06fce3eb9d
Add rsyslog
2021-06-25 18:25:42 +00:00
f01114ea91
Enable hfilter in filter list
2021-06-24 19:04:58 +00:00
57293a6ce7
Shorten rules and fix behaviour of meters
2021-06-20 14:20:08 +00:00
ae88d3bee0
Update fastd
2021-06-20 13:10:32 +00:00
dd74783d21
Add nftables package
2021-06-19 22:08:51 +00:00
66119adcb7
Remove the weight in cases of maillist where forged s/r are found
2021-06-13 08:51:46 +00:00
26a29bebc6
Add hfilter module and tweak scores to be more aggressive where it makes sense
2021-06-13 08:48:19 +00:00
cfe58df4ef
Change a few limits and links
2021-06-10 19:18:27 +00:00
fda31ec2b5
Use net hashmaps and add global conntrack
2021-06-10 18:50:22 +00:00
640a53ab8c
Fix mumble -> murmur dep
2021-06-06 21:23:59 +00:00
6e7375f411
Enable variable checks and add comment
2021-06-06 18:24:09 +00:00
2c3d7d87a9
Sort and tweak transmission options
2021-06-06 18:17:00 +00:00
587d280601
Add telegraf monitoring for postgresql
2021-06-06 14:26:46 +00:00
ebbd2096e7
Optimize hashlimits, add back http/https hashlimit and change openrc service to use iptables_name
2021-06-04 18:32:14 +00:00
420ba97b1c
Add modular firewall service and configuration
2021-06-04 17:17:43 +00:00
f4c69253fc
Remove monerod
2021-06-02 18:54:42 +00:00
b81dfb8fd0
Make configurations public
2021-06-02 18:39:27 +00:00
eef6f2dd65
Change inclusion paths
2021-06-02 18:20:04 +00:00
417d6b0c7e
Fix compatiblity level
2021-06-02 18:02:34 +00:00
4446a2e795
Depend on the proper package
2021-06-02 17:52:11 +00:00
9b9516b74c
Change hba for postgresql
2021-06-02 17:51:37 +00:00
82113690fa
Allow all traffic by default on private interface
2021-06-02 15:59:50 +00:00
67cb0bb508
Separate zones from modules and add automatic unbound module
2021-06-02 15:58:23 +00:00
603f40fa90
Fix depends and bump version
2021-06-02 13:09:00 +00:00
8df9fdc4ab
Reorganization, automation and more
...
- More templating and inheritance
- New commands
+ rx_replace
+ rx_install
+ rx_cpkgdir
- More transparency with secrets being sourced as variables and replaced
- Modularization of configs
+ telegraf
+ nginx (partial)
+ fastd
+ wireguard
+ unbound
- Split of unbound configurations and bind zones
- Bumping of key versions (rolling keys)
+ ZSK/KSK
+ OpenDKIM
- Relaxed permission defaults
and other smaller tweaks...
2021-06-01 23:17:41 +00:00
9a0ae5369c
Change key for user
2021-05-17 23:25:47 +00:00
f4e46bcabc
Add new node for user
2021-05-17 23:20:41 +00:00
5a8b010756
Add new user to wireguard
2021-05-17 22:23:23 +00:00
2eb73196b1
Add BIRD
2021-05-12 21:12:27 +00:00
03fad4a6cf
Cache pages for just 10 minutes
2021-05-08 17:06:42 +00:00
88f91d7db2
Update configs to have private link
2021-05-03 18:30:12 +00:00
d5cd9ac3a6
Disable redxen custom theme
2021-04-30 12:42:36 +00:00
53b6e3c5ca
Use default theme as fallback for now
2021-04-30 10:48:40 +00:00
79654edcaf
Update certs
2021-04-30 10:46:47 +00:00
ec828f972e
Update ports and add new records
2021-04-29 16:23:17 +00:00
142af2d8b1
Use global bayes patterns
2021-04-13 21:47:20 +00:00
d8fa79f11e
Ignore cases where the mailing list software doesn't rewrite To: (9front.org)
2021-04-08 19:53:05 +00:00
2d228098ba
DNSSEC tweaks
...
- Add package to generate KS and ZS keys
- Clean up the build
- Generalize domain support
2021-04-08 00:39:17 +00:00
551ea8337d
Tweaks to spam filter
...
- Make backlists and whitelists more useful
- Enable ARC
- Enable DNSSEC
- Tweak few things
- Enable some missing RBLs
2021-04-08 00:36:56 +00:00
66caaabd6d
Weigh SORBS less as it contains all kinds of spam (even potentially wanted)
2021-04-07 17:20:32 +00:00
a6a45932ce
Add priority nodes for faster sync
2021-04-05 19:26:36 +00:00
a3f6117a2a
CRXN records update for reddawn648 and deavmi
2021-04-04 17:00:34 +00:00
2645f0a8c9
Add some more optimizations from mineclone2 sample config
2021-04-02 22:22:54 +00:00
2c8a462863
Enable client modding and add heavy optimizations
2021-04-01 16:12:17 +00:00
09f5909ed3
Add minetest configs and records
2021-03-30 09:22:26 +00:00
55bd1afc75
Add SORBS rbl
2021-03-28 16:37:05 +00:00
35ac79050d
Add dkim fixed dates
2021-03-28 16:36:08 +00:00
84d8e7df16
Remove extra allowed SPF addresses
2021-03-21 12:33:40 +00:00
8de1e05ed4
Hold valid DNS results for longer in the cache
2021-03-20 17:48:22 +00:00
ab0792e666
Proxy MoneroD RPC via haproxy
2021-03-20 13:20:26 +00:00
