* to codenames
So they are compatible with the function which uses `lsb_release -sr`.
2015-07-12 10:51:19 +03:00
f98e2a4375 somewhat rewrite etc/oidentd.conf 2015-07-09 10:48:28 +03:00
cf13b0faaf sources.list/squeeze: add squeeze-lts 2015-07-07 17:10:43 +03:00
b16ae44601 Revert "services: remove unneeded pidfiles"
This reverts commit 98093edc99.

* * * * *

They aren't needed if systemd starts the service, but what if user
services are used together with cron and liching isn't allowed?
2015-07-07 10:10:10 +03:00
b6969cd7fe rm debianu as git didn't like it 2015-07-06 15:22:23 +03:00
0a8c630265 http.debian.net --> httpredir.debian.org
I was told that it moved and moving to debian.org means that it's now
officially supported :)
2015-07-06 15:18:25 +03:00
fe1890ea34 debianu --> sid & ln -s sid debianu
sid makes more sense and as it has static codename, why to not use it?
2015-07-06 15:08:42 +03:00
805f669954 sources.list: add supported Debians
also remove the top line and add debianu for unstable.
2015-07-06 15:05:31 +03:00
6cb22a6de2 sysctl/60-mikaela.conf: mention systemd-networkd 2015-06-24 16:09:05 +03:00
a5de194c6f fix sysctl.d/60-mikaela.conf
EUI-64, not SLAAC & privacy extensions for all
2015-06-24 15:12:11 +03:00
1f1d071e5e systemd/network: rename enp… eth0 & timesyncd 2015-06-07 19:12:15 +03:00
47b05e1bd9 fix aliendalvik-stopper.service 2015-05-27 12:09:31 +03:00
4391fb5c19 systemd: aliendalvik-stopper 2015-05-27 12:00:35 +03:00
bf03a22823 systemd/system: update README
https://wiki.freedesktop.org/www/Software/systemd/NetworkTarget/#cutthecraphowdoimakenetwork.targetworkforme
2015-05-23 11:29:18 +03:00
3370327db0 ydns-simple service & timer 2015-05-22 20:15:23 +03:00
9ac3c776d7 sysctl.d: net.ipv6.conf.default.use_tempaddr 2015-05-14 19:04:35 +03:00
e512759368 fix resolv.conf 2015-05-14 00:16:49 +03:00
e660ec9b21 resolv.conf: use IPv4 localhost
because of the other files I added maybe in previous commit
2015-05-13 22:27:22 +03:00
17b5596d80 etc: dnscrypt 2015-05-13 22:20:28 +03:00
8e952350e7 etc/resolv.conf: don't be so verbose 2015-05-13 20:52:48 +03:00
b761f8f5ed add etc/resolv.conf 2015-05-13 20:49:35 +03:00
cbbd9dcf2c nginx/host: enable HSTS 2015-05-12 18:41:24 +03:00
8e433e3660 etc/xdg/autostart: README, linphone, redshift§ 2015-05-08 09:08:30 +03:00
43af7aef52 sources.list: rm ubuntu 2015-05-05 07:56:39 +03:00
adb361bc0e sources.list: 15.10 2015-05-05 07:56:11 +03:00
a9eaecf61c unbound: add dns.watch & puntcat 2015-05-01 17:05:58 +03:00
0510858a0d etc/unbound: remove non-DNSSEC resolvers 2015-05-01 15:10:49 +03:00
e9ad27c7ff etc/systemd/network: add enp0s18.network
from Rbtpzn
2015-04-29 10:41:42 +03:00
9e37b3b2d8 etc: nsswitch.conf, not fully 2015-04-28 13:14:25 +03:00
27d24a81b1 copy ipv6 services 2015-04-23 22:38:30 +03:00
3d54d51c24 rm dnsmasq & fedora
I am not using either. The only Fedora here was Pidora and it has died
some time ago and the project is a little slow.

I am currently wondering whether to start learning FreeBSD by putting it
on the Pi.
2015-04-22 22:50:54 +03:00
f74a76250b Rename Manjaro --> Arch
I didn't ever try Manjaro outside of Virtualbox and I have learned that
Manjaro is not good. I am currently using Antergos which is Arch + one
custom repo, so I feel I can rename to Arch.
2015-04-22 22:42:01 +03:00
146738e147 etc: add oidentd.conf
This file is not shipped on Arch.
2015-04-22 22:27:24 +03:00
3b976e3cd4 move sysctl from \*rc functions to etc/sysctl.p/ 2015-04-22 22:20:30 +03:00
9d5721899e systemd units: add oidentd.socket
With my sysctl config oidentd is IPv6 only unless `BindIPv6Only=both`
is added.
2015-04-22 22:12:06 +03:00
bb8d854150 NO MORE UNBREAKABLE SPACE! :D
(Serious commit messages™)
2015-04-10 18:36:06 +03:00
55e4921e64 etc/profile.d: copy from Antergos just in case 2015-04-08 20:08:07 +03:00
a5c9156eb4 sources.list/15.04: drop extras.ubuntu.com
It's dead
https://bugs.launchpad.net/ubuntu/+source/apt-setup/+bug/1409555
2015-04-05 23:21:44 +03:00
ca7f295036 map compose to left super 2015-03-23 09:17:02 +02:00
a2712ca422 etc: add x keyboard 2015-03-23 09:15:52 +02:00
8729f1cb37 Ubuntu 14.10 sources.list: fix Ubuntu MATE PPA
Ubuntu MATE decided to change their PPA and the install image most
likely will be missing this change, so I must add it here.

https://ubuntu-mate.org/blog/ubuntu-mate-utopic-ppa/
2015-03-19 21:54:35 +02:00
bf5409616a etc/nginx readme: add manjaro other than php 2015-03-13 15:40:24 +02:00
b1e1581fe3 unbound: add manjaro
closes #69
2015-03-13 15:08:19 +02:00
6457bc4361 unbound: add config for Pidora
ref: #69
2015-03-12 11:46:37 +02:00
6820fa23d7 fix unbound config files 2015-03-12 11:44:03 +02:00
d2e8d49ec2 unbound: disable OpenDNS
Missing DNSSEC causes my Pidora to SERVFAIL. Now checking if this is
cause of #69...
2015-03-12 11:33:52 +02:00