Alan Orth 8dd7663b3c

roles/common: Use Abuse.ch's SSL Blacklist in nftables ...

This adds Abuse.sh's list of IPs using blacklisted SSL certificates
to nftables. These IPs are high confidence indicators of compromise
and we should not route them. The list is updated daily by a systemd
timer.

See: https://sslbl.abuse.ch/blacklist/

2021-07-29 10:16:00 +03:00

..

etc

roles/common: Use nftables on Ubuntu 20.04 as well

2021-07-28 14:18:41 +03:00

nftables.conf.j2

roles/common: Use Abuse.ch's SSL Blacklist in nftables

2021-07-29 10:16:00 +03:00

public.xml.j2

roles/common: Add Spamhaus DROP lists to firewalld ipsets

2021-07-21 09:34:51 +03:00

rc.local_Ubuntu.j2

roles/common: Remove I/O scheduler logic from rc.local

2015-03-15 17:40:54 +03:00

security.sources.list.j2

roles/common: Update security.sources.list for cron-apt

2019-07-06 21:16:19 +03:00

sources.list.j2

roles/common: Fix sources.list for Debian 11 Bullseye

2021-07-26 21:12:05 +03:00

sshd_config_Debian-10.j2

roles/common: Increase ssh MaxAuthTries from 3 to 4

2019-09-15 15:17:00 +03:00

sshd_config_Debian-11.j2

roles/common: Add encryption settings to Debian 11 sshd_config

2021-07-24 22:28:59 +03:00

sshd_config_Ubuntu-18.04.j2

roles/common: Increase ssh MaxAuthTries from 3 to 4

2019-09-15 15:17:00 +03:00

sshd_config_Ubuntu-20.04.j2

roles/common: Update KexAlgorithms in Ubuntu 20.04 sshd_config

2021-07-22 12:57:31 +03:00

sysctl_Debian.j2

roles/common: Add sysctl template for Debian hosts

2015-08-23 00:12:17 +03:00

sysctl_Ubuntu.j2

roles/common: Remove logic for TCP congestion avoidance on early kernels in sysctl

2015-03-15 17:25:33 +03:00

tarsnap_sources.list.j2

roles/common: Use stable tarsnap

2019-09-13 22:14:49 +03:00