Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2025-08-05 05:37:20 +02:00
Code Issues Projects Releases Wiki Activity

Compare commits

base: Mikaela:42d084238025b015b3fe868db0eb6f9a81c39e0b
Branches Tags
Mikaela:cxefa
...
compare: Mikaela:c8189a3aa65b094b4425ca2862da97df5786dd11
Branches Tags
Mikaela:cxefa

3 Commits
42d0842380 ... c8189a3aa6

Author SHA1 Message Date
Mikaela Suomalainen
c8189a3aa6
chrony/yggdrasil.sources: update jolly-roger address 2021-08-08 00:07:01 +03:00
Mikaela Suomalainen
a7ea71ae38
chrony/conf.d: add cmd.conf 
Ref: #95

which this attempts to workaround and fails
 2021-08-07 23:56:38 +03:00
Mikaela Suomalainen
a43478e430
chrony: add broken NTS configuration 
Ref: #94
 2021-08-07 23:52:15 +03:00
4 changed files with 13 additions and 1 deletions
Show Stats Expand all files Collapse all files

1
etc/chrony/conf.d/allow-yggdrasil.conf
View File

@ -2,4 +2,5 @@
# Yggdrasil should protect from spoofing so this should be OK # Yggdrasil should protect from spoofing so this should be OK
# ufw allow from 0200::/7 to any port 123 proto udp # ufw allow from 0200::/7 to any port 123 proto udp
# NTS: ufw allow from 0200::/7 to any port 4460 proto udp
allow 0200::/7 allow 0200::/7

6
etc/chrony/conf.d/cmd.conf Normal file
View File

@ -0,0 +1,6 @@
# Broken workaround for https://gitea.blesmrt.net/mikaela/shell-things/issues/95
#bindcmddevice lo
#cmdallow all 127.0.0.1
#cmdallow all ::1
#cmdport 323

5
etc/chrony/conf.d/nts-server.conf Normal file
View File

@ -0,0 +1,5 @@
# Functioning as NTS server, these are usual TLS certificates from acme.sh
# Note the port 4460
ntsserverkey /etc/chrony/tls/etro.mikaela.info.key
ntsservercert /etc/chrony/tls/etro.mikaela.info.crt

2
etc/chrony/sources.d/yggdrasil.sources
View File

@ -10,6 +10,6 @@ server y.sedric.mikaela.info iburst auto_offline xleave
server y.zaldaryn.mikaela.info iburst auto_offline xleave server y.zaldaryn.mikaela.info iburst auto_offline xleave
server y.rbtpzn.mikaela.info iburst auto_offline xleave server y.rbtpzn.mikaela.info iburst auto_offline xleave
# jolly-roger @ Teknologia Avoimeksi Ry not a laptop, but not 24/7 either # jolly-roger @ Teknologia Avoimeksi Ry not a laptop, but not 24/7 either
server 203:b53c:86b8:880f:d049:7e63:8d7c:e270 iburst auto_offline xleave server 204:e3a7:47c0:f9a8:6c52:5cfc:5093:7f6b iburst auto_offline xleave
# Actual 24/7 VPS # Actual 24/7 VPS
server y.etro.mikaela.info iburst auto_offline xleave server y.etro.mikaela.info iburst auto_offline xleave