Commit Graph

266 Commits

Author SHA1 Message Date
moltenbit 75e4db1d00 Remove tls_force_sslv3 and tls_min_dh_prime_bits
#85 
Removed deprecated TLS configuration options.
2026-03-05 12:25:33 +01:00
moltenbit 1bab4999bd Merge pull request #132 from imthenachoman/fix/ntp-debian13
Fix/ntp debian13
2026-03-05 11:05:20 +01:00
moltenbit 522b606c4e Add note about ntp in Debian 13+
Update instructions for NTP client configuration on Debian 13+.
2026-03-05 11:02:09 +01:00
moltenbit bfa59bdb01 Add systemd-timesyncd setup instructions for Debian 13
Added instructions for using systemd-timesyncd on Debian 13 and later, including enabling NTP synchronization, configuring trusted NTP servers, and checking synchronization status.
2026-03-05 10:56:55 +01:00
moltenbit d22bb50c64 Fix typo in README regarding iptables logs 2026-03-05 08:40:35 +01:00
moltenbit ff39dc4edc Merge pull request #126 from Triveri/fix/broken-link-psad-iptables-logs
Fix broken link in PSAD section
2026-03-05 08:39:15 +01:00
moltenbit 3ddb700f90 Make RSA key size requirement optional
Make RSA key size requirement optional and added explanation.
2026-03-05 08:28:05 +01:00
DennisNikolay 20393606b6 Added RequiredRSASize to sshd_config (#123)
Enforces a minimum RSA key size of 3072, as recommended by various standards bodies, as detailed here:

https://www.keylength.com/en/compare/
2026-03-05 08:18:55 +01:00
moltenbit 0c67bbb078 Merge pull request #131 from Miquel-TA/patch-1
Added a brief explanation about ufw limit
2026-03-05 08:08:05 +01:00
Miquel TA a01b455d04 Added a brief explanation about ufw limit 2026-03-04 18:28:30 +01:00
Miquel TA e0f0e874f9 Update SSH connections explanation in README
Clarify the explanation for allowing SSH connections.
2026-03-04 18:25:09 +01:00
Triveri Samuele 1bf40ead23 fix: fixed broken link in PSAD section 2025-02-23 01:24:24 +01:00
IMTheNachoMan 2f856eba85 Merge pull request #122 from LaurenceJJones/add-crowdsec
Add crowdsec section
2024-10-19 16:10:33 -04:00
Laurence 356a69ae58 enhance: Spell check 2024-10-16 13:32:23 +01:00
Laurence bf8691c29c enhance: Try to fix tip 2024-10-16 13:28:02 +01:00
Laurence 8f8d99ee6f enhance: Try to fix tip 2024-10-16 13:27:10 +01:00
Laurence 59d947c4f2 enhance: Try to fix tip 2024-10-16 13:25:29 +01:00
Laurence b6be7dcbc8 enhance: Try to fix tip 2024-10-16 13:24:19 +01:00
Laurence b962cdd0f0 enhance: Try to fix tip 2024-10-16 13:23:05 +01:00
Laurence 7f26deb683 enhance: Try to fix tip 2024-10-16 13:21:53 +01:00
Laurence b834836045 enhance: fix tips 2024-10-15 22:11:29 +01:00
Laurence 928eb2de88 enhance: fix tips 2024-10-15 22:09:41 +01:00
Laurence 0b1f1cbf6b enhance: Add crowdsec section 2024-10-15 22:08:06 +01:00
IMTheNachoMan 0d29a5cc8c Merge pull request #120 from wevinkang/patch-1
Update README.md
2024-06-30 22:30:32 -04:00
Kevin Wang c836cbce79 Update README.md
Updated the full path for ntp.conf file.
2024-06-28 12:04:05 -04:00
IMTheNachoMan 81ae738ffd Merge pull request #114 from jxdv/readme-fix
README improvements
2024-04-11 21:57:35 -04:00
IMTheNachoMan f34170e867 Update README.md
https://github.com/imthenachoman/How-To-Secure-A-Linux-Server/issues/115
2024-02-24 09:03:02 -05:00
jxdv c2f8f2e42d README improvements 2024-01-08 17:43:44 +01:00
IMTheNachoMan a72f5f2123 Merge pull request #111 from t-h2o/secure-nginx
add misc recommendations about nginx
2024-01-06 13:30:20 -05:00
Your Name 6ec31b6344 add misc recommendations about nginx
There is not any section about web servers.
So you should probably create a section
about web servers.
2023-12-21 12:32:57 +01:00
IMTheNachoMan 437b59c515 Merge pull request #102 from hellresistor/AddDoublePasswordSec
Add panic/secondary password security
2023-12-04 17:39:07 -05:00
IMTheNachoMan 944d0e66b5 Merge pull request #101 from moltenbit/master
Added references to Ansible playbooks
2023-12-04 17:38:54 -05:00
mbit 74f1c2db8a updated references to my changed username 2023-12-04 20:31:19 +01:00
sysadt 3f20de98ba Merge branch 'imthenachoman:master' into master 2023-11-08 22:09:16 +01:00
IMTheNachoMan fe62dc3a11 Update README.md
https://github.com/imthenachoman/How-To-Secure-A-Linux-Server/issues/106
2023-10-01 22:06:26 -04:00
hellresistor 2a30412a28 Update README.md 2023-06-27 21:01:18 +01:00
sysadt 6832a167ec correction of link in TOC 2023-06-27 21:57:58 +02:00
sysadt d440add836 added section for Ansible playbooks 2023-06-27 21:56:59 +02:00
hellresistor c80f0c664f Update README.md
Add PAnic/Secondary password
2023-06-27 20:55:25 +01:00
sysadt cb61987ffb Added references to Ansible playbooks 2023-06-27 21:39:17 +02:00
IMTheNachoMan 04538ec63b Merge pull request #99 from nhedger/patch-1
Fix typo
2023-05-28 19:38:48 -04:00
Nicolas Hedger dc647d7ee1 Fix typo 2023-05-21 09:10:04 +02:00
IMTheNachoMan cc74e3e5a6 Update README.md 2023-04-29 13:30:04 -04:00
IMTheNachoMan 957ac09544 Merge pull request #94 from sysadt/master
Changes to ufw
2023-03-23 22:28:11 -04:00
IMTheNachoMan cf7b5681ed Merge pull request #96 from Bojan023/patch-1
Add cli command to check current sudoers on debian
2023-03-23 22:27:07 -04:00
IMTheNachoMan 87391f5eab clarified CIS recommendation
https://github.com/imthenachoman/How-To-Secure-A-Linux-Server/issues/97
2023-03-23 22:25:58 -04:00
Bojan Bogojevic 17bc162d48 Add cli command to check current sudoers 2023-03-22 12:12:49 +01:00
sysadt 6ec89c07c8 wording to "deleting ufw rule"
title
2023-02-22 22:20:07 +01:00
sysadt 0df0fdbe28 Changes to ufw
1. added section about deleting ufw rules
2. changed wording in the ufw comments from "allow traffic out on port" to "allow traffic out to port". IMO the "on" sounds like opening source ports
3. added mail to common use-cases with ports 25 and 587
2023-02-22 22:16:02 +01:00
IMTheNachoMan 8f78e027e9 Merge pull request #91 from SuperLanceur/patch-1
Changed the order of settings in #iptables-intrusion-detection-and-pr…
2023-02-04 22:56:07 -05:00