Alan Orth 8dd7663b3c roles/common: Use Abuse.ch's SSL Blacklist in nftables ... This adds Abuse.sh's list of IPs using blacklisted SSL certificates to nftables. These IPs are high confidence indicators of compromise and we should not route them. The list is updated daily by a systemd timer. See: https://sslbl.abuse.ch/blacklist/		2021-07-29 10:16:00 +03:00
..
etc	roles/common: Use nftables on Ubuntu 20.04 as well	2021-07-28 14:18:41 +03:00
nftables.conf.j2	roles/common: Use Abuse.ch's SSL Blacklist in nftables	2021-07-29 10:16:00 +03:00
public.xml.j2	roles/common: Add Spamhaus DROP lists to firewalld ipsets	2021-07-21 09:34:51 +03:00
rc.local_Ubuntu.j2	roles/common: Remove I/O scheduler logic from rc.local	2015-03-15 17:40:54 +03:00
security.sources.list.j2	roles/common: Update security.sources.list for cron-apt	2019-07-06 21:16:19 +03:00
sources.list.j2	roles/common: Fix sources.list for Debian 11 Bullseye	2021-07-26 21:12:05 +03:00
sshd_config_Debian-10.j2	roles/common: Increase ssh MaxAuthTries from 3 to 4	2019-09-15 15:17:00 +03:00
sshd_config_Debian-11.j2	roles/common: Add encryption settings to Debian 11 sshd_config	2021-07-24 22:28:59 +03:00
sshd_config_Ubuntu-18.04.j2	roles/common: Increase ssh MaxAuthTries from 3 to 4	2019-09-15 15:17:00 +03:00
sshd_config_Ubuntu-20.04.j2	roles/common: Update KexAlgorithms in Ubuntu 20.04 sshd_config	2021-07-22 12:57:31 +03:00
sysctl_Debian.j2	roles/common: Add sysctl template for Debian hosts	2015-08-23 00:12:17 +03:00
sysctl_Ubuntu.j2	roles/common: Remove logic for TCP congestion avoidance on early kernels in sysctl	2015-03-15 17:25:33 +03:00
tarsnap_sources.list.j2	roles/common: Use stable tarsnap	2019-09-13 22:14:49 +03:00